Kernel update for RHEL 5 -- Success

[mark]

Bledsoe, Howard W CIV CNRNW, N632WI wrote:
> All:
> 
> 	Many thanks to Joey Prestia, Mark Roth, and Ben Kevan and for
> the helpful advice on how to update the kernel for my RHEL 5 systems.
> FYI, the update was completed without incident by:
<snip>
> 	The question of why is a valid one.  As part of a defense in
> depth strategy, we are required to keep up with all vendor security
> patches.  While nothing is completely hacker proof, we need to make
> things as difficult as possible for the bad guys.  This principle is
> applied even for those devices which are not connected to the Internet.

You've very welcome. One thing, though: is the system itself hardened? If not,
you should consider it, and for that, my best recommendation is Bastille Linux,
which is a hardening set of scripts, which I was just informed (during an
interview!) was mentioned and suggested by NIST.

	mark