Bastille is a good tool, as well as a good learning experience. So is the CISecurity benchmark http://www.cisecurity.org/bench_linux.html which is particularly designed to be non-invasive tools. Neither one will make your system bullet-proof, but both will help you keep from being the lowest-hanging fruit to be attacked. Rod > > I know that someone posted it before, but I couldn't find any references > > to a Tripwire substitute. > > Aide is a pretty good sub. Google for the homepage. http://www.cs.tut.fi/~rammer/aide.html http://sourceforge.net/projects/aide -- Rod Hauser, CISSP, RHCE St Louis, Missouri, USA, Sol 3, Milky Way
