Hi all,
I have built HTML and PDF versions of the very-nearly-finished Security Guide, which has its focus on Fedora and is on its way to being available in the upcoming 11 release.
I thought there may be some members of this list who would like to take a look at it.
Any reviewers/comments at all are of course more than welcome.
http://sradvan.fedorapeople.org/Security_Guide/en-US/
Cheers,
On Mar 11, 2009, at 7:05 PM, Scott Radvan wrote:
Hi all,
I have built HTML and PDF versions of the very-nearly-finished Security Guide, which has its focus on Fedora and is on its way to being available in the upcoming 11 release.
I thought there may be some members of this list who would like to take a look at it.
Any reviewers/comments at all are of course more than welcome.
Wouldn't the mention of fail2ban be appropriate? My servers with public IP addresses get hundreds of failed login attempts per day unless I use iptables to block repeat offenders.
Isn't 'PermitRootLogin no' the default for sshd?
I think a short "don't disable SELinux when things go awry" section with pointers to policy booleans and setroubleshoot would be appropriate. Dan Walsh's blog is a good SELinux resource without a document reference.
http://iase.disa.mil/stigs/SRR/unix.html deserves a mention.
Good stuff, joe
On Wed, Mar 11, 2009 at 21:56:08 -0500, Joe Nall joe@nall.com wrote:
Wouldn't the mention of fail2ban be appropriate? My servers with public IP addresses get hundreds of failed login attempts per day unless I use iptables to block repeat offenders.
If you are just getting hundreds per day you shouldn't need to worry about it. You shouldn't have passwords so simple as to be significantly vulnerable to guessing at that rate. This is also unlikely to be a high enough rate to cause denial of service problems for your machine.
On Thu, Mar 12, 2009 at 1:05 AM, Scott Radvan sradvan@redhat.com wrote:
Hi all,
I have built HTML and PDF versions of the very-nearly-finished Security Guide, which has its focus on Fedora and is on its way to being available in the upcoming 11 release.
I thought there may be some members of this list who would like to take a look at it.
Any reviewers/comments at all are of course more than welcome.
I am a mostly a security expert (CEH and the like). But i am not, for now, a fedora people. How it is possible to contribuite ? By mail ?
Thanks
Cheers,
-- Scott Radvan, Content Author Red Hat APAC (Brisbane) http://www.apac.redhat.com
-- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
yersinia, http://fedoraproject.org/en/join-fedora <--- just pick an area and jump in.
- Adam
2009/3/12 yersinia yersinia.spiros@gmail.com:
On Thu, Mar 12, 2009 at 1:05 AM, Scott Radvan sradvan@redhat.com wrote:
Hi all,
I have built HTML and PDF versions of the very-nearly-finished Security Guide, which has its focus on Fedora and is on its way to being available in the upcoming 11 release.
I thought there may be some members of this list who would like to take a look at it.
Any reviewers/comments at all are of course more than welcome.
I am a mostly a security expert (CEH and the like). But i am not, for now, a fedora people. How it is possible to contribuite ? By mail ?
Thanks
Cheers,
-- Scott Radvan, Content Author Red Hat APAC (Brisbane) http://www.apac.redhat.com
-- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list
-- fedora-devel-list mailing list fedora-devel-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-devel-list