Firewall/Router security (was Re: Minimal Install Option)
jaboutboul at speakeasy.net
Fri Aug 22 01:47:19 UTC 2003
On Friday, Aug 22, 2003, at 02:33 Asia/Jerusalem, Jesse Keating wrote:
> On Thursday 21 August 2003 16:13, Bill Anderson wrote:
>> In some cases it simply isn't feasible. It is not feasible for
>> example, for me to fly halfway around the world just to do that.
>> So SSH and krb are optional install, clearly neither are *needed* to
>> do firewall/router stuff. We make them options available to be
>> installed, but *not* part of a minimal *mandatory* install.
> I agree. There are 3 levels of inclusion to a group, such as minimal
> (which I assume is made up of @ Core and @ Base).
> There is <manditory> where it cannot be removed from the installation,
> <default> where it can be removed, but is included by default, and
> <optional> where it is part of the group, and can be included, but is
> not included by default.
> SSH/krb I believe should be <default>.
I'm not a big believer in krb, for a few reasons which are beyond the
scope of this discussion, but ill give it to you. Also snmp stuffs must
be default. We need to get down to working on a custom comps.xml file.
As soon as I have a chance to breathe (and sleep), I'll give it a ago.
More information about the test