[ale] webmin or not?

JD jdp at algoloma.com
Tue Aug 12 05:05:56 EDT 2014


On 08/11/2014 08:47 PM, Scott McBrien wrote:
> Never.  Ever.  Ever.
> 
> The problem with webmin is that while it appears easy, it does have a penchant for mangling a box because that distro does thing slightly different than webmin was written to do. Additionally, it's just one more thing to keep track of to update.  How sheepish would you feel if your box was compromised because someone exploited your version of webmin?
> 
> Bad idea.  Don't do it.
> 

The reason I asked is because many of the people who plan to use it aren't
capable of even installing a .rpm or .deb package.  It makes me nervous that
someone who can't do that will be running a server.  What are the chances they
will know to prevent access to the webmin page so the entire world can't hack on
their box?


More information about the Ale mailing list