Comments on From the Canyon Edge - :-Dustin Kirkland: Your Article is Incorrect: Linux Magazine

I have to agree with Tony Yarusso in regards to th...

2009-10-29T14:54:55.666-05:00

I have to agree with Tony Yarusso in regards to the /home permissions issue that the article raises. Even Apple's OS X sets permissions to 700 on users' home directories - this is true even if FileVault is not enabled. For ease of sharing files with other users of the system, OS X does include a "Drop Box" directory within each user's profile with permissions set to 733.

While the headline may be poorly chosen, I'd h...

2009-10-22T17:15:31.399-05:00

While the headline may be poorly chosen, I'd have to agree with magicfab on this one - the guy actually has a point. I'm not sure about all of the things he mentioned, but it does bother me that the default /home permissions are 755, encryption available or not. I'd rather see 700 default, and 700 with encryption as the option. If the argument is that would be confusing to home users, perhaps the server install CD should have a different configuration than the desktop CD.

Hi Justin- You can file a generic bug against Ubu...

2009-10-22T16:06:04.389-05:00

Hi Justin-

You can file a generic bug against Ubuntu at:
* https://bugs.launchpad.net/ubuntu/+filebug?no-redirect

Or, if you know the package specifically that it needs to be filed against (shadow in this case?):
* https://bugs.launchpad.net/ubuntu/+source/shadow/+filebug?no-redirect

You can subscribe me (kirkland) to it, if you like.

:-Dustin

Coming from a Slackware env. I'm surprised Ubu...

2009-10-22T15:38:23.533-05:00

Coming from a Slackware env.
I'm surprised Ubuntu would give /bin/sh to users that do not need an interactive login.

My first thought is that it is simply an oversight. I do see that /etc/shadow comes with the usual does of '*' and '!'. So someone was on the correct path, just apparently didn't finish.

Where does one post bugs for Ubuntu? This is one that should be easy to fix and is in need of being fixed.

With lots of love to the Ubuntu team,
Justin

Dustin I think you miss the point. We could have ...

2009-04-15T07:22:00.000-05:00

Dustin I think you miss the point.

We could have the safest choices be the default ones, but we don't.

Encryption should be enabled by default, not the other way around. I guess we'll eventually get to that mindset.

Perhaps a good sequel article would be "Ubuntu 9.04, first with full encryption and directory encryption" - which is as much as a stretch :)

Apparmor is techically crap. Tomoyo LSM added tru...

2009-04-15T06:39:00.000-05:00

Apparmor is techically crap.

Tomoyo LSM added true support for path based secuirty. Apparmor has not be updated to support it.

Could you please find out when Ubuntu is going to update Apparmor and send it mainline or are they going to keep on using a Mandorary access system that cannot pass review.

It's even more horrible than the dreaded Linsux Fo...

2009-04-15T01:32:00.000-05:00

It's even more horrible than the dreaded Linsux Format! (http://linsux.org/index.php?topic=948.0)

Makes you wonder what the headline would be if a d...

2009-04-14T23:41:00.000-05:00

Makes you wonder what the headline would be if a distro were to have a C grade, or even worse a D or F.

Elegant, correct and direct response. I wish the a...

2009-04-14T20:12:00.000-05:00

Elegant, correct and direct response. I wish the actually read it and learn a bit.

Great followup

2009-04-14T19:47:00.000-05:00

Great followup