stripping secure servers (was Re: releases and stuff)
archaic at linuxfromscratch.org
Mon Nov 15 14:52:39 PST 2004
On Mon, Nov 15, 2004 at 10:06:54PM +0000, Bennett Todd wrote:
> I've yet to try and set up a complex server this way, just some very
> simple ones --- pure http servers, dns servers, backup servers,
> things like that. Start a few service daemons and an sshd that can't
> do anything much interesting but update config files or content with
> hardwired rsync configs (rsync cmdline in authorized_keys).
What about cgi scripts or system management scripts? Would it be
sufficient to move sh to an unique location?
The American Republic will endure, until politicians realize they can
bribe the people with their own money.
- Alexis de Tocqueville
More information about the hlfs-dev