Re: Anyone interesting in building "immune" Linux machines?

[martin f krafft]

also sprach Tim Nelson <architect@webalive.biz> [2004.11.14.2354 +0100]:
> >define a configuration plan,
> 
>       I did a search for "debian configuration plan", and "debian FAI 
> plan", and didn't find anything.  Is there documentation on this?

"Plan your installation, and FAI installs your plans"

No, this is where you must do manual work. :/

>       Luke Kanies was looking at a cfengine/Debian based system, but I 
> don't know where he got to.

I have not yet arrived either. Unfortunately, FAI does not make it
easy to continue using cfengine afterwards (yet).

> >and of you go. If you want an immune machine, you have to
> >rely on high-quality packages and fast security updates that make
> >minimal changes. Only Debian provides that.
> 
>       ...for free.  Redhat seems to do that if you pay.

RedHat does not have hgh-quality packages. Or else you would not
screw up your system with x.0, tear out your hair when x.1 comes
out, basically reinstall x.2, until you finally get a working x.3.

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
 
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
spamtraps: madduck.bogus@madduck.net
 
echo '[dO%O+38%O+PO/d0<0]Fi22os0CC4BA64E418CE7l0xAP' | dc

signature.asc
Description: Digital signature