Hello after "configuring" harden_suse script in the installation media of SuSE 9.0 you can find SecCheck Script V2.0 that help you to verify the status of your machine you can find documentation and script about hardening suse and susefirewall2 at http://www.suse.com/~marc/ and: http://susefaq.sourceforge.net/guides/fw_manual.html for susefirewall 2 Best regards Gian Fabio -----Messaggio originale----- Da: GarUlbricht7@netscape.net [mailto:GarUlbricht7@netscape.net] Inviato: lun 26/04/2004 9.52 A: suse-security@suse.com Cc: Oggetto: RE: [suse-security] Hardening SuSE 9 Armin Schoech wrote on 4/26/2004 2:45:05 AM Eastern Daylight Time:

...

On the actual hardening, there is a script for hardening SuSE linux systems called harden_suse or hard_suse or something similar to that. Searching the CDs using yast for the string "hard" should find it.

AFAIK, this script has not been updated for a while. So be careful before applying it to a SuSE 9.0 system. It may not work and/or cause problems.

Armin

--< sig line trimmed >----- There are several different approaches the I am awear of: Go into YaST2 --> Security & Users --> Security settings --> --> "change level" Install "bastille" (this was last upgraded on 12/3/03 for SuSE 9.0 per change notes). It's on the 9.0 CD/DVD. { Bastille Linux is a security hardening program for various Linux distributions.} "bastile" doesn't show up for 8.2 (at least I couldn't find it) For 8.0 there is a script with "harden" in it's name, and I think that is the one Armin is referring to above... Anther approach is the custom one. Do port scans and shut down all the services you aren't using etc., removing rpms that aren't needed, etc. (SuSE is shipping with more and more things turned off -- but it is always good to check) Hope this helps, -- "Paranoia is heightened awareness." -- __________________________________________________________________ Introducing the New Netscape Internet Service. Only $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here