LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 02-27-2011, 09:26 PM   #1
lugoteehalt
Senior Member
 
Registered: Sep 2003
Location: UK
Distribution: Debian
Posts: 1,215
Blog Entries: 2

Rep: Reputation: 49
Bastille won't play, wrong OS version?


Using current stable Debian amd64. Installed the security hardening program Bastille in the normal way it said:
ERROR: 'DB6.0' is not a supported operating system.

So unpacked the *.tar.bz2 version:
Code:
$ ./InteractiveBastille 
ERROR:   'DB6.0' is not a supported operating system.
         Valid operating system versions are as follows:
         'DB2.2' 'DB3.0' 'DB3.1' 'DB4.0' 'RH6.0' 
         'RH6.1' 'RH6.2' 'RH7.0' 'RH7.1' 'RH7.2' 
         'RH7.3' 'RH8.0' 'RH9' 'MN6.0' 'MN6.1' 
         'MN7.0' 'MN7.1' 'MN7.2' 'MN8.0' 'MN8.1' 
         'MN8.2' 'HP-UX11.00' 'HP-UX11.11' 'HP-UX11.22' 'HP-UX11.23' 
         'SE7.2' 'SE7.3' 'SE8.0' 'TB7.0' 'OSX10.2.0' 
         'OSX10.2.1' 'OSX10.2.2' 'OSX10.2.3' 'OSX10.2.4' 
ERROR:   Invalid argument list:
         Usage: bastille [ -b | -c | -r | -x [ --os version ] ]
         -b : use a saved config file to apply changes
              directly to system
         -c : use the Curses (non-X11) TUI
         -r : revert all Bastille changes to-date
         -x : use the Perl/Tk (X11) GUI
         --os version : ask all questions for the given operating system
                        version.  e.g. --os RH6.0
So Bastille won't work?

The reason I ask is that I had this problem before, or similar, and someone here fixed it and Bastille worked. Thanks any help.
 
Click here to see the post LQ members have rated as the most helpful post in this thread.
Old 02-28-2011, 12:55 AM   #2
EDDY1
LQ Addict
 
Registered: Mar 2010
Location: Oakland,Ca
Distribution: wins7, Debian wheezy
Posts: 6,838

Rep: Reputation: 649Reputation: 649Reputation: 649Reputation: 649Reputation: 649Reputation: 649
Last release was in 2008
 
Old 02-28-2011, 03:24 AM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,338
Blog Entries: 55

Rep: Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538
Wheezy and sid have Bastille (http://packages.debian.org/search?ar...words=bastille) so if it's only patching Bastille adding "DB6.0" to the distribution list you should be able to pull that off I think.
 
2 members found this post helpful.
Old 02-28-2011, 03:28 AM   #4
EDDY1
LQ Addict
 
Registered: Mar 2010
Location: Oakland,Ca
Distribution: wins7, Debian wheezy
Posts: 6,838

Rep: Reputation: 649Reputation: 649Reputation: 649Reputation: 649Reputation: 649Reputation: 649
Quote:
Wheezy and sid have Bastille (http://packages.debian.org/search?ar...words=bastille) so if it's only patching Bastille adding "DB6.0" to the distribution list you should be able to pull that off I think.
Sorry I guess my info wasn't accurate.
 
Old 02-28-2011, 10:54 AM   #5
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 157Reputation: 157
Quote:
Originally Posted by EDDY1 View Post
Sorry I guess my info wasn't accurate.
Actually, you're probably right.

Here's what the Bastille pages state:

Quote:
Javier is an amazing Open Source developer who maintains both the Bastille port and the Tiger port for Debian.
Note the word Tiger...that OS version is very old!

Whoever is wrapping up the package on the Debian side may be packaging old code. Remember, Bastille is just a batch of scripts. Based on what the OP posted, either his copy of the OS/package is old or the latest code release for Bastille hasn't been updated in awhile (but code like this is relatively easy to edit).

Last edited by unixfool; 02-28-2011 at 11:05 AM.
 
1 members found this post helpful.
Old 03-01-2011, 12:35 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,338
Blog Entries: 55

Rep: Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538
Quote:
Originally Posted by unixfool View Post
Note the word Tiger...that OS version is very old!
No, no, that's the other tiger! Javier etc, etc work[s|ed] on GNU/Tiger (www.nongnu.org/tiger/).
 
Old 03-01-2011, 07:48 AM   #7
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 157Reputation: 157
Aha! I see his name (Javier) buried within that link's content, toward the bottom.

