Bastille-2.1.1-1.0 RPM for i386

From SourceForge / b / ba / bastille-linux / bastille-linux / 2.1.1

Bastille  is  a  system hardening / lockdown program which enhances the
security of a Unix host.  It configures daemons, system settings and
firewalls to be more secure.  It can shut off unneeded services and r-tools,
like rcp and rlogin, and helps create "chroot jails" that help limit the
vulnerability of common Internet services like Web services and DNS.

This tool currently hardens Red Hat 6.0-7.3, Mandrake 6.0-8.1, HP-UX 11.00,
and HP-UX 11i v1 (AKA 11.11).  It is still being tested, but thought to be
stable, on Debian, SuSE and Turbo Linux.

If run in the preferred Interactive mode, it can teach you a good deal about
Security while personalizing your system security state.  If run in the
quicker Automated mode, it can quickly tighten your machine, but not nearly
as effectively (since user/sysadmin education is an important step!)

To run:


 -bastille [(-b|-c|-r|-x)]

 -b : use a saved config file to apply changes directly to system
 -c : use the Curses (non-X11) GUI
 -r : revert Bastille changes to original file versions (pre-Bastille)
 -x : use the Perl/Tk (X11) GUI

Provides

• Bastille

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• rpmlib(PayloadFilesHavePrefix) > 4.0-1
• rpmlib(CompressedFileNames) < 3.0.4-1
• ld-linux.so.2
• libc.so.6
• /bin/sh
• /usr/bin/perl >=
• libc.so.6(GLIBC_2.0) >
• libc.so.6(GLIBC_2.1) =
• libc.so.6(GLIBC_2.1.3)

License

GPL

Changelog

* Tue May 06 2003 Jay Beale <jay@bastille-linux.org> 2.1.1-1.0
  - Updated for RH9.0 by adding CUPS support.
* Sun Sep 01 2002 Jay Beale <jay@bastille-linux.org> 2.1.0-0.1
  - Updated for RH8.0 by adding vsftpd support and telling Bastille to recognize 8.0
* Sun Sep 01 2002 Jay Beale <jay@bastille-linux.org> 2.0.2-1.0
  - Updated for RH8.0 by adding vsftpd support and telling Bastille to recognize 8.0
* Tue Aug 20 2002 Jay Beale <jay@bastille-linux.org> 2.0.1-1.0
  - Moved all library files that we bring to /usr/lib/Bastille
  - Deleted old /usr/lib/perl5/site_perl/Bastille_{Tk,Curses} in post script
* Sat Aug 17 2002 Jay Beale <jay@bastille-linux.org> 2.0.1-0.9 
  - Cleaned up spec file
  - Fixed some quickie bugs: see CVS
* Mon Jul 29 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.7
  - Fixed post script and file locations to prevent conflict with previous versions
* Thu Jul 25 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.6
  - new RPM installation method
  - new revert method for undoing/reverting Bastille
  - fixed undefined subroutine at security checks error
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.5
  - bugfix: Bastille was still crudding out on RH7.3, claiming unsupported distro
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.4
  - bugfix: Bastille was crudding out on RH7.3, claiming unsupported distro
* Fri Jun 21 2002 Jay Beale <jay@bastille-linux.org> 2.0.0-0.3
  - Red Hat 7.3 Support
  - HP-UX Support
  - Fixed bugs, made feature enhancements...
* Fri Mar 08 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-1.0
  - Red Hat 7.2 Support
  - Port Scan Attack Detector tool added
* Wed Feb 13 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.10mdk
  - Applied Mike's psad fixes.
  - Fixed BIND chrooting bugs.
  - Added disclaimer (thanks Keith and Tyler)
  - Cleaned up questions for readability, thanks for Pete's quibbling
* Wed Jan 16 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.9mdk
  - Fixed process accounting bug
  - Fixed tiny Interactive bugs
  - Fixed Questions.txt dependencies
* Sun Jan 13 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.8mdk
  - Applied Mike's psad installation fixes
  - Several minor bugfixes
* Mon Jan 07 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.7mdk
  - Added Sweth's UI-module code for more understandable dependency failures.
  - Added in more psad build fixes from Mike Rash
  - Fixed UndoBastille for Linux systems
* Tue Jan 01 2002 Jay Beale <jay@bastille-linux.org> 1.3.0-0.6.1mdk
  -  Questions.txt updates for SuSE and Turbo
  -  Questions.txt fixed by Keith -- thanks!
  -  Build process for psad fixed
  -  Happy New Year
* Thu Dec 20 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.6mdk
  -  Minor tweaks
  -  Added psad build lines to the rpm process
  -  Tons of editing on Questions.txt for better readability.
* Mon Dec 17 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.5mdk
  -  Integrated additional changes and bugfixes
  -  Release Candidate for 1.3.0
* Sat Nov 24 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.4mdk
  -  Added Mike Rash's Port Scan Attack Detection (PSAD)
  -  Way to go Mike!
* Tue Nov 13 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.3mdk
  -  Added Patches.pm to spec file
  -  Fixed undo script paths
* Mon Nov 12 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.2mdk
  -  added HP modules to spec file
* Fri Nov 09 2001 Jay Beale <jay@bastille-linux.org> 1.3.0-0.1mdk
  -  added support for GRUB
  -  added macros in requirements checking (for distros only)
  -  added Red Hat 7.2 support
  -  many additions to help run on HP-UX (thanks Hewlett Packard!)
  -  new firewalling code
  -  bugfixes/stabilization

Files

/etc/Bastille
/etc/Bastille/bastille-firewall-early.sh
/etc/psad/psad.conf
/etc/psad/psad_auto_ips
/etc/psad/psad_signatures
/usr/bin/whois.psad
/usr/lib/Bastille
/usr/lib/Bastille/API.pm
/usr/lib/Bastille/AccountSecurity.pm
/usr/lib/Bastille/Apache.pm
/usr/lib/Bastille/Bastille_Curses.pm
/usr/lib/Bastille/Bastille_Tk.pm
/usr/lib/Bastille/BootSecurity.pm
/usr/lib/Bastille/ConfigureMiscPAM.pm
/usr/lib/Bastille/Curses/Widgets.pm
/usr/lib/Bastille/DNS.pm
/usr/lib/Bastille/DisableUserTools.pm
/usr/lib/Bastille/FTP.pm
/usr/lib/Bastille/FilePermissions.pm
/usr/lib/Bastille/Firewall.pm
/usr/lib/Bastille/HP_API.pm
/usr/lib/Bastille/HP_UX.pm
/usr/lib/Bastille/IOLoader.pm
/usr/lib/Bastille/IPFilter.pm
/usr/lib/Bastille/Logging.pm
/usr/lib/Bastille/MiscellaneousDaemons.pm
/usr/lib/Bastille/OSX_API.pm
/usr/lib/Bastille/PSAD.pm
/usr/lib/Bastille/Patches.pm
/usr/lib/Bastille/Printing.pm
/usr/lib/Bastille/RemoteAccess.pm
/usr/lib/Bastille/SecureInetd.pm
/usr/lib/Bastille/Sendmail.pm
/usr/lib/Bastille/TMPDIR.pm
/usr/lib/Bastille/TestAPI.pm
/usr/lib/Bastille/test_AccountSecurity.pm
/usr/lib/Bastille/test_Apache.pm
/usr/lib/Bastille/test_DNS.pm
/usr/lib/Bastille/test_FTP.pm
/usr/lib/Bastille/test_HP_UX.pm
/usr/lib/Bastille/test_MiscellaneousDaemons.pm
/usr/lib/Bastille/test_SecureInetd.pm
/usr/lib/Bastille/test_Sendmail.pm
/usr/lib/perl5/site_perl/5.6.0/Psad.pm
/usr/sbin/AutomatedBastille
/usr/sbin/BastilleBackEnd
/usr/sbin/InteractiveBastille
/usr/sbin/RevertBastille
/usr/sbin/bastille
/usr/share/Bastille/Credits
/usr/share/Bastille/Questions.txt
/usr/share/Bastille/bastille-firewall
/usr/share/Bastille/bastille-firewall-pre-audit.sh
/usr/share/Bastille/bastille-firewall-reset
/usr/share/Bastille/bastille-firewall-schedule
/usr/share/Bastille/bastille-firewall.cfg
/usr/share/Bastille/bastille-ipchains
/usr/share/Bastille/bastille-netfilter
/usr/share/Bastille/bastille-tmpdir-defense.sh
/usr/share/Bastille/bastille-tmpdir.csh
/usr/share/Bastille/bastille-tmpdir.sh
/usr/share/Bastille/complete.xbm
/usr/share/Bastille/diskmond
/usr/share/Bastille/firewall/fwnotes.txt
/usr/share/Bastille/firewall/portforward.sh
/usr/share/Bastille/hosts.allow
/usr/share/Bastille/ifup-local
/usr/share/Bastille/incomplete.xbm
/usr/share/Bastille/kmsgsd
/usr/share/Bastille/psad
/usr/share/Bastille/psad-init
/usr/share/Bastille/psadwatchd
/usr/share/Bastille/user_guide.txt
/usr/share/doc/Bastille-2.1.1
/usr/share/doc/Bastille-2.1.1/COPYING
/usr/share/doc/Bastille-2.1.1/Credits
/usr/share/doc/Bastille-2.1.1/README
/usr/share/doc/Bastille-2.1.1/VERSION
/usr/share/doc/Bastille-2.1.1/complete.xbm
/usr/share/doc/Bastille-2.1.1/incomplete.xbm
/usr/share/doc/Bastille-2.1.1/readme.automate
/usr/share/doc/Bastille-2.1.1/readme.ftp
/usr/share/doc/Bastille-2.1.1/readme.interfaces
/usr/share/doc/Bastille-2.1.1/readme.patch
/usr/share/man/man1/bastille.1m.gz
/usr/share/man/man8/psad.8.gz
/var/lock/subsys/bastille

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri May 17 23:05:22 2013