Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-19 Thread Nick Goddard
On Friday 19 September 2008 09:08, Josh Donovan wrote: > Nick Goddard wrote: > > aide is now provided in 4.7 as well. > > I installed aide and did # aide --init. Does it not mail > root like tripwire used to each morning? The manual is > does not mention mailing root. > > http://www.cs.tut.fi/~ramm

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-19 Thread Josh Donovan
Nick Goddard wrote: > aide is now provided in 4.7 as well. I installed aide and did # aide --init. Does it not mail root like tripwire used to each morning? The manual is does not mention mailing root. http://www.cs.tut.fi/~rammer/aide/manual.html Thanks, Josh.

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Nick Goddard
On Thursday 18 September 2008 16:35, Jim Perrin wrote: > > For CentOS5, I'd recommend using aide instead of tripwire. The two do > pretty much the same thing, but aide comes with centos5 by default > (and is recommended in the NSA guide) aide is now provided in 4.7 as well. Regards Nick. --- N

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 15:31 +, Josh Donovan wrote: > John Horne wrote: > > > For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto > > date, so you could download one of those from a mirror and install it. > > Personally, I install rkhunter from source, but you can build an

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Jim Perrin
On Thu, Sep 18, 2008 at 11:31 AM, Josh Donovan <[EMAIL PROTECTED]> wrote: > John Horne wrote: > >> For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto >> date, so you could download one of those from a mirror and install it. >> Personally, I install rkhunter from source, but yo

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
John Horne wrote: > For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto > date, so you could download one of those from a mirror and install it. > Personally, I install rkhunter from source, but you can build an RPM > from the source tarball if you want (the source includes an

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
Tim Verhoeven wrote: > The NSA has security guides online, including for RHEL. It seems only > RHEL 5 it seems, but I presume a lot of stuff from it can be used for > RHEL/C 4. The NSA guide (rhel5-guide-i731.pdf) looks like a good starting point. Thanks, Josh. __

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 14:31 +, Josh Donovan wrote: > Is there a step by step approach to securing CentOS 4X (or even RHEL > 4X)? I don't mean the stuff in the docs/security guide but a working > step by step guide? There used to be packages like rkhunter and > tripwire but I don't know if the o

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Tim Verhoeven
On Thu, Sep 18, 2008 at 4:31 PM, Josh Donovan <[EMAIL PROTECTED]> wrote: > Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I > don't mean the stuff in the docs/security guide but a working step by step > guide? There used to be packages like rkhunter and tripwire but I d

[CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't know if the ones in rpmforge/kbs repo are up to date. Thanks, Josh.