Saturday, March 04, 2006

Bastille - Securing Linux

Bastille is a Program that helps you Harden/Secure your Linux Systems
by way of GUI or Console Based Questionaire.

Download Bastille Linux

http://internap.dl.sourceforge.net/sourceforge/bastille-linux/
Bastille-3.0.8-1.0.noarch.rpm

Installing Bastille Linux

[root@mybox Desktop]# rpm -ivh Bastille-3.0.8-1.0.noarch.rpm
Preparing... ########################################### [100%]
1:Bastille ########################################### [100%]

Please make sure perl-Tk and perl-Curses are installed.

I had the Following installed :

perl-Tk-804.027-4mdk

I did not have perl-Curses, So I had to install as below

[root@mybox Documents]# urpmi perl-Curses

ftp://gd.tuwien.ac.at/pub/linux/Mandriva/official/
2006.0/i586/media/main/perl-Curses-1.07-1mdk.i586.rpm

installing perl-Curses-1.07-1mdk.i586.rpm from /var/cache/urpmi/rpms
Preparing... #############################################
1/1: perl-Curses #############################################


Now Running the Bastille Commands :

bastille -x     (for Graphical Mode Hardening)
bastille -c (for Text Mode Hardening)
bastille --report (for Assesment and Reporting)

For complete list of options use bastille -h

For eg. the below command generates report

[root@mybox Documents]# bastille --assess

___-----____-----_____------_____--------
Bastille Hardening Assessment Completed

You can find a report in HTML format at:

/var/log/Bastille/Assessment/assessment-report.html

You can find a report in text format at:

/var/log/Bastille/Assessment/assessment-report.txt

You can find a more machine-parseable report at:

/var/log/Bastille/Assessment/assessment-log.txt

___-----____-----_____------_____-------____-----


No comments: