VanLUG Email Archive
A Z (arek_z@yahoo.com)
Sun, 7 Mar 1999 11:34:44 -0800 (PST)
> It's still easier to install than Windows.
>
> Your faithful narrator,
> Roberto Pavan, rpavan@physics.ubc.ca
>
One thing (however small) is by default the passwords aren't shadowed.
It's just a simple command to change it to shadow, but still little
things add up.
Also (which I think lots of distros are gulity off) they open ports by
default that the new user isn't aware of or won't use. I think RH does
the rpc.mountd by default. The excess ports and such programs are an
open invitation to an attack, if the user configs linux for the net.
If the user isn't that "linux-savvy" they have these things open and
running without knowledge of them and maybe without using it. I think
by default they should be closed (commented out) and not started, and
if the user wants them, start them or uncomment them.
-arek
_________________________________________________________
DO YOU YAHOO!?
Get your free @yahoo.com address at http://mail.yahoo.com
This archive was generated by hypermail 2.0b3 on Sun 07 Mar 1999 - 11:34:12 PST