what's the current "standard" for tools to security harden fedora/RHEL?

Tim ignored_mailbox at yahoo.com.au
Wed Jun 17 03:19:27 UTC 2015


On Tue, 2015-06-16 at 14:29 -0400, Robert P. J. Day wrote:
> friend asked me about the most effective way to harden red hat
> systems

I'd venture to say that if they cannot use a computer safely (i.e. not
do unsafe things, themselves), that you can only have moderate success
with hardening the security (such as against outside threats that you
couldn't mitigate).

The user is usually the computer's worst enemy.  Running unknown code,
using untrustworthy software, turning off SELinux, ignoring error
messages, disabling the firewall, all because they get in the way, or
they take the simple route of not fixing a problem.

-- 
tim at localhost ~]$ uname -rsvp

Linux 3.19.8-100.fc20.i686 #1 SMP Tue May 12 17:42:35 UTC 2015 i686

All mail to my mailbox is automatically deleted, there is no point trying
to privately email me, I will only read messages posted to the public lists.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.



More information about the users mailing list