[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



As long as the XP weak link is out of the picture, SELinux makes the
system _VERY_ hardened from internal and external attacks.
> 
> 
> Unfortunately, that's not what my most current book is about.  I'll
> definitely look into it for the next one.
> 
> Jerald M. Sheets jr.
> Sr. UNIX Systems Administrator
> McKesson, Inc.
> (404) 293-8762
> **********
> >su -
> Password:
> # cat /dev/flood > /dev/earth
> # rdev noah+beasts
> # dd if=noah+beasts of=/dev/earth
> 
> PGP Key: 0x6267F183
> 
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.12
> GIT d+ s++: a C++++ UL++++ P++ L+++ E--- W++ N+ o-- K+ w-- 
> O M+ V PS- PE++ Y+ PGP++ t++ 5++ X+ R* tv- b+ DI++++ D++ 
> G+ e h---- r+++ y++++ 
> ------END GEEK CODE BLOCK-----
> 
> -----Original Message-----
&gt; From: ale-bounces at ale.org [<a  rel="nofollow" href="mailto:ale-bounces";>mailto:ale-bounces</a> at ale.org] On Behalf Of James P.
&gt; Kinney III
&gt; Sent: Monday, January 03, 2005 11:04 PM
&gt; To: Atlanta Linux Enthusiasts
&gt; Subject: RE: [ale] Distro Reply
&gt; 
&gt; I hope you are writing a book on how you did this, what the challenges were,
&gt; what problems you had to overcome, etc. This is EXACTLY the kind of stuff
&gt; that becomes more ammo for somewhere else to make the switch to sanity-based
&gt; systems. The medical community is in dire straits with HIPPA on one hand and
&gt; WinXP on the other. Several of my doctor clients are still using DOS apps
&gt; (they _do_ work) because the smaller stuff is still not HIPPA compliant. The
&gt; FOSS medical managment software is beta quality but some of it is very HIPPA
&gt; savy. It's getting the foot in the door...
&gt; 
&gt; On Mon, 2005-01-03 at 22:28, Jerald Sheets wrote:
&gt; &gt; But you have to understand, that to foster widespread acceptance of 
&gt; &gt; the Linuxes in the enterprise, we must drop our zealotry to a degree.  
&gt; &gt; (I had to learn this the hard way, and speak of myself here)
&gt; &gt; 
&gt; &gt; Something Microsoft has been so good at is embrace and extend.  In the 
&gt; &gt; Linux world, we still hav IT managers that were educated in the 60's 
&gt; &gt; and 70's and view Linux as nothing more than a toy.  If instead you 
&gt; &gt; approach them with a small entry (DNS server, for instance) and 
&gt; &gt; provide them all the trappings of their paid-for &quot;supported&quot; os, you've
&gt; won.
&gt; &gt; 
&gt; &gt; It doesn't matter that it isn't GNU/Linux.  It doesn't matter that 
&gt; &gt; it's &quot;Free and Open&quot;.  What matters to today's IT manager 
&gt; &gt; (decreasingly so) is that when Linux admin X gets pissed and leaves, 
&gt; &gt; he can call company Y to support solution Z.  That's all he cares about.
&gt; &gt; 
&gt; &gt; Again, from the ENTERPRISE perspective, we're newcomers to this game 
&gt; &gt; with something to prove.
&gt; &gt; 
&gt; &gt; 
&gt; &gt; When I was at Our Lady of the Lake hospital, when I arrived in 2001, 
&gt; &gt; there was *NO* Linux in house.  Not desktop, not server.  When I left, 
&gt; &gt; there was RH on RS6000/Power PC, a clustered HIPAA compliant patient 
&gt; &gt; radiology records system writing to Optical disks running on RH AS 
&gt; &gt; 3.x. (Which, incidently, was used in the first hospital in America 
&gt; &gt; going completely filmless in their entire radiology farm)  I had 2 DNS 
&gt; &gt; servers on IBM 435 machines with over 200 days uptime, running on RH 
&gt; &gt; 9.x.  The IBM p690 Regatta had a RedHat partition onboard, and we had 
&gt; &gt; Linux 390 on the mainframe.  Finally, the entire UNIX-based 
&gt; &gt; Administration team was running in a 100% linux desktop environment.  (11
&gt; people).
