security by default

[Hans Omli]

Coming from RHEL and RHEL-based distros, I greatly appreciate
Debian/Ubuntu's "security by default" mindset.  I'm curious if there has
been discussion of extending this mindset beyond "no open ports".

For example, why not apply settings similar to what Bastille and other
security auditing tools use as default to the server distro by default?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20070313/8425e149/attachment.html>