Re: Hardening Debian

2010-11-24 Thread Hr. Philip Rueegsegger
Does anyone have a good checklist or script to harden a vanilla debian
box after installation?

Dan


http://wiki.debian.org/Hardening

also very good, though for ubuntu, but definitely worth reading

https://wiki.ubuntu.com/Security/Features


-- 
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201011241212.oaoccwct013...@robo.generali.ch



Re: Freeze SO Linux, it's possible?

2008-12-10 Thread Hr. Philip Rueegsegger
X-TM-IMSS-Message-ID: [EMAIL PROTECTED]
Old-Return-Path: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on liszt.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-10.0 required=4.0 tests=GMAIL,LDOSUBSCRIBER, 
LDO_WHITELIST autolearn=failed version=3.2.3
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
X-policyd-weight: DYN_NJABL=ERR NOT_IN_SBL_XBL_SPAMHAUS=-1.5 
NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .dazjorz. - helo: 
.mail-ew0-f20.google. - helo-domain: .google.)  
FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0 client=209.85.219.20 
helo=mail-ew0-f20.google.com [EMAIL PROTECTED] 
[EMAIL PROTECTED], rate: -5
Date: Wed, 10 Dec 2008 18:40:05 +0100
From: Sjors Gielen [EMAIL PROTECTED]
User-Agent: Thunderbird 2.0.0.18 (Windows/20081105)
MIME-Version: 1.0
To: Izak Burger [EMAIL PROTECTED]
CC: Carlos Carrero Gutierrez [EMAIL PROTECTED], 
debian-security@lists.debian.org
Subject: Re: Freeze SO Linux, it's possible?
X-Enigmail-Version: 0.95.7
OpenPGP: id=43F437E1; 
url=http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x63C41921
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: at lists.debian.org with policy bank en-ht
X-Amavis-Spam-Status: No, score=-4 tagged_above=3.6 required=5.3 
tests=[GMAIL=1, LDO_WHITELIST=-5]
X-Rc-Virus: 2007-09-13_01
X-Rc-Spam: 2008-11-04_01
Resent-Message-ID: [EMAIL PROTECTED]
Resent-From: debian-security@lists.debian.org
X-Mailing-List: debian-security@lists.debian.org archive/latest/22737
X-Loop: debian-security@lists.debian.org
List-Id: debian-security.lists.debian.org
List-Post: mailto:debian-security@lists.debian.org
List-Help: mailto:[EMAIL PROTECTED]
List-Subscribe: 
mailto:[EMAIL PROTECTED]
List-Unsubscribe: 
mailto:[EMAIL PROTECTED]
Resent-Sender: [EMAIL PROTECTED]
Resent-Date: Wed, 10 Dec 2008 17:40:41 + (UTC)
X-TM-AS-Product-Ver: IMSS-7.0.0.6126-5.5.0.1027-16330.006
X-TM-AS-Result: No--16.227-5.0-31-1
X-imss-scan-details: No--16.227-5.0-31-1
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No

Izak Burger wrote:
 On Wed, Dec 10, 2008 at 6:51 PM, Carlos Carrero Gutierrez
 [EMAIL PROTECTED] wrote:
 Hi, i would like to freeze my linux in order to freeze the OS, then,
 when I reboot the computer all changes that i made in the computer
 dissapears and it returns to the previous OS freezed.
 
 Cross posting is bad netiquette, especially when you are crossing
 various different distros not to mention debian-security when it is
 not a security issue.
 
 Linux can suspend to disk as long as the hardware plays along. Read this:
 
He doesn't mean a suspend to disk, which is what I thought too, first.
He wants to make his installation frozen, i.e., changes aren't saved
over reboots. I don't know how to do it, but maybe this clears up his
original question.

Sjors

What about unionfs ?

Cheers,
Phibo



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


--
System Engineer Unix
B | SOURCE
Phone  +41 44 712 65 14
Mobile +41 79 412 36 40 (for urgent cases)
--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



openssl / x509 certs

2008-05-14 Thread Hr. Philip Rueegsegger
How can I check if a rsa key created by 'openssl genrsa ...' and its x509 
certificate is vulnerable ? The utility ssh-vulnkey seems to only check ssh 
keys. Thanks in advance !


Cheers,
Philip
--
System Engineer Unix
B | SOURCE
Phone  +41 44 712 65 14
Mobile +41 79 412 36 40 (for urgent cases)
--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]