Alen Salamun wrote:
> Charles Curley wrote:
> > Yes, they are the most common utils in the Unix world. Which is EXACTLY
> > why you don't want them on a server. If a cracker were to gain access,
> > would you want the cracker to be able to compile for your computer?
> >
> > For proper security, do your own compiling on some other computer and copy
> > the executables over. If you must compile on your server, install the
> > compiler as needed and remove it when you are done.
> Hi!
>
> Ohhh what a smart thing...It is SO HARD for a cracker to compile his
> hacking/cracking tool on other machine and move it to this
> one...Expecially on x86 architecture that is so uncommon...
>
> I have (almost) never saw a computer without c compiler on it...This is
> like having a screw-driver in a trunk of a car and saying, it will help
> a burglar to brake in...He can bring his own with him....
>
> Bye, Alen
> --
> *---------------------------------------------------*
> * E-Mail: Alen Salamun <[EMAIL PROTECTED]> *
> * LiNUX - The choice of GNU Generation! *
> *---------------------------------------------------*
I agree that it is VERY annoying without them, and, although I am not a newbie
by any means, I deny being an expert even more strongly, so I found it
difficult to install the correct packages - individual installs are no
problems, but knowing what to install is not always obvious. After spending
ages installing everything I could find, and still not getting gcc running, I
used the M$ solution & reinstalled the whole thing (selecting developer this
time!). I have since found that it was some header libaries (or something like
that) that I missed, but I wasn't on this list then!
Anyway - the point I wanted to make is that these utilities are so widely used
that surely they should be in every install except the high security ones.
Mandrake include a security option in their expert install, so it's my
suggestion that they use that. Certainly, a recommended or normal install
should have them present - how else can you install software that has not been
rpm'ed - since "normal" users will make a lot of use of them. Those who are
concerned about security can use that setting to exclude gcc, etc, from the
install.
Simple problem, lets all agree <g> on a simple solution, and perhaps Mandrake
will listen & do...
Trevor
