Bastille-2.0.4-1.0 RPM for i386

From SourceForge / b / ba / bastille-linux

Bastille  is  a  system hardening / lockdown program which enhances the
security of a Unix host.  It configures daemons, system settings and
firewalls to be more secure.  It can shut off unneeded services and r-tools,
like rcp and rlogin, and helps create "chroot jails" that help limit the
vulnerability of common Internet services like Web services and DNS.

This tool currently hardens Red Hat 6.0-, Mandrake 6.0-8.1, HP-UX 11.00,
and HP-UX 11i v1 (AKA 11.11).  It is still being tested, but thought to be
stable, on Debian, SuSE and Turbo Linux.

If run in the Interactive modes (-c or -x), it can teach you a good deal about
Security while personalizing your system security state.  If run in the
quicker Automated mode, it can quickly tighten your machine, but not nearly
as effectively (since user/sysadmin education is an important step!)

To run:


 -bastille [(-b|-c|-r|-x)]

 -b : use a saved config file to apply changes directly to system
 -c : use the Curses (non-X11) GUI
 -r : revert Bastille changes to original file versions (pre-Bastille)
 -x : use the Perl/Tk (X11) GUI

Provides

• Bastille

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• rpmlib(PayloadFilesHavePrefix) = 4.0-1
• rpmlib(CompressedFileNames) = 3.0.4-1
• ld-linux.so.2
• libc.so.6
• /bin/sh
• /usr/bin/perl
• libc.so.6(GLIBC_2.0)
• libc.so.6(GLIBC_2.1)
• libc.so.6(GLIBC_2.1.3)

Copyright

GPL

Signatures

internal MD5: d237b61b84481065e2a21e731b676f38

Changelog

* Wed Nov 06 2002 Jay Beale <jay@bastille-linux.org> 2.0.4-1.0
  - Fixed a minor annoying bug where we used a lockfile in its own directory,  causing Red Hat to complain on each reboot that it could not be deleted.
* Wed Nov 06 2002 Jay Beale <jay@bastille-linux.org> 2.0.3-1.0
  - Fixed a bug that causes FTP.pm not to run at all.
* Sun Sep 01 2002 Jay Beale <jay@bastille-linux.org> 2.0.2-1.0
  - Updated for RH8.0 by adding vsftpd support and telling Bastille to recognize 8.0
* Tue Aug 20 2002 Jay Beale <jay@bastille-linux.org> 2.0.1-1.0
  - Moved all library files that we bring to /usr/lib/Bastille
  - Deleted old /usr/lib/perl5/site_perl/Bastille_{Tk,Curses} in post script
* Sat Aug 17 2002 Jay Beale <jay@bastille-linux.org> 2.0.1-0.9 
  - Cleaned up spec file
  - Fixed some quickie bugs: see CVS
* Mon Jul 29 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.7
  - Fixed post script and file locations to prevent conflict with previous versions
* Thu Jul 25 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.6
  - new RPM installation method
  - new revert method for undoing/reverting Bastille
  - fixed undefined subroutine at security checks error
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.5
  - bugfix: Bastille was still crudding out on RH7.3, claiming unsupported distro
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.4
  - bugfix: Bastille was crudding out on RH7.3, claiming unsupported distro
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.3
  - Red Hat 7.3 Support
  - HP-UX Support
  - Fixed bugs, made feature enhancements...
* Fri Mar 08 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-1.0
  - Red Hat 7.2 Support
  - Port Scan Attack Detector tool added
* Wed Feb 13 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.10mdk
  - Applied Mike's psad fixes.
  - Fixed BIND chrooting bugs.
  - Added disclaimer (thanks Keith and Tyler)
  - Cleaned up questions for readability, thanks for Pete's quibbling
* Wed Jan 16 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.9mdk
  - Fixed process accounting bug
  - Fixed tiny Interactive bugs
  - Fixed Questions.txt dependencies
* Sun Jan 13 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.8mdk
  - Applied Mike's psad installation fixes
  - Several minor bugfixes
* Mon Jan 07 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.7mdk
  - Added Sweth's UI-module code for more understandable dependency failures.
  - Added in more psad build fixes from Mike Rash
  - Fixed UndoBastille for Linux systems
* Tue Jan 01 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.6.1mdk
  -  Questions.txt updates for SuSE and Turbo
  -  Questions.txt fixed by Keith -- thanks!
  -  Build process for psad fixed
  -  Happy New Year
* Thu Dec 20 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.6mdk
  -  Minor tweaks
  -  Added psad build lines to the rpm process
  -  Tons of editing on Questions.txt for better readability.
* Mon Dec 17 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.5mdk
  -  Integrated additional changes and bugfixes
  -  Release Candidate for 1.3.0
* Sat Nov 24 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.4mdk
  -  Added Mike Rash's Port Scan Attack Detection (PSAD)
  -  Way to go Mike!
* Tue Nov 13 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.3mdk
  -  Added Patches.pm to spec file
  -  Fixed undo script paths
* Mon Nov 12 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.2mdk
  -  added HP modules to spec file
* Fri Nov 09 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.1mdk
  -  added support for GRUB
  -  added macros in requirements checking (for distros only)
  -  added Red Hat 7.2 support
  -  many additions to help run on HP-UX (thanks Hewlett Packard!)
  -  new firewalling code
  -  bugfixes/stabilization

Files

/etc/Bastille
/etc/Bastille/bastille-firewall-early.sh
/etc/psad/psad.conf
/etc/psad/psad_auto_ips
/etc/psad/psad_signatures
/usr/bin/whois.psad
/usr/lib/Bastille
/usr/lib/Bastille/API.pm
/usr/lib/Bastille/AccountSecurity.pm
/usr/lib/Bastille/Apache.pm
/usr/lib/Bastille/Bastille_Curses.pm
/usr/lib/Bastille/Bastille_Tk.pm
/usr/lib/Bastille/BootSecurity.pm
/usr/lib/Bastille/ConfigureMiscPAM.pm
/usr/lib/Bastille/Curses/Widgets.pm
/usr/lib/Bastille/DNS.pm
/usr/lib/Bastille/DisableUserTools.pm
/usr/lib/Bastille/FTP.pm
/usr/lib/Bastille/FilePermissions.pm
/usr/lib/Bastille/Firewall.pm
/usr/lib/Bastille/HP_API.pm
/usr/lib/Bastille/HP_UX.pm
/usr/lib/Bastille/IOLoader.pm
/usr/lib/Bastille/Logging.pm
/usr/lib/Bastille/MiscellaneousDaemons.pm
/usr/lib/Bastille/PSAD.pm
/usr/lib/Bastille/Patches.pm
/usr/lib/Bastille/Printing.pm
/usr/lib/Bastille/RemoteAccess.pm
/usr/lib/Bastille/SecureInetd.pm
/usr/lib/Bastille/Sendmail.pm
/usr/lib/Bastille/TMPDIR.pm
/usr/lib/perl5/site_perl/5.6.0/Psad.pm
/usr/sbin/AutomatedBastille
/usr/sbin/BastilleBackEnd
/usr/sbin/InteractiveBastille
/usr/sbin/RevertBastille
/usr/sbin/bastille
/usr/share/Bastille/Credits
/usr/share/Bastille/Questions.txt
/usr/share/Bastille/bastille-firewall
/usr/share/Bastille/bastille-firewall-pre-audit.sh
/usr/share/Bastille/bastille-firewall-reset
/usr/share/Bastille/bastille-firewall-schedule
/usr/share/Bastille/bastille-firewall.cfg
/usr/share/Bastille/bastille-ipchains
/usr/share/Bastille/bastille-netfilter
/usr/share/Bastille/bastille-tmpdir-defense.sh
/usr/share/Bastille/bastille-tmpdir.csh
/usr/share/Bastille/bastille-tmpdir.sh
/usr/share/Bastille/complete.xbm
/usr/share/Bastille/diskmond
/usr/share/Bastille/firewall/fwnotes.txt
/usr/share/Bastille/firewall/portforward.sh
/usr/share/Bastille/hosts.allow
/usr/share/Bastille/ifup-local
/usr/share/Bastille/incomplete.xbm
/usr/share/Bastille/kmsgsd
/usr/share/Bastille/psad
/usr/share/Bastille/psad-init
/usr/share/Bastille/psadwatchd
/usr/share/Bastille/user_guide.txt
/usr/share/doc/Bastille-2.0.4
/usr/share/doc/Bastille-2.0.4/COPYING
/usr/share/doc/Bastille-2.0.4/Credits
/usr/share/doc/Bastille-2.0.4/README
/usr/share/doc/Bastille-2.0.4/VERSION
/usr/share/doc/Bastille-2.0.4/complete.xbm
/usr/share/doc/Bastille-2.0.4/incomplete.xbm
/usr/share/doc/Bastille-2.0.4/readme.automate
/usr/share/doc/Bastille-2.0.4/readme.ftp
/usr/share/doc/Bastille-2.0.4/readme.interfaces
/usr/share/doc/Bastille-2.0.4/readme.patch
/usr/share/man/man1/bastille.1m.gz
/usr/share/man/man8/psad.8.gz
/var/lock/subsys/bastille

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Jul 25 01:17:08 2008