Re: Hardening CentOS

Andraz Sraka <[email protected]> Sat, 05 Jul 2008 22:46:30 +0200
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
--=-foHGa5QyPSlAtDtceSZX
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature";
	boundary="=-X9/APwo0uE3nbiUiW08P"


--=-X9/APwo0uE3nbiUiW08P
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

re

On Thu, 2008-07-03 at 08:53 -0700, Florin Iliescu wrote:
> Can anybody help me with some procedures to secure a CentOS server? I
> am going to use it for receiving files over Internet with SFTP.

see also: <http://tnt.aufbix.org/linux/centos>

Regards,
 Andraz

--=20
BOFH excuse #388:

Bad user karma.

--=-X9/APwo0uE3nbiUiW08P
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEABECAAYFAkhv3aYACgkQ9dssFzMT70dmbgCgrFl54Y/Z3lB2UC2YUNPyp1/u
aaMAoKtm8HAy7Q70h7ELVbLuZFUrWuP9
=3DlPoQ
-----END PGP SIGNATURE-----

--=-X9/APwo0uE3nbiUiW08P--

--=-foHGa5QyPSlAtDtceSZX
Content-Type: application/x-pkcs7-signature; name=smime.p7s
Content-Disposition: attachment; filename=smime.p7s
Content-Transfer-Encoding: base64
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--=-foHGa5QyPSlAtDtceSZX--