similar to: Center for Internet Security "scoring tool"

it was said: >>On Fri, Mar 18, 2005 at 08:52:30AM +1000, Timothy Smith wrote: >> http://www.securityfocus.com/bid/12825/info/ > >That URL doesn't seem to have any details. > >> openbsd and netbsd have taken action on this, but i see no >>movment in >> the freebsd camp.... > >Well, you wouldn't, on the freebsd-questions list. Security

Hello, all! In the beginning I want to say, that this question seems to be a security one, isn't it so?.. Recently I was googling for the subject and coulnd't find anything... Even in the opennet.ru forum nobody answered me about this. So, as far as I got to know, randomizing source ports in FreeBSD is impossible now? (to be exact - is not implemented?) It's very interesting to me

we have CENTOS 5.3 on DELL server. This server is inside firewall and it continue get error messages on /var/log/messages: error getting update info: Cannot retrieve repository metadata (repomd.xml) for repository: base. Please verify its path and try again anyone know how to turn off it? Thanks. ___________________________________________________ ??????? ? ????????????????

Hi, I asked yum to update all packages on my CentOS 4.1 system and glibc was among them. Yum crashed in the middle and now I've some packages installed twice: 2 zlib-1.2.1.2-1.2 2 ncurses-5.4-13 2 mysql-4.1.10a-2.RHEL4.1 2 libstdc++-3.4.4-2 2 libstdc++-3.4.3-22.1 2 libselinux-1.19.1-7 2 libgcc-3.4.4-2 2 libgcc-3.4.3-22.1 2

Hi, I've built customs kernels from the SRPMs with the following: rpmbuild -bp --target=i686 /path/to/spec cd /usr/src ln -s /usr/src/redhat/BUILD/kernel-x.y.z/linux-x.y.z linux cd linux make oldconfig make menuconfig make all make modules make modules_install And it works just fine. The problem now is that I think installing that way isn't

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, I have a weird (?) problem here on a setup running CentOS 5.3 x86_64 (and OpenVZ, and some home-brew L2TP daemons, RIPd, BGPd, etc). There's a (VE in OpenVZ speak) virtual machine that has two ethernet interfaces, seen as eth0 and eth1, respectively. Those live in VLANs, but it's not important here. The thing is that on eth1 the

So, when you add a log device to a pool, it initiates a resilver. What is it actually doing, though? Isn''t the slog a copy of the in-memory intent log? Wouldn''t it just simply replicate the data that''s in the other log, checked against what''s in RAM? And presumably there isn''t that much data in the slog so there isn''t that much to check? Or

SELinux? On 22 April 2015 at 09:11, John R Pierce <pierce at hogranch.com> wrote: > On 4/21/2015 11:34 PM, Eero Volotinen wrote: > >> apply also ideas from this document: >> https://benchmarks.cisecurity.org/downloads/show-single/?file=rhel6.130 >> > > that should be your baseline. I suspect you'll find all the things you > mentioned are discussed in

apply also ideas from this document: https://benchmarks.cisecurity.org/downloads/show-single/?file=rhel6.130 -- Eero 2015-04-22 9:30 GMT+03:00 Tim <lists at kiuni.de>: > I am very interested. > > One of my suggestions: > > Firewall: > Network based firewall zone assignment (possibly disabling interface based > assignment) > > Regards > Tim > > Am 22.

Hi All:) I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from January 29th, 2012 :D Is the tool ready to use at the moment with CentOS 6/7? Are there any alternatives which you can recommend? Thanks for all info

Trying to update a second CentOS box, I'm getting this error repeatedly: [Errno 4] Socket Error: timed out I'm getting this on every mirror and have gone through the list of mirrors more than a dozen times. Oddly, the RPMs I'm trying to upgrade I upgraded just yesterday without a problem on another machine on the same LAN with no problems whatsoever. I can ping mirrors fine. There

Overview ======== This module implements the Center for Internet Security (CIS) Security Configuration Benchmark for Red Hat Enterprise Linux 6 v.1.1.0 (avilable at http://benchmarks.cisecurity.org). Each scored control has been implemented as a class or a custom fact. Installation ============ Please either: - Clone git repo from https://github.com/arildjensen/cis-puppet - Run "puppet

Hello everyone, CIS (http://www.cisecurity.org) is a non-profit that develops security benchmarks and scoring tools for free distribution. We have a project underway to create a FreeBSD benchmark which would be used extensively in the federal government and private business. However, we need some additional FreeBSD experts to help us drive the project. Until recently, Rich Murphy was helping

I want to check some client OpenVPN TUN interfaces with MRTG running at my VPN server, so I have to specify their OID interface numbers in mrtg.cfg. The problem is, these numbers are dynamic, as they may change whenever OpenVPN restarts for any reason... so, how can I write stanzas such as Target[somehostvpninterface] : ifInOctets.X&ifOutOctets.X:public@ <SOMEHOST.IP> without wiring up

Is there a script which I can customize which will run before doing service network stop and a script which I can run after doing service network start I see that /sbin/ifup-local runs after each interface is brought up, but I cannot figure out which scripts will run after all the interfaces are brought up.

> Red Hat Enterprise Linux 6 also introduces diskdevstat for monitoring > disk operations and netdevstat for monitoring network operations. How could I monitor disk operations under CentOS 5? The quote is from RHEL 6 release notes http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.0_Release_Notes/powermanagement.html - Jussi

Hello, I have a dual boot with Windows 7 64 bit enterprise edition and Opensolaris build 134. This is on Sun Ultra 40 M1 workstation. Three hard drives, 2 in ZFS mirror, 1 is shared with Windows. Last 2 days I was working in Windows. I didn''t touch the hard drives in any way except I once opened Disk Management to figure out why a external USB hard drive is not being listed.

I think, this SIG would/should care about hardening CentOS itself as a system not a complete environment (proxies, firewalls, etc.) The examples of the opener show this. Something else could be integrity checking possibly. I imagine a tool/script that could apply hardening stuff. Regards Tim Am 22. April 2015 09:23:52 MESZ, schrieb Eero Volotinen <eero.volotinen at iki.fi>: >Sounds

Hello, Are there any CDROM ISOs for s390x ? I can only find DVD ISOs. Thank you, -- Giovanni P. Tirloni http://www.tirloni.org

I know that this has been well-discussed already, but it''s been a few months - WD caviars with mpt/mpt_sas generating lots of retryable read errors, spitting out lots of beloved " Log info 31080000 received for target" messages, and just generally not working right. (SM 836EL1 and 836TQ chassis - though I have several variations on theme depending on date of purchase: 836EL2s,