> What packages need to be removed from an installation to make sure
> that packages cannot be compiled on the system?  Obviously gcc is
> one, but what others?  I am going to have a system dedicated to
> building packages for all of the other systems.

I think the primary list is:

gcc*
*-devel

Of course this doesn't help with anything like java and python that compile
at runtime or in a vm.

> Is this an exercised best practice?

it is on any production system I'm allowed to exercise it on.

-greg

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to