Re: phrack patch on OBSD 3.1

[Han <han@mijncomputer.nl>]

Dimitar (dvv@internet-bg.net) wrote:
>
> I am trying to set up a small box as a neighbourhood server  and  want
> to harden it a bit.

Default OpenBSD is really really hard. Adding patches won't do any good.
But some things can be gained by changing some settings like who can use
crontab, who can ping etc. Ie the kind of things you want to  change  if
your machine will be a  shell  server.  But  if  that  machine  is  your
personal machine with no other accounts... why bother.

For a tweaker OpenBSD is the ultimately boring OS. Better  subscribe  to
the securitty announcement-mailinglist so you  are  the  first  to  know
about any possible local exploits.



Cya, Han.