RE: Linux Hardening

http://bastille-linux.sourceforge.net/news_updates.htm

Seems pretty active to me... They've had a recent name change due to a
domain dispute, but I pretty sure they're still ticking along merrily...


--
Ben Jackson - Sr. Security Engineer - Commonwealth of Massachusetts
[email protected] - +1-617-626-4575 (v) - +1-617-626-4459 (f)
http://www.linkedin.com/in/benjaminbjackson

-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of rchamberland
Sent: Tuesday, October 16, 2007 5:02 PM
To: 'Jure Krasovic'; [email protected]
Cc: [email protected]
Subject: RE: Linux Hardening


I don't think the Bastille project has any activity.   

The Bastille forums seem dead, the bug tickets and feature requests
listed on sourceforge are years old and none have been closed, there's
practically no news, what little news there is now has just been updated
after almost a year of nothing at all.  I think it's basically been
abandoned for just over a year and might only now be getting some
activity.

And I encounter the same problem - Bastille is unable to detect the
latest version for either RHEL or Fedora, and these have been out for a
while now.

However, I find that if I just ignore the version errors and go ahead
and harden, it does work.  If it can't find something it just reports it
and moves on to the next step.  So it's still useful.

And it can be used in combination with SElinux.


Rob C



-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Jure Krasovic
Sent: Saturday, October 13, 2007 12:06 AM
To: [email protected]
Cc: [email protected]
Subject: Re: Linux Hardening

[email protected] pravi:
> Hi,
>
> I was looking for a Linux hardening tool. I found Bastille. The latest

> =
version that I was able to find is 3.09. I cannot seem to get this =
version to work on later versions of Linux (RHEL 5, FC 6,7) =
distributions.
>
> Is this tool still being supported? Is there a similar tool out there?
>
> Thanks in advance,
> JP
>
>
>   
SELinux is already included in RHEL and their clones. May be you should
try it.

Regards!

       Jure