Re: Securing a Linux Firewall

[Frederick M Avolio <fred () avolio com>]

At 02:36 PM 7/23/02 -0400, Carson Gaspar wrote:
> OK - as someone who seems to represent the "remove the executables" camp, 
> can you explain your reasoning? I've never been able to understand _why_ 
> removing files buys you anything?


Sure. I'd not give an attacker any help. There is no good reason to leave a 
C compiler, grep, sed, awk, and perl lying around. No reason to include 
daemons  you never intend to run. Fewer things to worry about.

At 04:22 PM 7/23/02 -0400, Bruce Platt wrote:
> Fred is a belt-and-suspenders type, and it pays here.

Well, not since I lost weight. :-)

f

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards