Talk:Security Handbook

From Gentoo Wiki
Jump to:navigation Jump to:search
Note
This is a Talk page - please see the documentation about using talk pages. Add newer comments below older ones, sign comments using four tildes (~~~~), and indent successive comments with colons (:). Add new sections at the bottom of the page, under a heading (== ==). Please remember to mark sections as "open for discussion" using {{talk|open}}, so they will show up in the list of open discussions.

Security best practices for the year 2017

Talk status
This discussion is done as of 2022-02-04.

We'll use this section to keep track of best practices to be added or removed from the Security Handbook:

By topic:

  • ?
  • ?

— The preceding unsigned comment was added by Maffblaster (talkcontribs) 15:05, December 20, 2016‎

No need to leave this open. Abandoning the idea. The whole Handbook needs a large overhaul, which will require much research and time. It will be a large project unless you are a security expert. --Maffblaster (talk) 22:20, 4 February 2022 (UTC)

Unclear focus of this handbook

Talk status
This discussion is done as of 2022-02-04.

The focus of this security handbook isn't entirely clear to me. Quite a bit of information from this handbook has overlap with package-specific wiki-articles. Especially for inherent security packages, such as firewalls, intrusion detection, this confused me. What is the goal of this handbook in relation to the information on configuring a package securely that can be found in the package-specific articles? — The preceding unsigned comment was added by Samb (talkcontribs) 27 December 2016

I believe the goal of the handbook is general system security and best practices that cover the generic system administration tasks. This is a somewhat subjective and broad scope on purpose... really the scope is whatever the community wanted to contribute. That said, I originally migrated this handbook from our old web documents hoping that the Gentoo community would pick up the slack and start maintaining the document with current best security practices. Since that didn't happen, it may be best to delete the security handbook entirely since it's so unmaintained... --Maffblaster (talk) 22:31, 4 February 2022 (UTC)