Ten General Security Rules

Before we roll up our sleeves and get into the devilish details of planning and implementing UNIX system security, I'd like to posit ten general rules or themes that I'll return to again and again in this book.

• Rule 1: Security Through Obscurity Doesn't Work
• Rule 2: Full Disclosure of Bugs and Holes Benefits Security
• Rule 3: System Security Degrades in Direct Proportion to Use
• Rule 4: Do It Right Before Someone Does It Wrong For You
• Rule 5: The Fear of Getting Caught is the Beginning of Wisdom
• Rule 6: There's Always Someone Out There Smarter, More Knowledgeable, or Better-Equipped Than You
• Rule 7: There Are No Turnkey Security Solutions
• Rule 8: Good and Evil Blend into Gray
• Rule 9: Think Like the Enemy
• Rule 10: Trust is a Relative Concept