From release notes for FC5T3 (web)

Les Mikesell lesmikesell at gmail.com
Tue Mar 7 16:25:22 UTC 2006


On Tue, 2006-03-07 at 09:40, Rahul Sundaram wrote:
  
> >
> Just having a  program with a security hole on disk through a 
> "everything" installation that you dont use is a potential problem that 
> leaves room for an exploit.

Which means that it will be found and fixed, which is pretty
much the point of delivering it in fedora in the first place.

> Basically dont install stuff that you wont 
> use and audit everything that you install and use carefully. SELinux 
> does go a long way towards preventing many of these issues but the 
> default targeted policy in Fedora doesnt restrict all the programs 
> unlike the alternative strict policy which might require a good amount 
> of customization for regular use.

The solution to security problems is to find and fix them and
make the developers aware of why they were problems so they
don't repeat them.  Anything less is just sweeping the dirt
under the rug.

-- 
  Les Mikesell
   lesmikesell at gmail.com





More information about the fedora-list mailing list