Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-19 Thread Josh Donovan
Nick Goddard wrote: aide is now provided in 4.7 as well. I installed aide and did # aide --init. Does it not mail root like tripwire used to each morning? The manual is does not mention mailing root. http://www.cs.tut.fi/~rammer/aide/manual.html Thanks, Josh.

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-19 Thread Nick Goddard
On Friday 19 September 2008 09:08, Josh Donovan wrote: Nick Goddard wrote: aide is now provided in 4.7 as well. I installed aide and did # aide --init. Does it not mail root like tripwire used to each morning? The manual is does not mention mailing root.

[CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't know if the ones in rpmforge/kbs repo are up to date. Thanks, Josh.

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Tim Verhoeven
On Thu, Sep 18, 2008 at 4:31 PM, Josh Donovan [EMAIL PROTECTED] wrote: Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 14:31 +, Josh Donovan wrote: Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't know if the ones

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
Tim Verhoeven wrote: The NSA has security guides online, including for RHEL. It seems only RHEL 5 it seems, but I presume a lot of stuff from it can be used for RHEL/C 4. The NSA guide (rhel5-guide-i731.pdf) looks like a good starting point. Thanks, Josh.

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Josh Donovan
John Horne wrote: For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto date, so you could download one of those from a mirror and install it. Personally, I install rkhunter from source, but you can build an RPM from the source tarball if you want (the source includes an

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Jim Perrin
On Thu, Sep 18, 2008 at 11:31 AM, Josh Donovan [EMAIL PROTECTED] wrote: John Horne wrote: For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto date, so you could download one of those from a mirror and install it. Personally, I install rkhunter from source, but you can

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread John Horne
On Thu, 2008-09-18 at 15:31 +, Josh Donovan wrote: John Horne wrote: For rkhunter, as far as I can remember, the Fedora 8/9 packages are upto date, so you could download one of those from a mirror and install it. Personally, I install rkhunter from source, but you can build an RPM

Re: [CentOS] Security Guide for CentOS/RHEL

2008-09-18 Thread Nick Goddard
On Thursday 18 September 2008 16:35, Jim Perrin wrote: For CentOS5, I'd recommend using aide instead of tripwire. The two do pretty much the same thing, but aide comes with centos5 by default (and is recommended in the NSA guide) aide is now provided in 4.7 as well. Regards Nick. --- Nick