&gt; &gt; 
&gt; &gt; 
&gt; &gt; ALL SERVING HOSPITAL PRODUCTION ENVIRONMENTS.
&gt; &gt; 
&gt; &gt; My key to success in a Linux-hostile environ was to start slow.  The 
&gt; &gt; DNS servers were first.  We ran them in test for 6 mnths before they'd 
&gt; &gt; let me go live with them.  When I did, both machines were on IBM 
&gt; &gt; maintenance, and were running an (at the time) supported Linux system.  
&gt; &gt; I also had hardware flat out fail, and had *ZERO* downtime.  This type 
&gt; &gt; of event spoke VOLUMES.  Next, I upgraded everything to RH AS 3 before 
&gt; &gt; I left.  As of today, the Linux environments (as *we* would all be 
&gt; &gt; aware) have been the most stable, zero-maintenance environments 
&gt; &gt; in-house.  However, to Joe IT manager, this must be proven through 
&gt; &gt; time and trial.  You can't just run in and install Gentoo and hope it
&gt; works.
&gt; &gt; 
&gt; &gt; In my time at the hospital, I can count total downtime (unscheduled) 
&gt; &gt; within an afternoon's cofee-break time.  We *NEVER* went down without 
&gt; &gt; planning, and then only once (or less) a year.  At one point, our 
&gt; &gt; systems were up more than the mainframe (it has to come down for an 
&gt; &gt; hour tice a year for
&gt; &gt; time-change)
&gt; &gt; 
&gt; &gt; Why do I say all this?
&gt; &gt; 
&gt; &gt; While a simple throw-it and forget-it Linux system may be fine for Joe 
&gt; &gt; shopkeeper, it won't work in the Enterprise.
&gt; &gt; 
&gt; &gt; 
&gt; &gt; Don't take that as a slam.  It isn't.  It's real-world, eterprise 
&gt; &gt; (read
&gt; &gt; data-ceter) class expereience in mission critical (read patient's 
&gt; &gt; records and lives) data environments.  If we want to take over the 
&gt; &gt; world in the Linux arena (read, oust Microsoft) you have to start 
&gt; &gt; grassroots and enterprise simultaneously, and converge toward 
&gt; &gt; Microsoft's territory from both ends so their only place to go is the
&gt; margins...marginalized.
&gt; &gt; 
&gt; &gt; Thanks for listening.
&gt; &gt; 
&gt; &gt; Jerald M. Sheets jr.
&gt; &gt; Sr. UNIX Systems Administrator
&gt; &gt; McKesson, Inc.
&gt; &gt; (404) 293-8762
&gt; &gt; **********
&gt; &gt; &gt;su -
&gt; &gt; Password:
&gt; &gt; # cat /dev/flood &gt; /dev/earth
&gt; &gt; # rdev noah+beasts
&gt; &gt; # dd if=noah+beasts of=/dev/earth
&gt; &gt; 
&gt; &gt; PGP Key: 0x6267F183
&gt; &gt; 
&gt; &gt; -----BEGIN GEEK CODE BLOCK-----
&gt; &gt; Version: 3.12
&gt; &gt; GIT d+ s++: a C++++ UL++++ P++ L+++ E--- W++ N+ o-- K+ w-- O M+ V PS- 
&gt; &gt; PE++ Y+ PGP++ t++ 5++ X+ R* tv- b+ DI++++ D++
&gt; &gt; G+ e h---- r+++ y++++
&gt; &gt; ------END GEEK CODE BLOCK-----
&gt; &gt; 
&gt; &gt; 
&gt; &gt; 
&gt; &gt; 
&gt; &gt; 
&gt; &gt; 
&gt; &gt; -----Original Message-----
&gt; &gt; From: ale-bounces at ale.org [<a  rel="nofollow" href="mailto:ale-bounces";>mailto:ale-bounces</a> at ale.org] On Behalf Of 
&gt; &gt; Jeff Hubbs
&gt; &gt; Sent: Monday, January 03, 2005 9:43 PM
&gt; &gt; To: Atlanta Linux Enthusiasts
&gt; &gt; Subject: RE: [ale] Distro Reply
&gt; &gt; 
&gt; &gt; I guess what bothers me about the attitude described here (not saying 
&gt; &gt; that Jerald holds it) is that I had thought that part of the whole 
&gt; &gt; point of using Linux and FOSS in general is that you *weren't* 
&gt; &gt; dependent on a single source or *any* source of conditional support - 
&gt; &gt; the idea being that you as an IT implementor/integrator had inviolate say
&gt; over how your software behaved.
