@acdha AWS Inspector and Tenable absolutely hate it (CIS). They want you to spend a lot of time configuring the mail server on it (and every other operating subsystem that you're not using). These sort of concerns would be addressed by Alpine, but now instead of hardening subsystems you don't use, you're adding back in subsystems you need and don't come with alpine. And troubleshooting error messages with the string "musl" in them.
Post
November 20, 2023