The cooker ML is a rather conservative bunch of powerusers, ask on the forum and I believe you will get a very different answer.

Update summary could tell if new updates are available.

As for the icon, you could mix it with mdkapplet one, see https://qa.mandriva.com/show_bug.cgi?id=57016

keep it on this way

Marcello

It would have been interesting to point out when sometyhing is disabled ( red icon, … ). This could be something like draknetcenter.

IMHO security is too generic.

What about this : 1. keep Security 2. use something like in draknetcenter : by clicking on a little arrow, we can see further settings appearing.

For security security will show : System integrity ( enabled/disabled/failed ), Accounts security ( e/d/f ), Root users restrictions, Automatic Security checks.

For Updates, we could show the number of updates to install ( IIRC urpmq can give the list of package to update )

For Firewall, we could show : opened port list, Interactive Firewall ( enabled/disabled/pending alerts )

Next time i will try the –help trick before open my big mouth

Now, focusing on the “profiles”. Maybe can be useful grant to the sysadmin create his own profile. I explain: If a sysadmin selects the “desktop” profile, but needs some fine tunning, after apply changes will be a great option save these changes to re-use (i.e. deploying a large amount of machines) in another installation. So, the idea is implement a “Load/Save” advanced settings or something else..

Thanks for all these msec improvements.

There’s a particular point that I’d like to see improved. It’s the way msec is dealing with the /net special autofs mount point. This special directory is used when configured in /etc/autofs/auto.master as a special mount point that is able to mount every NFS servers’ exported file systems. For example, /net/an-nfs-server/export1 is mounting the /export1 FS of the NFS server named an-nfs-server. The problem is that, even if the NFS mount is auto-unmounted after a given time, the /net/an-nfs-server/export1 mount point stays on the client until the next restart of the autofs service. And, when msec is performing its checks, every remote FS that has been mounted since the last restart of autofs (e.g. since the system is up), are automatically re-mounted, and the checks go across the remote FS…

IMHO, msec should consider /net as an exception, at least if we ensure that autofs is using it for that particular purpose.

As your server does not receives user-generated content, nor has php scripts, it is less likely to be compromised by a php exploit or something like that.

But on the other hand, if you don’t have that much files, you could use the “webserver” level and just run most periodic checks daily.

I run a server (with Mandriva, of course!) with Apache, proftpd, ssh and nx. I don’t use php nor cgi’s, so Apache simply sends totally static webpages. Now, the question: which level do you recommend me? I’m unsure if “webserver” level is the one for me, or I’d rather make a personal one.

Thank you in advance! motitos