User: Password:
|
|
Subscribe / Log in / New account

Eee PC security or lack thereof

Eee PC security or lack thereof

Posted Feb 14, 2008 8:52 UTC (Thu) by mjcox@redhat.com (guest, #31775)
Parent article: Eee PC security or lack thereof

What doesn't help is that the iptables module is not available on the default Eee PC kernel,
so without a firewall the various services ASUS have enabled (samba, portmap, cups, ... ) are
open to the local network.


(Log in to post comments)

iptables vs chkconfig off

Posted Feb 14, 2008 10:16 UTC (Thu) by tialaramex (subscriber, #21167) [Link]

On a laptop though, it's unlikely that you have a multi-homed network scenario, so surely
"open to the local network" is basically only the alternative to "disabled". So in general
users who don't want services accessible to "the local network" should just switch those
services off altogether.

One thing I don't much care for (including in Red Hat's offerings) is adding a service,
enabling it by default, and then firewalling it so that no-one can use it. This is pointless.
Just disable the service by default, and eliminate whole classes of vulnerabilities at once.


Copyright © 2018, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds