Re: Custom Unix server installations -- to harden extensively ?

[Paul Robertson <proberts () patriot net>]

On Tue, 13 May 2003, Julian Gomez wrote:

> Hi,
>
> What is the relative opinion of hardening general purpose Unix servers
> (general == mail, web, db hosts). Obviously, wherever possible, I'd like to
> get most of the unwanted packages stripped and removed; but very frequently
> -- this is extremely time consuming and is alot of documentation work
> (which btw, no one ever bothers to read).

I generally set up a custom install for Linux and Solaris, then make an 
update set that needs to be run until it's time to fix the install 
again...

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards