Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
If I'm going to build a Linux From Scratch system, what is the best way to secure it after it has completed in terms of packages to include or disclude. I have a theory boiling and toiling around in my head; basically the foreign language (and this isn't a matter of sociology so hopefully no one will be offended) enhancements decrease security strength, as do libs which a person will not use, and that a program will not regularly use (or libs that include source which is not used or not used regularly).
I hope this makes sense. My reason for asking is that I wondered which of the packages in the LFS system build I should disclude after completion, which were necessary for the system to remain stable, and I'm talking about those which are not removed or placed in temporary directories post installation. For instance the man pages and relative databases seem like they are unimportant if I can just as easily surf the web.
I don't doubt that the LFS build aims at security; at the same time being that it is from scratch I do not know which packages I will want to include on my computer which will make it easier for me to learn not only Linux but computing altogether, as I am tutoring myself for the time being.
I looked at the polls and saw some programs but I am unfamiliar with them and wonder which programs the forum will suggest for beginners.
BTW: LFS needs to be installed as is, tinkering with it is possible but not recommended (especially when you are new at installing it). At certain points during the LFS install you do get options (see chap 6.9 glibc, the locale section, for example.).
Once you have done LFS and start with BLFS it is up to you to decide what you will or will not install.
it helped thanks. no i didn't look at the other more especial installations because I didn't want to get ahead of myself, when the question arose it did so based on the LFS build itself. more or less, I just wanted to know if programs like man-db and man pages, or internationalization packages are necessary. I ask particularly because for instance I uninstalled a software package for maintaining a mail server on my fedora distro, and it seemed to have crippled the update capability of fedora. The two didn't seem related to me. Thanks.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.