Hi Chris,
I can heartily recommend:
Maximum Linux Security by Anonymous, published by www.samspublishing.com,
ISBN 0-672-31670-6
As being a good grounding in some of the principles of linux security. The same author also wrote Maximum Security, which is a more general book, that I unfortunately haven't got yet!
Iain
There is also a German translation from the "Markt+Technik Verlag München" available, for the Germans in here. The quality of the translation is quite decent, and it might even happen that some circumstances are a bit more clear in the translation. It lacks about 1.2 chapters, whereas some new text was inserted in some places by the editor. I've done the final editing and checking for errors, so I know both versions - that job was tough at times. The book is a nice inspiration source with the long list of problems that the author sheds light on. On the other hand, a path that guides the reader to gain more experience with the issues is almost missing. Since software seldom gets very old, the breaches mentioned in the book aren't recent ones. The author states the fact that the book can't claim any actuality right at the beginning. This should be taken seriously - you can't maintain a half-way secure system if you don't stay tuned with the recent issues at least in vendor security announcements. Roman. -- - - | Roman Drahtmüller <draht@suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -