Secure OS Software for Linux
1748117 Members
3697 Online
108758 Solutions
New Discussion юеВ

RH 8 Security and Logging

 
SOLVED
Go to solution
Francis Ancheta
Frequent Advisor

RH 8 Security and Logging

Hi,

How can I view/set auditing features on RH 8. For Microsoft it would be easy since all you need to do is to go to Local Policy Settings. I need to know if someone is trying to hack to my system. I am planning to have a firewall and proxy installed in one of my servers using RH 8. Does anyone have a suggestion.
2 REPLIES 2
U.SivaKumar_2
Honored Contributor
Solution

Re: RH 8 Security and Logging

Hi,

first thing to do is to harden your system.

Disable unwanted network services.

Run a good hardening tool like bastille-linux.

Download the rpm from,

http://www.bastille-linux.org/#get

Next thing is to get a software to periodically monitor your log files and send you alerts in case of suspicious log entries.

use logsentry tool for that,

http://www.gnu.org/directory/sysadmin/Monitor/LogSentry.html

If you need C-2 trusted system model auditing then you can use SNARE (System iNtrusion Analysis and Reporting Environment) software ( basically operates as a kernel module )

http://freshmeat.net/projects/snare/?topic_id=43%2C862%2C143%2C253

regards,
U.SivaKumar
Innovations are made when conventions are broken
Vitaly Karasik_1
Honored Contributor

Re: RH 8 Security and Logging