[gentoo-user] Lets push our disttro "Gentoo" UP - Cast your vote!

[gentoo-user] Lets push our disttro "Gentoo" UP - Cast your vote!

[Joseph]

Cast your vote!

Of the most popular DESKTOP Linux distro's (2007 Top List) , which is
the most secure?
http://www.linuxsecurity.com/component/option,com_poll/task,results/id,34/

-- 
#Joseph
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [OT] Lets push our disttro "Gentoo" UP - Cast your vote!

[Mick]

[-- Attachment #1: Type: text/plain, Size: 715 bytes --]

On Saturday 01 September 2007, Joseph wrote:
> Cast your vote!
>
> Of the most popular DESKTOP Linux distro's (2007 Top List) , which is
> the most secure?
> http://www.linuxsecurity.com/component/option,com_poll/task,results/id,34/

Hmm, I'm not sure.  The question is which *is* the most secure distro, not 
which can be made the most secure.  A vanilla Gentoo installation (I know 
there is no such thing with Gentoo) has no firewall installed.  Any 
application can open any port to the wind and especially with a poor security 
policy has the potential to expose the box to an attack.  More so than a 
binary distro Gentoo relies on an intelligent configuration to be secure.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] [OT] Lets push our disttro "Gentoo" UP - Cast your vote!

[Neil Bothwick]

[-- Attachment #1: Type: text/plain, Size: 803 bytes --]

Hello Mick,

> Hmm, I'm not sure.  The question is which *is* the most secure distro,
> not which can be made the most secure.  A vanilla Gentoo installation
> (I know there is no such thing with Gentoo) has no firewall installed.
> Any application can open any port to the wind and especially with a
> poor security policy has the potential to expose the box to an attack.
> More so than a binary distro Gentoo relies on an intelligent
> configuration to be secure.

On the other hand, a "vanilla" Gentoo installation could be considered a
bare Stage 3, which has so little software installed it has to be the
most secure. Which only goes to show how meaningless such polls are.


-- 
Neil Bothwick

"Bother" said Rue, as his paranoia spread across the publicly accessible
archives

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] [OT] Lets push our disttro "Gentoo" UP - Cast your vote!

[Guillermo Antonio Amaral Bastidas]

[-- Attachment #1: Type: text/plain, Size: 792 bytes --]

On Saturday 01 September 2007 00:52:58 Neil Bothwick wrote:
> Hello Mick,
>
> On the other hand, a "vanilla" Gentoo installation could be considered a
> bare Stage 3, which has so little software installed it has to be the
> most secure. Which only goes to show how meaningless such polls are.

  Well the question does include "DESKTOP Linux distro" that should go as far 
as X11 with a Window Manager, but heck any good sysadmin can make any distro 
secure. So your right, these polls just cause in fighing.

-- 
Guillermo Antonio Amaral Bastidas
# Free & Open Source Software Advocate
# KDE Developer: gamaral
$ irc: gamaral@freenode
@ blog: http://blog.guillermoamaral.com/
@ site: http://www.guillermoamaral.com/
% gpg: http://downloads.guillermoamaral.com/public.asc

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] [OT] Lets push our disttro "Gentoo" UP - Cast your vote!

[Dan Farrell]

On Sat, 1 Sep 2007 01:10:30 -0700
Guillermo Antonio Amaral Bastidas <me@guillermoamaral.com> wrote:

> > On the other hand, a "vanilla" Gentoo installation could be
> > considered a bare Stage 3, which has so little software installed
> > it has to be the most secure.

Also worth pointing out is since such a 'vanilla' stage3 would have
quite recent software, making it more likely that recently discovered
security holes have already been patched.  

For this reason I think gentoo is a good cantidate for 'most secure
distro', the point already having been made that such a distinction is
basically meaningless.  
-- 
gentoo-user@gentoo.org mailing list