<html><head></head><body><div class="ydp5da629aayahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div>It's just an analogy - don't take it too far or it breaks down.</div><div><br></div>
</div><div id="yahoo_quoted_9999142707" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Wednesday, May 29, 2019, 7:14:06 p.m. EDT, Brent Kimberley <brent_kimberley@rogers.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="yiv5677230787"><div><div class="yiv5677230787ydp431e4bb5yahoo-style-wrap" style="font-size:16px;"><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;"></div>
<div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;">Hi Eric.</div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;"><br clear="none"></div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;">>><span><span style="color:rgb(31, 73, 125);font-family:Calibri, sans-serif;font-size:14.6667px;">container hardening?</span></span></div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;">What are your resources controls and are they appropriate? (e.g. chroot. docker. hyervisor.)</div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;"><br clear="none"></div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;">>><span><span style="color:rgb(31, 73, 125);font-family:Calibri, sans-serif;font-size:14.6667px;">check out</span></span></div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;"><span style="color:rgb(34, 34, 34);font-family:arial, sans-serif;">Checkout, posture and drift are characteristics of an operational system.</span></div><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;"><span style="color:rgb(34, 34, 34);font-family:arial, sans-serif;"><br clear="none"></span></div><div style=""><span style="color:rgb(34, 34, 34);font-family:arial, sans-serif;">Using the operators manual, a driver should be able to examine(checkout) each major element of a vehicle so they can communicate</span> their concerns/findings/issues from an absolute (posture) / or relative (drift) perspective.</div>
</div><div class="yiv5677230787yqt9440149059" id="yiv5677230787yqt05305"><div class="yiv5677230787yahoo_quoted" id="yiv5677230787yahoo_quoted_9223426786">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Wednesday, May 29, 2019, 4:41:59 p.m. EDT, Eric Eberhard <flash@vicsmba.com> wrote:
</div>
<div><br clear="none"></div>
<div><br clear="none"></div>
<div><div id="yiv5677230787"><style>#yiv5677230787 #yiv5677230787 --
filtered {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;}
#yiv5677230787 filtered {font-family:Wingdings;panose-1:5 0 0 0 0 0 0 0 0 0;}
#yiv5677230787 filtered {panose-1:2 4 5 3 5 4 6 3 2 4;}
#yiv5677230787 filtered {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
#yiv5677230787
p.yiv5677230787MsoNormal, #yiv5677230787 li.yiv5677230787MsoNormal, #yiv5677230787 div.yiv5677230787MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:New serif;}
#yiv5677230787 a:link, #yiv5677230787 span.yiv5677230787MsoHyperlink
{color:#0563C1;text-decoration:underline;}
#yiv5677230787 a:visited, #yiv5677230787 span.yiv5677230787MsoHyperlinkFollowed
{color:#954F72;text-decoration:underline;}
#yiv5677230787 span.yiv5677230787EmailStyle17
{font-family:sans-serif;color:#1F497D;}
#yiv5677230787 .yiv5677230787MsoChpDefault
{font-size:10.0pt;}
#yiv5677230787 filtered {margin:1.0in 1.0in 1.0in 1.0in;}
#yiv5677230787 div.yiv5677230787WordSection1
{}
#yiv5677230787 </style><div><div class="yiv5677230787WordSection1"><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;">We use it solely on 100s of our customer’s Unix computers. My suggestion (that not everyone agrees with) is to run it under inetd. Unix does not function without inetd (or related like xinetd). You don’t have to start or manage a server. It is dead reliable and when processes die it cleans it up and so forth. You connect to localhost on some port, have a configuration that directs it to the right place, off to the races.</span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"> </span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;">I am not sure what you mean by container hardening. When connecting to localhost it never touches the network – the TCP/IP goes directly to the TCP/IP stack on the local machine.</span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"> </span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;">I am really sure I don’t know what check out is </span><span style="font-size:11.0pt;font-family:Wingdings;color:#1F497D;">J</span><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"></span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"> </span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;">If you give me more info I can probably be of more use.</span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"> </span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;">Eric</span></p><p class="yiv5677230787MsoNormal"><span style="font-size:11.0pt;font-family:Calibri, sans-serif;color:#1F497D;"> </span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in;"><p class="yiv5677230787MsoNormal"><b><span style="font-size:11.0pt;font-family:Calibri, sans-serif;">From:</span></b><span style="font-size:11.0pt;font-family:Calibri, sans-serif;"> stunnel-users [mailto:stunnel-users-bounces@stunnel.org] <b>On Behalf Of </b>Brent Kimberley<br clear="none"><b>Sent:</b> Wednesday, May 29, 2019 11:53 AM<br clear="none"><b>To:</b> stunnel-users@stunnel.org<br clear="none"><b>Subject:</b> [stunnel-users] RE stunnel process owner</span></p></div></div><p class="yiv5677230787MsoNormal"> </p><div><div><p class="yiv5677230787MsoNormal"><span style="font-family:Helvetica, sans-serif;">Hi Dan.</span></p></div><div><p class="yiv5677230787MsoNormal"><span style="font-family:Helvetica, sans-serif;"> </span></p></div><div><p class="yiv5677230787MsoNormal"><span style="font-family:Helvetica, sans-serif;">>>Wondering what user people are running the stunnel process under on a unix server?</span></p><div><div><p class="yiv5677230787MsoNormal"><span style="font-family:Helvetica, sans-serif;">Any suggestions re container hardening & check-out (a la SCAP)?</span></p></div></div></div></div></div></div></div></div>
</div>
</div></div></div></div></div>
</div>
</div></body></html>