[sllug-members]: Fedora Core 5 help wanted

Andrew GIlmore agilmore at wirelessbeehive.com
Wed Sep 27 08:28:14 MDT 2006


On Tue, 2006-09-26 at 17:00 -0600, James Helsby wrote:
> A good place to start, if you are wanting to do it all yourself is here. 
> http://www.howtoforge.com/perfect_setup_fedora_core_5
> 
> Should guide you through most of the setup and security necessary, 
> including how to configure your firewalls and ClamAV for virus scanning.

Of course, this "perfect setup" disables SELinux, which is not the
method I would pick to come up with a secure server for a paranoid
user. :(

"Disable SELinux
SELinux is a security extension of Fedora that should provide extended
security. In my opinion you don't need it to configure a secure system,
and it usually causes more problems than advantages (think of it after
you have done a week of trouble-shooting because some service wasn't
working as expected, and then you find out that everything was ok, only
SELinux was causing the problem). Therefore I disable it (this is a must
if you want to install ISPConfig later on)."

While I agree that SELinux does create an additional set of
complexities, it also does provide a bit more piece of mind.

Andrew




More information about the sllug-members mailing list