Comments on: TC7 day 1 – Bastille hardening assessment tool

By: LONELF

LONELF — Mon, 19 Sep 2005 23:07:56 +0000

My boss paid nearly $300 to send me to a conference with this guy… I was rather dissapointed. For some reason i thought that it would perhaps be more in depth. Not Jay’s fault, but I would reccomend everyone not to pay to sit in on a linuxworld conference, not worth it.

By: Aaron

Aaron — Sun, 18 Sep 2005 23:10:59 +0000

Jay Beale’s presentation I assume, is the same at TC as it was at DefCon, or atleast close, and it was a great presentation.

And the reason bastille has to be maintained for individual distros, even from source, is because most distros use customized kernels and packages, like an ubuntu .deb package is different than the same program’s debian .deb version. And the programs install to different locations, so bastille would have a hard time finding everything. What you could do, is download bastille, look through the files to see what exactly it does, and do the same things by hand, just modified to fit Slackware.

By: digitalhead

digitalhead — Sun, 18 Sep 2005 19:36:18 +0000

Nice concept, but the program apparently doesn’t work on any distros of Linux other than the ones listed, not even from source. For instance, Slackware, which I use. It’s sad when even the source limits you to the exact same as the available precompiled packages.