James Harper <[email protected]> wrote: > I need something that can scan my network for Linux machines and then log in > to anything it can find and check configs to make sure everything is set up > correctly, eg things like that ssh settings are correct, smartd is > configured and enabled (if physical machine), no blank passwords, > permissions on sensitive config files, etc. This is more of an automatic > check of the install process than a tripwire to check for malicious > reconfiguration (I just found a machine with a failed harddisk on which I > hadn't enabled smartd!) > > What's out there? 'baseline config' is a term I'm more used to hearing in > the windows world so maybe I'm googling on the wrong keywords...
I haven't heard of any such tool (but I'm not into system administration heavily). The practice that I have heard of is to use cfengine or puppet to configure all of the machines instead of doing so manually. As I understand it, you can write rules which ensure that certain packages are installed everywhere and (crucially for your scenario) that certain configuration options are set. _______________________________________________ luv-main mailing list [email protected] http://lists.luv.asn.au/listinfo/luv-main
