[sllug-members]: Fedora Core 5 help wanted
Andrew GIlmore
agilmore at wirelessbeehive.com
Wed Sep 27 08:28:14 MDT 2006
On Tue, 2006-09-26 at 17:00 -0600, James Helsby wrote:
> A good place to start, if you are wanting to do it all yourself is here.
> http://www.howtoforge.com/perfect_setup_fedora_core_5
>
> Should guide you through most of the setup and security necessary,
> including how to configure your firewalls and ClamAV for virus scanning.
Of course, this "perfect setup" disables SELinux, which is not the
method I would pick to come up with a secure server for a paranoid
user. :(
"Disable SELinux
SELinux is a security extension of Fedora that should provide extended
security. In my opinion you don't need it to configure a secure system,
and it usually causes more problems than advantages (think of it after
you have done a week of trouble-shooting because some service wasn't
working as expected, and then you find out that everything was ok, only
SELinux was causing the problem). Therefore I disable it (this is a must
if you want to install ISPConfig later on)."
While I agree that SELinux does create an additional set of
complexities, it also does provide a bit more piece of mind.
Andrew
More information about the sllug-members
mailing list