root
User
Platinum Osdever
| Posts: 121 |   |
Karma: 1
|
Re: Debian Sarge frozen - 2005/06/10 23:49
Debian 3.1 is noticeably more security-conscious than other major distributions. You need the root password to mount removable drives or shut down the system. Similarly, as a minor obstacle to script kiddies, the root user cannot log in to a desktop. Nor are any unnecessary daemons configured, with the possible exception of atd.
Groups are also carefully organized. Debian 3.1 defines separate groups for basic system functions such as exim, crontab, and message bus, and membership in all groups is tightly controlled. The user account created during installation is added only to the video and plugdev groups. Users added after installation are not even added to those groups by default. Nor is any user included in the user or games groups, as they are in many distributions. The result is a system in which the security principle of least privilege is tightly observed. In other words, no user has more access to the system than is absolutely required unless it is deliberately added.
Strangely, Debian 3.1 omits enabling a firewall during installation. However, this lapse can be quickly remedied by running Bastille immediately after installation -- a step that anyone interested in security should consider anyway.
Users of Windows or commercial GNU/Linux distributions may find the security-consciousness of Debian 3.1 irksome. However, the inconveniences are small compared to the potential benefits. And, frankly, it's refreshing to see security chosen over convenience for once -- if only as a counter-example.
That's a step forward according to the fact that all Linux distros fail to have an easy to use security system by default, many developers not implementing for the sake of Linux flexibility.
However, since we are foulish asked if we want a server or a worstation setup, I think this is necesary. Personally, I'm a fan of custom setup as that's the only way to get more free space and less useless daemons.
|
Forums 
