Profile-based security.
Status: Alpha
Brought to you by:
nicc777
Will there be an easy way to implement profile-based
security? What I mean by this is that a "web server"
has certain attributes that are known to be good; port,
URI patterns, running processes, user accounts, etc.
By creating a profile of what a "known good" LAMP
install is others do not need to guess as much. The
issue this would help solve is the "not knowing where
to start". I talk to people all of the time who want
to do something about security but don't have a clue
where to start.
The ideal setup would allow me to export a profile so
that others can import it for modification.
Wayne