Re: Create a canned "Firewall Build"?

["Peter" <peter@easynix.com>]

That's a good one. A firewall shouldn't have any user accounts (besides
your own)
and on a firewall you shouldn't run anything besides nat and pf.
Otherwise it wouldn't
be a firwall anymore.
I'm kind of afraid to hear next that somebody is running smbd/nmbd on
his firewall :-)))
Peter

> >> Each user's files by default can be read by another user.  Change
the
> >> umask.
> >
> > irrelevant to system security.  so what if joe can read john's
files?
> > that's no closer to root.  the only umask that matters is root.  and
if
> > you're messing around as root, you should triple check everything
you do
> > anyway.
>
> if this is supposed to be a distribution of OpenBSD for firewalls, why
> would it have a bunch of users on the system whom you have to play
nanny
> to?
>
> --Matt