On Tue, 26 Mar 2024, at 04:30, Dan wrote:
> Eventually, having the kernel possibility to customize the config path
> from /etc in eg /heroxyz
> could be helpful for a firewall, what do you think?
Everything you to complicate ongoing admin will hinder your maintenance and IMO this will make your overall security posture worse, not better
Unless, perhaps, you have a system to rebuild the machine every time you want to update software and/or config? Cattle, not pets? I do this in cloud environments but it's rather more effort elsewhere
John
No comments:
Post a Comment