LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-03-2010, 12:29 AM   #1
forusword
Member
 
Registered: Apr 2010
Location: USA
Distribution: OpenSUSE
Posts: 70

Rep: Reputation: 15
lfs security packages


If I'm going to build a Linux From Scratch system, what is the best way to secure it after it has completed in terms of packages to include or disclude. I have a theory boiling and toiling around in my head; basically the foreign language (and this isn't a matter of sociology so hopefully no one will be offended) enhancements decrease security strength, as do libs which a person will not use, and that a program will not regularly use (or libs that include source which is not used or not used regularly).
I hope this makes sense. My reason for asking is that I wondered which of the packages in the LFS system build I should disclude after completion, which were necessary for the system to remain stable, and I'm talking about those which are not removed or placed in temporary directories post installation. For instance the man pages and relative databases seem like they are unimportant if I can just as easily surf the web.
I don't doubt that the LFS build aims at security; at the same time being that it is from scratch I do not know which packages I will want to include on my computer which will make it easier for me to learn not only Linux but computing altogether, as I am tutoring myself for the time being.
I looked at the polls and saw some programs but I am unfamiliar with them and wonder which programs the forum will suggest for beginners.
 
Old 04-03-2010, 04:16 AM   #2
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405
Hi,

Have you taken a look at HLFS??
And maybe this will help too: lfs-security -- LFS Security Discussion List

BTW: LFS needs to be installed as is, tinkering with it is possible but not recommended (especially when you are new at installing it). At certain points during the LFS install you do get options (see chap 6.9 glibc, the locale section, for example.).

Once you have done LFS and start with BLFS it is up to you to decide what you will or will not install.

Hope this helps.
 
Old 04-03-2010, 11:42 PM   #3
forusword
Member
 
Registered: Apr 2010
Location: USA
Distribution: OpenSUSE
Posts: 70

Original Poster
Rep: Reputation: 15
...

it helped thanks. no i didn't look at the other more especial installations because I didn't want to get ahead of myself, when the question arose it did so based on the LFS build itself. more or less, I just wanted to know if programs like man-db and man pages, or internationalization packages are necessary. I ask particularly because for instance I uninstalled a software package for maintaining a mail server on my fedora distro, and it seemed to have crippled the update capability of fedora. The two didn't seem related to me. Thanks.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Getting Packages of the LFS Disk Qwo Linux From Scratch 5 05-24-2006 03:01 AM
Note on LFS packages xushi Linux From Scratch 0 05-04-2005 03:55 AM
LFS all packages? blackzone Linux From Scratch 3 08-23-2004 12:25 AM
LFS 3.2 book, but LFS packages 3.0 CragStar Linux From Scratch 2 04-07-2002 03:15 PM
Latest LFS packages ca9mbu Linux From Scratch 6 01-23-2002 02:26 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:31 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration