Tuesday, March 26, 2024

Re: securelevel=2 and mount hardening

I'm curious John Doe.. you said cloud but not firewall, and cattle but not pets, right?

You are a strange anglophon western toddler..

-Dan

Mar 25, 2024 23:41:44 jslee <indigoid@oldcorollas.org>:

> On Tue, 26 Mar 2024, at 04:30, Dan wrote:
>> Eventually, having the kernel possibility to customize the config path
>> from /etc in eg /heroxyz
>> could be helpful for a firewall, what do you think?
>
> Everything you to complicate ongoing admin will hinder your maintenance and IMO this will make your overall security posture worse, not better
>
> Unless, perhaps, you have a system to rebuild the machine every time you want to update software and/or config? Cattle, not pets? I do this in cloud environments but it's rather more effort elsewhere
>
> John

No comments:

Post a Comment