Use BastilleUNIX to harden Linux systems

Even with the common vulnerabilities I mentioned earlier, Linux is still a stable operating system (OS) that can withstand security tests ). However, this does not mean that you can leave it undefended. Over time, configuration changes, third-party software, and human intervention can easily change the security of a previously secure Linux system. This will inevitably lead

Even with the common vulnerabilities I mentioned earlier, Linux is still a stable operating system (OS) that can withstand security tests ). However, this does not mean that you can leave it undefended. Over time, configuration changes, third-party software, and human intervention can easily change the security of a previously secure Linux system. This will inevitably result in at least repeated vulnerability assessment and audit reports.

However, there is a way to build a solid Linux security Foundation to guarantee your business success in the future. this is to reinforce your Linux system through Bastille UNIX, it is an open-source project led by Jay Beale.

The previously named Bastille Linux Bastille UNIX can guide you through the OS reinforcement process based on the GUI, which is applicable to Debian, Gentoo, Mandriva, Red Hat, and SUSE Linux, HP-UX and Mac OS X systems. Its intuitive Q & A method allows you to lock your system without worrying about mistyping or incorrect configuration. Bastille is not just a reinforcement program-it is also a good learning help and can be used for teaching.

Bastille UNIX is easier to download and run. There are many types of system reinforcement options, including patches, file licenses, account security, domain name systems, and so on. 1. Bastille prompts you some specific problems and provides detailed explanations to ensure that the effects of each action are understandable.

498) this. style. width = 498; "border = 0>

?? Bastille UNIX system reinforcement problems and explanations (click the image itself to enlarge)

With Bastille, you can always cancel the modifications you have made. However, as described in the Bastille UNIX site, if many manual changes have been made, this may not be very useful because the program is continuously running. There is still a problem of change management that needs to be handled by yourself, not the disadvantage of Bastille.

If you prefer the manual method, you can always manually harden your Linux system. There are many Linux reinforcement best practices on the website, such as the benchmark and Defense Information System proxy UNIX security Implementation Guide for the Internet Security Center.

Taking the time to harden your Linux system will allow you to add more work in the short term, and if you are not careful, you will stop the work of your reinforced system. Be careful but never be intimidated. It is worth a little time, money, and effort to increase Linux security. A secure system will eventually benefit you from fewer issues in security assessment and audit reports, helping you put annoying things under control.