also sprach weakish <weakish@gmail.com> [2008.05.07.1028 +0100]:
> Use update-rc.d or sysv-rc-conf to disable unwanted daemons
disable by making them all K00 links
> logcheck
hardly a security measure.
> use integrit/aide/tripwire
only useful with read-only media
> You may consider chroot.
no security benefit
> It's a good idea to read through securing debian howto
yes!
--
.''`. martin f. krafft <madduck@debian.org>
: :' : proud Debian developer, author, administrator, and user
`. `'` http://people.debian.org/~madduck - http://debiansystem.info
`- Debian - when you have better things to do than fixing systems
"the pure and simple truth is rarely pure and never simple."
-- oscar wilde
Attachment:
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)