General Security?

[Cam Ellison]

John C. Harper wrote:
> I am completely new to GnuCash and Linux. So far, I have not had any
> serious problems installing and configuring openSUSE 11.0 and GnuCash
> 2.2.4.
>
> Congratulations and Thanks to all who have worked so hard to make it
> easy for me. This stuff is ready for prime time in my opinion.
>
> As I was setting up my accounts in GnuCash, I began to wonder if it was
> wise to enter all my account numbers and other sensitive information
> before I knew anything about the general security of GnuCash. It is set
> up on a computer connected to the internet 24/7 unless I remember to
> turn it off.
>
> Is there any danger that my financial information can be accessed by
> others? I would like to take prudent, but not necessarily extreme,
> precautions.
>
>
>   
With Linux, and other varieties of Unix, while security is not 
absolutely guaranteed, the use of long and non-word-like passwords 
incorporating a mix of upper- and lower-case letters and numbers (for 
both root and yourself) generally makes a very strong barrier.  It's 
very wise - many would say essential - also to have a firewall (you'll 
have to go to other email lists for that information) with all but the 
essential ports blocked.  GnuCash stores all the information in 
compressed XML files, which is not inherently secure, but if you focus 
on preventing access to the entire system, the need for encrypting data 
within that system becomes somewhat moot. 

HTH

Cam