&gt; &gt; This &quot;viable, supported alternative&quot; talk sounds like nothing so much 
&gt; &gt; as wanting the ball and chain back.
&gt; &gt; 
&gt; &gt; I *know* what it's like to be stuck in a certain kind of closed-source 
&gt; &gt; hell where you can't get your app fixed or your peripheral to behave 
&gt; &gt; properly for love *or* money, and I also know what it's like for paid 
&gt; &gt; support reps to turn their nose up at you because the way in which you 
&gt; &gt; needed to adapt their product to your needs was, in their eyes, 
&gt; &gt; &quot;unsupported.&quot;  There's nothing about the OS in question being Linux 
&gt; &gt; that keeps implementors out of that wasteland.
&gt; &gt; 
&gt; &gt; Jeff
&gt; &gt; 
&gt; &gt; On Mon, 2005-01-03 at 17:26, Jerald Sheets wrote:
&gt; &gt; &gt; Again, from a business perspective you'd never sell Debian as a 
&gt; &gt; &gt; viable, supported alternative to the pinhead suits.
&gt; &gt; &gt; 
&gt; &gt; &gt; They're getting better, it's just not considered viable on a 
&gt; &gt; &gt; widespread basis yet.
&gt; &gt; &gt; 
&gt; &gt; &gt; Jerald M. Sheets jr.
&gt; &gt; &gt; Sr. UNIX Systems Administrator
&gt; &gt; &gt; McKesson, Inc.
&gt; &gt; &gt; (404) 293-8762
&gt; &gt; &gt; **********
&gt; &gt; &gt; &gt;su -
&gt; &gt; &gt; Password:
&gt; &gt; &gt; # cat /dev/flood &gt; /dev/earth
&gt; &gt; &gt; # rdev noah+beasts
&gt; &gt; &gt; # dd if=noah+beasts of=/dev/earth
&gt; &gt; &gt; 
&gt; &gt; &gt; PGP Key: 0x6267F183
&gt; &gt; &gt; 
&gt; &gt; &gt; -----BEGIN GEEK CODE BLOCK-----
&gt; &gt; &gt; Version: 3.12
&gt; &gt; &gt; GIT d+ s++: a C++++ UL++++ P++ L+++ E--- W++ N+ o-- K+ w-- O M+ V 
&gt; &gt; &gt; PS-
&gt; &gt; &gt; PE++ Y+ PGP++ t++ 5++ X+ R* tv- b+ DI++++ D++
&gt; &gt; &gt; G+ e h---- r+++ y++++
&gt; &gt; &gt; ------END GEEK CODE BLOCK-----
&gt; &gt; &gt; 
&gt; &gt; &gt; -----Original Message-----
&gt; &gt; &gt; From: ale-bounces at ale.org [<a  rel="nofollow" href="mailto:ale-bounces";>mailto:ale-bounces</a> at ale.org] On Behalf Of 
&gt; &gt; &gt; Raylynn Knight
&gt; &gt; &gt; Sent: Monday, January 03, 2005 5:12 PM
&gt; &gt; &gt; To: Atlanta Linux Enthusiasts
&gt; &gt; &gt; Subject: Re: [ale] Distro Reply
&gt; &gt; &gt; 
&gt; &gt; &gt; On Mon, 2005-01-03 at 12:41 -0500, Geoffrey wrote:
&gt; &gt; &gt; &gt; John P. Healey wrote:
&gt; &gt; &gt; &gt; &gt; Atlanta Linux Enthusiasts &lt;ale at ale.org&gt; writes:
&gt; &gt; &gt; &gt; &gt; 
&gt; &gt; &gt; &gt; &gt;&gt;Yeah...  I don't get that either.  The most mature products on 
&gt; &gt; &gt; &gt; &gt;&gt;the planet are not an option...
