what's the current standard for tools to security harden fedora/RHEL?

2015-06-16 Thread Robert P. J. Day
friend asked me about the most effective way to harden red hat systems (both fedora and RHEL). what's the state of the art these days? i know RH has online manuals on system security -- what's available in terms of tools to scan existing systems for vulnerabilties? is bastille linux still a

Re: what's the current standard for tools to security harden fedora/RHEL?

2015-06-16 Thread SternData
On 06/16/2015 01:29 PM, Robert P. J. Day wrote: friend asked me about the most effective way to harden red hat systems (both fedora and RHEL). what's the state of the art these days? i know RH has online manuals on system security -- what's available in terms of tools to scan existing

Re: what's the current standard for tools to security harden fedora/RHEL?

2015-06-16 Thread Martin Cigorraga
RHEL/CentOS/Fedora comes with a quite complete set of SELinux rules making the system quite secure OOTB, however as YMWV it won't hurt to keep an eye on SELinux alerts which you can track using the SELinux Troubleshooting application; there are also other quite useful SELinux related tools like

Re: what's the current standard for tools to security harden fedora/RHEL?

2015-06-16 Thread Tim
On Tue, 2015-06-16 at 14:29 -0400, Robert P. J. Day wrote: friend asked me about the most effective way to harden red hat systems I'd venture to say that if they cannot use a computer safely (i.e. not do unsafe things, themselves), that you can only have moderate success with hardening the