RE: Linux Hardening

"rchamberland" <[email protected]> Tue, 16 Oct 2007 17:02:26 -0400
Newsgroups gmane.comp.security.linux
Organization The Canadian Hearing Society
Message-ID <00c101c81037$db549ba0$350da8c0@kkhan>
I don't think the Bastille project has any activity.   

The Bastille forums seem dead, the bug tickets and feature requests listed
on sourceforge are years old and none have been closed, there's practically
no news, what little news there is now has just been updated after almost a
year of nothing at all.  I think it's basically been abandoned for just over
a year and might only now be getting some activity.

And I encounter the same problem - Bastille is unable to detect the latest
version for either RHEL or Fedora, and these have been out for a while now.

However, I find that if I just ignore the version errors and go ahead and
harden, it does work.  If it can't find something it just reports it and
moves on to the next step.  So it's still useful.

And it can be used in combination with SElinux.


Rob C



-----Original Message-----
From: [email protected] [mailto:[email protected]] On
Behalf Of Jure Krasovic
Sent: Saturday, October 13, 2007 12:06 AM
To: [email protected]
Cc: [email protected]
Subject: Re: Linux Hardening

[email protected] pravi:
> Hi,
>
> I was looking for a Linux hardening tool. I found Bastille. The latest =
version that I was able to find is 3.09. I cannot seem to get this = version
to work on later versions of Linux (RHEL 5, FC 6,7) = distributions.
>
> Is this tool still being supported? Is there a similar tool out there?
>
> Thanks in advance,
> JP
>
>
>   
SELinux is already included in RHEL and their clones. May be you should 
try it.

Regards!

       Jure