[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: systmd-analyze security as a release goal



On Jul 04, Andrey Rakhmatullin <wrar@wrar.name> wrote:

> Cool but looks like a lot of work.
I do not think that this is really a lot of work.

> Is it possible to do this without
> applying the flags one by one and testing the result? Is it easier to
You may intimately know what the daemon needs to do and how the 
sandboxing features work, and be able to mentally create a correct and 
complete configuration.

> start with applying all of them and then looking what needs to be
> disabled?
This is what I do.

-- 
ciao,
Marco

Attachment: signature.asc
Description: PGP signature


Reply to: