On Sat, 2004-06-19 at 15:25, seg at haxxed.com wrote:
> > well, qmail because I'm used to it and because it's not sendmail. X
> > because I'm lazy and want to use gui configuration tools sometimes when
> > my other machine is off...is X just plain a bad idea, or can it be
> > sufficiently "battened down?" any links to docs for doing same?
> 
> I like Debian for servers, but I've been playing with Fedora Core 2 due to
> the out of the box SELinux. If you REALLY mean security give FC2 a go.
> Though SELinux support seems to be filtering its way into debian unstable
> now...
> 
> I don't know that X is a particular security risk, as long as it isn't
> exposed to the internet. You should be running a good firewall setup
> anyway. Though you don't have to run X on the server, you can just install
> the xlibs and run the GUI tools on a different box through SSH tunneling.
> 
> If you want GUI tools, Fedora's the way to go. Debian doesn't really have
> any. However Debian does have really nice text based config on its server
> packages through debconf, (which can actually run a X GUI front end too
> anyway...) whereas I find fedora just tends to plop down a raw
> /etc/whatever.conf and leaves you to it.
> 
> Anyway, Debian is really nice for servers, IMHO completely awful for
> desktop use. Fedora is awesome for desktop use, but not yet nearly as
> slick as Debian for servers.
> 
> _______________________________________________
> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
> Help beta test TCLUG's potential new home: http://plone.mn-linux.org
> Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
> tclug-list at mn-linux.org
> https://mailman.real-time.com/mailman/listinfo/tclug-list

I was hoping someone would suggest FC2 with SELinux...I've installed it
on a box at work, but haven't done much with it.

Used to run a server at work with RH8-something and LIDS on it, but at
the time it was pretty tedious to define policies for all the programs
that needed access to some portion of the filesystem, etc.

anyone had any experience with SELinux with a pretty barebones
webserver?

thanks
s

-- 
Steve Linabery <slinabery at worldcycling.com>
World Cycling Productions


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list