[chef] Re: should chef be used for initial server updating/hardening?

[Ranjib Dey < >]

yup. absolutely. Not sure about ubuntu, but i have used bastille on centos/linux. along with custom ipatbels, rokhunter  and psad , just to harden vanilla vm. And again server, app, framework level patches/security measures (like LAMP etc)

On Fri, Jan 20, 2012 at 9:40 PM, S Ahmed < "> > wrote:

Is it good practise to use chef to update repos i.e. sugo apt-get update && sudo apt-get upgrade

And general server hardening like iptables etc?

If yes, any good examples for ubuntu hardening that you can point me to?