manual of security for linux

[Jairo Campana]

Somebody knows or to me it can send(link web,mail) manual or instructive of security for linux

[Tim Schaefer_1]

www.linuxsecurity.com

http://www.linuxdoc.org/HOWTO/Security-HOWTO.html

[Tim Schaefer_1]

oh, and never forget

http://www.google.com/linux

[john madog · Accepted solution]

http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/index.html

[John Franey]

Also see CERT's unix security checklist:
http://www.cert.org/tech_tips/usc20.html

[Steven Sim Kok Leong]

Hi,

Using the bastille scripts will ease your work in hardening your redhat linux:

http://www.bastille-linux.org/

Hope this helps. Regards.

Steven Sim Kok Leong

[Steven E. Protter]

I've used Bastille on HP-UX. That was perfection.,

When I tried it on my test Linux server, the only thing it couldn't handle was starting the named deamon with a non-root user.

This makes the named or DNS daemon harder to exploit, since you don't get root priviledge if you get exploited.

The other doc's are great. Nice posts gentlemen.

[Nur]

Some more links for Linux Security:
www.linuxsecurity.com
www.linux-sec.net/
lsap.org/

General Security (Linux and Much More)
1. securityfocus.com
2. phrack.org
3. www.packetstormsecurity.org/

Best Regards,
Nur

[Huc_1]

I have bookmarks theses on security

http://www.vpnc.org
http://www.openssh.org
http://www.linuxsecurity.com
http://www.tldp.org/HOWTO/IP-Masquerade-HOWTO/what-is-masq.html
http://www.adhersis.com
http://www.unixreview.com/documents/s=1232/urm0108a/0108a.html
http://www.microlite.com/lja
http://www.ethereal.com/download.html
http://www.uni-karlsruhe.de/~ig25/ssh-faq/
http://www.rfgonline.com/unprotectedarchive/disaster/disaster.html
http://www.backupcentral.com/toc-excerpts.html
http://www.realvnc.com/
http://www.uk.research.att.com/archive/vnc/sshvnc.html

Some of these I have not visited these for a while, so they may now be out of date, but I figure that as you ask for link, you are ready to walk the way !

I have set this link apart because I think this is very usefull ! and the more so on new install

http://www.tripwire.org/

Hope you find the road to secure paradise !

J-P

[Jerome Henry]

And the official Redhat security guide, if you run this distro :
http://www.europe.redhat.com/documentation/rhl9/rhl-sg-en-9/

J

[Ragu_1]

Nmap is a very good security audit tool. Please link up http://www.insecure.org/nmap, in the meantime watch the movie The Matrix: Revolutions'. Spot where and when `nmap' is used ?

[Huc_1]

I should have added this link for more on Tripewire in redhat (9.0)

http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/ref-guide/ch-tripwire.html


J-P

[Martin P.J. Zinser]

And since this is an hp server ;-)

There is a product from hp (read: costs $), that supposedly is a pre-hardend Linux based
on RH.

Check

http://docs.hp.com/cgi-bin/otsearch/getfile?id=/hpux/internet/index.html&searchterms=tlx%7chp&queryid=20031116-152212

and look for hp-tlx

Disclaimer: I do not have personal experience with this particular product