tool to check security

m.roth at 5-cent.us m.roth at 5-cent.us
Tue Feb 1 19:10:53 UTC 2011


Paul M. Whitney wrote:
<snip>
> You can also look at NIST web pages for SCAP and OVAL for tools that may
> help you with securing your system.  And while I would not recommend
> following it to the letter, there is a huge amount of tips and suggestions
> in the NSA SNAC Guide available here:
> http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf
>
> You may also want to consider reading up on the NIST Common
> Criteria/Protection Profiles that companies such as HP and IBM have
> developed to secure their systems with an Evaluated Assurance Level of 4
> (EAL4).
<snip>
Heh - a lot of the NIST recommendations actually either use, or refer to
(I forget) Bastille Linux.

         mark




More information about the redhat-list mailing list