Re: [newbie] msec and Bastille
On Tue, 11 Dec 2001 11:20:15 -0500 Mark Stewart [EMAIL PROTECTED] frantically pecked out this message: So I've trying to bone up on all things security-related and was trying to figure out what relationship, if any, there was between Bastille and msec. Is msec a UI layer over Bastille or is it a separate security tool? Are the two complementary or exclusionary. Should I run both or pick just one? cheers, ::mark mark, this is directly from the man page for msec. it would appear that it's nothing more then just a small utility that you can directly change/modify the security level setting of your Mandrake OS letting the kernel know just how secure or not secure the system is to be... == from the manpage === DESCRIPTION msec is the main script of msec package. It enables the system administrator to change the security level for that system. msec is provided with six preconfigured security levels. These levels range from poor security and ease of use, to paranoid config, suitable for very sensitive server applications, managed by experts. You must be root to run msec . Launch msec x to set you security level to x (x=[0-5]). It'll modify your system according to security level x features. For a fine description of each security level, consult the docu mentation under /usr/doc/msec-*/. = end of manpage entry ...whereas Bastille is a high-level system hardening/firewall configuration tool. -- daRcmaTTeR Registered Linux User 182496 Mandrake 8.1 - 8:05am up 2 days, 10:00, 1 user, load average: 0.16, 0.34, 0.54 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] msec and Bastille
Thanks for the reply, Mark. this is directly from the man page for msec. it would appear that it's nothing more then just a small utility that you can directly change/modify the security level setting of your Mandrake OS letting the kernel know just how secure or not secure the system is to be... == from the manpage === DESCRIPTION msec is the main script of msec package. It enables the system administrator to change the security level for that system. msec is provided with six preconfigured security levels. These levels range from poor security and ease of use, to paranoid config, suitable for very sensitive server applications, managed by experts. You must be root to run msec . Launch msec x to set you security level to x (x=[0-5]). It'll modify your system according to security level x features. For a fine description of each security level, consult the docu mentation under /usr/doc/msec-*/. = end of manpage entry ...whereas Bastille is a high-level system hardening/firewall configuration tool. I'm not sure that the distinction you've drawn actually makes for a difference. They seem to have a lot of overlap. The only kernel specific activity I could see msec doing was for redirecting kernel logging to a different tty but I think Bastille will do that as well. However, after you mentioned the man pages I thought to ask rpm what dependencies msec had on other packages and when it didn't list bastille I figured it must be a separate, parallel system. So the real question is simply: Can I use both or have people found conflicts? ::mark Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[newbie] msec and Bastille
So I've trying to bone up on all things security-related and was trying to figure out what relationship, if any, there was between Bastille and msec. Is msec a UI layer over Bastille or is it a separate security tool? Are the two complementary or exclusionary. Should I run both or pick just one? cheers, ::mark Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
