Re: Linux hardening

Am Sonntag, 21. August 2005 14:13 schrieb AragonX:
> I had an intrusion on one of my servers and am in the process of 
hardening
> it (after a reinstall).  I'm using Fedora Core 4.  I've taken all the
> basic steps (shutting down unused services etc) and have done the
> following:
>
> Installed Smothwall on a separate box.
> Installed & configured AIDE, Snort and chkrootkit

Ever tried tiger?
http://www.nongnu.org/tiger/
---Introduction

Tiger is a security tool that can be use both as a security audit and 
intrusion detection system. It supports multiple UNIX platforms and it 
is free and provided under a GPL license. Unlike other tools, Tiger 
needs only of POSIX tools and is written entirely in shell language. 

---END

> Ran Bastille
>
> I am in the process of configuring LIDS.  I'm using LIDS instead of
> SELinux because it's easier for me to configure.
>
> My next and final step will be to install mod_security.

I would suggest to use a static kernel without loadable modules.


Best regards

-- 
Christoph Gruber
2B OR (NOT (2B)) = FF