Hi all,
I was wondering if anyone can recommend a Linux Audit checklist or
template especially on Red hat.
Thanks

I would also be interested, my own checklist in the past has been:
1) no remote root login via ssh
2) every user in /etc/passwd with a valid shell has a secure pw
3) only 1 service (not including ssh) accessible remotely
4) IPtables rules very specifically allowing only authorized ingress and
egress
5) up2date and rhn subscribed and working

This is just what I can remmber at the moment, there are a lot of fixes I
put in when I am sitting at the console and remember, and most of the
really relevant fixes are service specific, perhaps it would help if you
specified what services you are concerned about? I assume you are
referring to a server set up with RHEL, if you are referring to a WS, that
is a whole 'nother can of worms.

Thu, 17 Aug 2006, Mohammad Hadidi wrote:

Hi all,
>
>
>
I was wondering if anyone can recommend a Linux Audit checklist or
template especially on Red hat.
>
>
>
>
Thanks