[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Developing on Debian



Jason Mock wrote:
> Philip,
> 
> Thank you again for your timely response.  On the security question, what we 
> are looking for is the built in security within the system.  Does debian have
> a built in firewall, Antivirus, or any other security features that help
> create a secure work environment?

Of course.

Here's an intro: http://www.debian.org/doc/manuals/securing-debian-howto/

For examples of relevant packages, one can do a few searches:

http://packages.debian.org/cgi-bin/search_packages.pl?searchon=all&keywords=virus

http://packages.debian.org/cgi-bin/search_packages.pl?searchon=all&keywords=firewall

http://packages.debian.org/cgi-bin/search_packages.pl?searchon=all&keywords=selinux

I'm sure you can come up with a few of your own -- have a play here:

  http://packages.debian.org/

Debian's current stable release contains a little over 15,000 packages,
which means we include pretty much every mildly useful Free Software
package in existence, including the security related ones.

Debian generally takes the approach that if you don't want a service, the
software that provides that service is not even installed on your system.
Since installing and removing packages is trivially easy, that's the
fastest way of turning services on and off -- it's difficult to exploit a
program that is not there.

The problems you're likely to face are mostly going to be things like
deciding  which of the many available virus scanning frameworks is the one
that suits you best.  (I'd go for MailScanner & clamav on that particular
question, but tastes differ)

I suggest you have a look around the various documents available on the web
site, and perhaps try putting any further questions you might have into
google -- the howto above, for example, is the first hit on google for a
search on "securing debian" (it's also in some way related to most of the
next 100 hits and beyond -- Debian material is widely available on the net)

Cheers, Phil.

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: