Opinions on Bastille?

[fryem720]

I was trolling through the projects on sourceforge.net and came across one called Bastille-linux. It is described as follows:

"Bastille Linux is a Hardening Program which enhances the security of a Linux box, by configuring daemons, system settings and firewalling. It currently hardens Red Hat, Mandrake, HP-UX and Debian, with support coming for SuSE and TurboLinux."

According to the project home page, it now supports fc1 and 2, with support for fc3 on the way.

Has anyone used this app or heard anything about it?

[fryem720]

Hmmm. 31 views, but no replies. Perhaps Bastille itself is preventing people from divulging its secrets. ;)

[robert_storey]

I've used Bastille in the past, though I think it's now kind of out-of-date. Basically, it does things like turn off services. It prompts you as it does things and gives an explanation of what it's going to do, so it's somewhat useful to learn about security. It doesn't really do all that much. There is no harm in running it - at the very end, you can choose not to save the changes it would make.

cheers,
RS

[ewdi]

i dont like the way bastille works, it crashed my server before and locks up, currently i'm using APF

[fryem720]

robert: Thank you for the reply! I appreciate your comments.

ewdi: Thank you, too. What is APF and where can I find it?

[ewdi]

Advannced Firewall Policy , you can get it at rfxnetworks.com under project

[fryem720]

Thanks! I'll check it out now.