Re: my fedora 13 machine has been cracked

[Andri Möll <andri@xxxxxx>]

Aside from the "centers" Joe mentioned, there were and are some books that give quite a good overview of all the components, services and config files that take part in GNU/Linux security.

I read these 2 a long while back, so you might want to check if either have been updated or search for other "hardening" Linux books: 

- Real World Linux® Security -- Intrusion Prevention, Detection, and Recovery, 2nd Edition (2002)

- Practical Unix & Internet Security, 3rd Edition (2003)

Andri

On Jun 27, 2012, at 9:40 PM, Joe Wulf wrote:

The issue is far bigger than just doing a few things to close your system up.  How valuable is your system for the 'mission' it provides?  What about your data?  What backup and/or disaster recovery processes have you prepared?

I'd actively migrate to a more recent edition of the OS, and put processes in place to keep patches updated.

There are a number of places to get hardening guidance... YMMV.  There is the Center for Internet Security, DISA and NIST.  Those are pretty good starting point.

---

From: Dov-el <dov_el@xxxxxx>
To: security@xxxxxxxxxxxxxxxxxxxxxxx
Sent: Wednesday, June 27, 2012 1:36 PM
Subject: my fedora 13 machine has been cracked

Someone has broken into my fedora 13 machine.  Aside from closing unused ports on the firewall and router and disabling unused services, what should I be doing to harden my set up?  Tripwire?  AIDE?  What else?  Thanks in advance!

--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security

--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security

--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security