News for hackers. Stuff that matters.
Re:Automatic server hardening framework by allendoerfer on Monday January 12, 2015 @01:38PM (#8875581)
Seems like a nice and comfortable way to set sane defaults for nginx, Apache, MySQL, PostgreSQL and some Unix stuff - but they really should have been set by each software in the first place.

I like, the private touch the screencast and the developer-designed website gives the project, even if part of a big company. This actually raises its credibility.

Re:Automatic server hardening framework by ams6110 on Monday January 12, 2015 @02:29PM (#8875881)
they really should have been set by each software

Yes, and it seems to me that distros (at least those intended for "enterprise") should be hardened by default also. If I install RHEL or OEL and then have to run a Chef or Puppet config to "harden" it, something is wrong.

Re:Automatic server hardening framework by jlawer on Monday January 12, 2015 @03:36PM (#8876261)
Well, thats been tried and rejected by the user base. If you harden too much it becomes a real PITA to do anything productive (SELinux running in strict mode).

RHEL aims to be secure, while also remaining fairly compatible with previous versions.

Red Hat do have documentation on how to harden, but most users don't use it and instead turn SELinux completely off as one of the first configuration steps.