Linux Security Overview, ISSA-PS 2003, Page 00008

[index] [text page] [<<start] [<prev] [next>] [last>>]
Page 8: Bastille Configuration File

  
  Bastille Configuration File
  $ cat /etc/Bastille/config
  # Q: Would you like to set more restrictive permissions on the administration utilities? [N]
  FilePermissions.generalperms_1_1="Y"
  # Q: Would you like to disable SUID status for mount/umount?
  FilePermissions.suidmount="Y"
  # Q: Would you like to disable SUID status for ping? [Y]
  FilePermissions.suidping="Y"
  # Q: Would you like to disable SUID status for at? [Y]
  FilePermissions.suidat="Y"
  # Q: Would you like to prohibit the clear-text r-protocols which trust IP addresses for authentication? [Y]
  AccountSecurity.protectrhost="Y"
  ...

Presented at ISSA Puget Sound, 2003.