&gt; &gt; &gt; &gt; &gt; 
&gt; &gt; &gt; &gt; &gt; 
&gt; &gt; &gt; &gt; &gt; He's probably looking to broaden his horizons and explore 
&gt; &gt; &gt; &gt; &gt; packaging systems that aren't rpm based.  Also, I fail to see 
&gt; &gt; &gt; &gt; &gt; how Debian is any less mature than redhat, mandrake, and fedora.
&gt; &gt; &gt; &gt; 
&gt; &gt; &gt; &gt; Stable Debian running a 2.2 kernel.  To me, that is not mature, 
&gt; &gt; &gt; &gt; that is old.  Personal opinion.
&gt; &gt; &gt; &gt; 
&gt; &gt; &gt; Stable Debian is 3.0r4 released on 1 January 2005.  Debian supports 
&gt; &gt; &gt; many hardware architectures, some of which only have a 2.2 kernel.
&gt; &gt; &gt; Debian 3.0 was originally released 19 July 2002 so the default 
&gt; &gt; &gt; install kernel is a 2.2 based kernel, however a 2.4 kernel is 
&gt; &gt; &gt; optional and available on
&gt; &gt; &gt; x86 hardware at boot time.
&gt; &gt; &gt; 
&gt; &gt; &gt;  
&gt; &gt; &gt; --
&gt; &gt; &gt; Raylynn Knight &lt;audilover at speedfactory.net&gt;
&gt; &gt; &gt; 
&gt; &gt; &gt; _______________________________________________
&gt; &gt; &gt; Ale mailing list
&gt; &gt; &gt; Ale at ale.org
&gt; &gt; &gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; &gt; &gt; 
&gt; &gt; &gt; --
&gt; &gt; &gt; No virus found in this incoming message.
&gt; &gt; &gt; Checked by AVG Anti-Virus.
&gt; &gt; &gt; Version: 7.0.296 / Virus Database: 265.6.7 - Release Date: 
&gt; &gt; &gt; 12/30/2004
&gt; &gt; &gt;  
&gt; &gt; 
&gt; &gt; _______________________________________________
&gt; &gt; Ale mailing list
&gt; &gt; Ale at ale.org
&gt; &gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; &gt; 
&gt; &gt; --
&gt; &gt; No virus found in this incoming message.
&gt; &gt; Checked by AVG Anti-Virus.
&gt; &gt; Version: 7.0.296 / Virus Database: 265.6.7 - Release Date: 12/30/2004
&gt; &gt;  
&gt; -- 
&gt; James P. Kinney III          \Changing the mobile computing world/
&gt; CEO &amp; Director of Engineering \          one Linux user         /
&gt; Local Net Solutions,LLC        \           at a time.          /
&gt; 770-493-8244                    \.___________________________./
&gt; <a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>
&gt; 
&gt; GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&gt; &lt;jkinney at localnetsolutions.com&gt; Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659
&gt; 6190 ADC3 829C 6CA7
&gt; 
&gt; --
&gt; No virus found in this incoming message.
&gt; Checked by AVG Anti-Virus.
&gt; Version: 7.0.296 / Virus Database: 265.6.7 - Release Date: 12/30/2004
&gt;  
&gt;     
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO &amp; Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
<a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&lt;jkinney at localnetsolutions.com&gt;
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00076" href="msg00076.html">[ale] Distro Reply</a></strong>
<ul><li><em>From:</em> jrickman at gmail.com (Jonathan Rickman)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00073.html">[ale] Distro Reply</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00075.html">[ale] post-Xmas hardware upgrades</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00073.html">[ale] Distro Reply</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00076.html">[ale] Distro Reply</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00074"><strong>Date</strong></a></li>
<li><a href="threads.html#00074"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>