![]() The only real firewall security is provided by a locked down external firewall. A rootkit either generates packets directly on the interface or opens holes for itself in the firewall. Third, if some software has a vulnerability and allows an attack that manages to do a root escalation, a local firewall won’t even slow that down. So the firewall with automatic port opening is meaningless. They will sometimes notify the user, but include no details about why the port is opening and the users are conditioned to just click Yes anyway. Second, most client firewalls in the name of convenience automatically open ports for applications. If the admin can identify each open port and the software running that port and knows its purpose then he doesn’t need a firewall on the machine too. All of the software provided with Fedora is open. You can use it for work creating documents, crunching numbers in spreadsheets, or programming. You can use it for home use like browsing the Web, watching streaming video, editing photos, and playing games. So you know what’s running and you know what it does and you know what ports are open. Fedora Workstation has a wide range of software that’s suitable for almost anyone. ![]() ![]() And you definitely need to know what’s running. I don’t agree with those “real security experts”įirst off, if you want security, you had better understand what each thing running on the system does. If someone doesn’t know much about configuring linux, but just wants their DLNA/Script/Web server to work, then either they just give up and whine that linux is shit (because user feedback on blocked packets is, by necessity, nonexistent), or they google enough to disable the firewall entirely, and are left properly unprotected. If you have someone who knows about such things, and cares, then locking down those ports is trivial for them. The <1024 ports are typically ones that host more sensitive services too, so having a firewall just for those is still a significant benefit. Dynamic NAT routers are actually a pretty good protection against unsolicited inbound traffic (not perfect). On almost every home network, there’s an extra layer of protection between your PC and the ‘big bad’ internet, a router. In this case, the choice to allow >1024 by default seems like an interesting compromise. The security/convenience issue is always a balance, and there will always be people who believe any solution is too much/little either way. Why does the launcher overlay the entire screen ala Windows 8? Why do I have to return to the full-screen overlay to get a minimized window back, and why isn’t there a way to minimize a window without a right click? Gnome 3 is just not for me.Įdit: apparently getting out of squintyvision requires a gsettings command, because it would be unreasonable to have actual settings in the Settings program: Īlas, after applying this and rebooting (because of the aforementioned logout issue), I can’t log in anymore I just get a black screen. I’m also still not fond of the default desktop environment. I’m sure some of these issues are related to the fact that I’m using Fusion 7 instead of real hardware, but virtualization isn’t that uncommon now… The entire install process took place in squintyvision the installer had some rough edges, and whenever I try to log out from the desktop it seems to hang on a black screen. In your case (installing an additional DE) you can install only kde-desktop because the other "core" groups are already installed on your system (brought in by the GNOME workstation-product-environment which you already have).I gave it an honest try, but so far Fedora 21 is pretty hopeless for me. It aims to be fast and low on system resources, while still being visually appealing. This is useful when doing a fresh installation - the installer install just the environment which depends on everything needed for a working Fedora system. Xfce is a lightweight desktop environment for UNIX-like operating systems. Mandatory groups will be installed automatically if you install kde-desktop-environment, optional groups only if you use -with-optional.Īs you can see kde-desktop-environment also includes things like Network Manager, multimedia support (codecs) and other useful stuff. You can use dnf group info kde-desktop-environment to see list of groups in this environment: Mandatory Groups: KDE Plasma Workspaces (kde-desktop-environment) is an environment which means it is a list of groups, which includes kde-desktop and other groups needed for a working Fedora with KDE. KDE (K Desktop Environment) (kde-desktop) is a group which means it is a list of packages, in this case a list of packages that makes the default KDE package "selection" in Fedora.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |