comments on handbook chapter
Tom Rhodes
trhodes at FreeBSD.org
Thu Sep 7 04:40:22 PDT 2006
On Thu, 07 Sep 2006 13:21:37 +0200
des at des.no (Dag-Erling Smørgrav) wrote:
> "Travis H." <solinym at gmail.com> writes:
> > ``You do not want to overbuild your security or you will interfere
> > with the detection side, and detection is one of the single most
> > important aspects of any security mechanism. For example, it makes
> > little sense to set the schg flag (see chflags(1)) on every system
> > binary because while this may temporarily protect the binaries, it
> > prevents an attacker who has broken in from making an easily
> > detectable change that may result in your security mechanisms not
> > detecting the attacker at all.''
>
> Uh? Since when do we have crap like that in the handbook? It should
> be removed with extreme prejudice.
>
Grepping three of these lines, I cannot find it. Tell me Travis,
what URL did you read this from?
--
Tom Rhodes
More information about the freebsd-security
mailing list