Re: Linux hardening

> Many people have recommended mounting /tmp and /var/tmp noexec. This is a good
> idea but keep in mind that it is easy to execute commands even on a noexec
> filesystem (using the ld-linux library). So don't be surprised if some
> slighly clever attacker is running a binary from that location.
> 

how is it possible to run binaries using ld-linux library?Can you put
more light on it?
I am asking this because i believe to catch a thief you have to become a thief.

As far as linux hardening is concerned: I would like to
summarize,group members please add your notes to it:

1)Installing your servers with bare minimum packages and see to it
that only needed services are running.
2)Before you install a new package on your production do check for
known vulnerabilities for that package and if possible always get the
latest package.always verfiy the integrity of the package using
md5sum.
3)With integrity checkers like tripwire periodically check your
essential binaries and configuration files for any modifications.
4)DO use log analyzers like logcheck and swath to detect important events.
5)Periodically check your system for rootkits using rootkit hunter and
chkrootkit.
6)Regulary backup your essential data to other machines or hard disks
such that in case of failure the data can be recovered.
7)get packages from autorized sites only.
8)Keep a watch for upcoming attacks and vulnerabilites for the
softwares installed on ur machine.Patch them and keep them uptodate.
9)check your system for possible viruses using antivirus like clamAV.

List,if more points are to be added then do add to the summary.