topic Re: Bastille - Is It Safe to Install, I have ONLY 1 Machine in Operating System - HP-UX

Bastille - Is It Safe to Install, I have ONLY 1 Machine

Basheer_2 — Tue, 12 Apr 2005 12:05:14 GMT

Hello ITRC
I have only 1 Machine - which is a prodn machine. HP-UX B.11.11 U ( L200)

1) Is it Safe to Install Bastille
2) Any known issues/problems with this

I dont have a test machine to install/test.

Thanks
Basheer

Re: Bastille - Is It Safe to Install, I have ONLY 1 Machine

Pete Randall — Tue, 12 Apr 2005 12:09:35 GMT

First, installing it won't do anything. Second, even when you run it, it won't change anything unless you tell it to.

Pete

Re: Bastille - Is It Safe to Install, I have ONLY 1 Machine

Jeff Schussele — Tue, 12 Apr 2005 12:18:43 GMT

Hi Basheer,

Well, as we frequently see - it depends.
As Pete points out it won't do anything that you don't agree to.
So you need to have an intimate knowledge of your environment.
For example if something/someone is using r commands like remsh or rcp & you let Bastille turn them off - well then you'll have trouble.
So know you system & how it's now being used.

Rgds,
Jeff

P.S. I'm all for turning off r commands. Everyone should be using SSH/SCP/SFTP by now anyway.

Re: Bastille - Is It Safe to Install, I have ONLY 1 Machine

Biswajit Tripathy — Tue, 12 Apr 2005 12:36:15 GMT

It's definitely a good idea to install AND configure
Bastille. This will also configure IPFilter firewall that
would cutdown the possible number of entry points
into your system.

Since you have only one machine, it's even more
urgent that you install these security tools and
block/disable all services that are vulnerable (like, as
others have suggested, r commands etc).

- Biswajit

Re: Bastille - Is It Safe to Install, I have ONLY 1 Machine

Basheer_2 — Tue, 12 Apr 2005 16:33:20 GMT

Thanks for all of your help
Basheer