I've recently uploaded a new version of Bastille (the *nix hardening tool, more info at http://bastille-linux.org) to the 'experimental' archive. The version of the package is 3.0.9-1 and it should work without any glitches in any sid / testing / stable Debian system. It can be downloaded from http://packages.debian.org/experimental/admin/bastille I intend to replace the (ancient) 2.1.1 release in Debian (sid/etch) with this new release. Even though some of the new features of this new release (assement of the system security) do not currently work I would like other's input on this version. So, I would really appreciate if people used this new version and told me whether: - it works without glitches in their Debian system (please specify which release) - it properly hardens their system based on the answers they have given - you miss some hardening features (i.e. things that the "Debian Securing Manual" recommends [1] - you still unfixed some of the issues that are marked as 'fixed-in-experimental' in the BTS [2] Thank you all in advance for your help in testing this security-oriented package. Regards Javier [1] http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html [2] http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=bastille
Attachment:
signature.asc
Description: Digital signature