[rescue] SSH, Security and the single SGI

[Wes Will]

>So, if I enable tftp and a font server, Samba, and other stuff on the
>Challenge, am I somehow lessening its security?
>
>-Shel

Of course you are "lessening" it, but with careful attention on more than a
random basis, the impact should be within an acceptable limit of risk.  Get
and compile the latest binaries, and patch 'em once in a while.  Use decent
passwords and insist that your user accounts do too.  Look through your log
files regularly to see if anything has been breached.  (There are packages
to make this a more possible chore, and there ought to be about as many
opinions on which is 'better' as there are sysadmins on this list...)  Look
into intrusion detection software and managers (like Tripwrire for instance).

You should be just fine, if you pay attention.

--
wes will