cookbook to secure redhat 5 to nsa standards

[KevB_1]

Hi

We are going to install Linux at our site for the first time.
I have the docs from NSA but was wondering if there was a cookbook to do the necessary security implementation to this standard.
I know that this would be pretty general but need a place to start

[P Muralidhar Kini]

Hi KevB,

Check the following link -
http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf
-> Guide to secure configuration of Red Hat Enterprise Linux 5

Also,
http://www.softpanorama.org/Commercial_linuxes/RHEL/security.shtml

Hope this helps.

Regards,
Murali

[Don Mallory]

Hi there,

I've always been a fan of the Centre for Internet Security benchmark tools. They are essentially documents, that are consensus based that help to bring things in line. Large portions of the document also include pre-written scripts to help automate the task.

http://cisecurity.org/en-us/?route=downloads

They have benchmarks for pretty much any OS, as well, they have audit tools to test against later.

You may also want to check the SANS reading room (www.sans.org/rr) for other resources.

Good luck and happy hunting,
Don