Aside from the "centers" Joe mentioned, there were and are some books that give
quite a good overview of all the components, services and config files that take part in
GNU/Linux security.
I read these 2 a long while back, so you might want to check if either have been updated
or search for other "hardening" Linux books:
- Real World Linux® Security -- Intrusion Prevention, Detection, and Recovery, 2nd Edition
(2002)
- Practical Unix & Internet Security, 3rd Edition (2003)
Andri
On Jun 27, 2012, at 9:40 PM, Joe Wulf wrote:
The issue is far bigger than just doing a few things to close your
system up. How valuable is your system for the 'mission' it provides? What about
your data? What backup and/or disaster recovery processes have you prepared?
I'd actively migrate to a more recent edition of the OS, and put processes in place
to keep patches updated.
There are a number of places to get hardening guidance... YMMV. There is the Center for
Internet Security, DISA and NIST. Those are pretty good starting point.
From: Dov-el <dov_el(a)qx.net>
To: security(a)lists.fedoraproject.org
Sent: Wednesday, June 27, 2012 1:36 PM
Subject: my fedora 13 machine has been cracked
Someone has broken into my fedora 13 machine. Aside from closing unused ports on the
firewall and router and disabling unused services, what should I be doing to harden my set
up? Tripwire? AIDE? What else? Thanks in advance!
--
security mailing list
security(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/security
--
security mailing list
security(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/security