LOL!
 
Old 03-01-2011, 06:53 PM   #8
lugoteehalt
Senior Member
 
Registered: Sep 2003
Location: UK
Distribution: Debian
Posts: 1,215
Blog Entries: 2

Original Poster
Rep: Reputation: 49
Quote:
Originally Posted by unSpawn View Post
Wheezy and sid have Bastille (http://packages.debian.org/search?ar...words=bastille) so if it's only patching Bastille adding "DB6.0" to the distribution list you should be able to pull that off I think.
So I use my skill and judgement to get it to allow DB6.0, just stop it from stopping without worrying why they put in that restriction.

Have tried just adding DB6.0 to a list in one file, didn't work. I'll persevere and re-post if I get it to run. Thanks.
 
Old 03-01-2011, 07:58 PM   #9
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,338
Blog Entries: 55

Rep: Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538
Quote:
Originally Posted by lugoteehalt View Post
didn't work
Saying that doesn't really help us.

Try these patches (3 files in the bastille-3.0.*/Bastille dir) and tell me if it does or does not work:
Code:
--- API.pm.old       2011-03-01 11:11:10.000000000 +0100
+++ API.pm   2011-03-01 11:11:11.000000000 +0100
@@ -562,7 +562,7 @@
 sub getSupportedOSHash () {
 
     my %osHash = ("LINUX" => [
-                             "DB2.2", "DB3.0", "DB3.1", "DB4.0", "DB4.1", "DB5.0",
+                             "DB2.2", "DB3.0", "DB3.1", "DB4.0", "DB4.1", "DB5.0", "DB6.0", 
                              "RH6.0","RH6.1","RH6.2","RH7.0",
                              "RH7.1","RH7.2","RH7.3","RH8.0",
                              "RH9",
Code:
--- API.pm.sweth.old 2011-03-01 11:11:10.000000000 +0100
+++ API.pm.sweth     2011-03-01 11:11:11.000000000 +0100
@@ -522,6 +522,13 @@
          "initd"             => "/etc/init.d",
          "rcd"               => "/etc/"
       },
+      "DB6.0" => {
+         "floppy"            => "/floppy",
+         "httpd.conf"        => "/etc/apache/httpd.conf",
+         "httpd_access.conf" => "/etc/apache/access.conf",
+         "initd"             => "/etc/init.d",
+         "rcd"               => "/etc/"
+      },
       "SO2.6" => {
       },
       "SO7" => {
Code:
--- IOLoader.pm.old  2011-03-01 11:11:10.000000000 +0100
+++ IOLoader.pm      2011-03-01 11:11:11.000000000 +0100
@@ -247,7 +247,7 @@
                                $data =~ s/\bMN\b/$supported_versions/;
                            }
                            if ($data =~ /\bDB\b/) {
-                               my $supported_versions = 'DB2.2 DB3.0 DB3.1 DB4.0 DB4.1 DB5.0';
+                               my $supported_versions = 'DB2.2 DB3.0 DB3.1 DB4.0 DB4.1 DB5.0 DB6.0';
                                $data =~ s/\bDB\b/$supported_versions/;
                            } 
                            if ($data =~ /\bSE\b/) {
 
1 members found this post helpful.
Old 03-01-2011, 08:54 PM   #10
eveningsky339
Member
 
Registered: Mar 2010
Location: Western Maine
Distribution: PCLinuxOS (LXDE)
Posts: 466

Rep: Reputation: 51
Be sure to file a bug report so the package maintainer gets the code up to date.
 
1 members found this post helpful.
Old 03-01-2011, 09:15 PM   #11
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 157Reputation: 157
He can try but there's a good chance the package maintainer isn't doing that level of maintaining. While I was wrong about Tiger, I'm actually pretty comfortable in saying that Bastille may be at a dead-end or is awaiting for someone else to maintain it. The Bastille pages appear to be either very stagnant or dead. They are at least 3 years out of date. I actually saw several big name security vendors (when I was researching yesterday...I didn't keep track of the names but I can search again and provide them if you wish) stating that they also thought Bastille has gone the way of the dodo.
 
Old 03-02-2011, 03:27 AM   #12
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,338
Blog Entries: 55

Rep: Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538Reputation: 3538
Quote:
Originally Posted by unixfool View Post
He can try
Sure wouldn't hurt.


Quote:
Originally Posted by unixfool View Post
Bastille may be at a dead-end or is awaiting for someone else to maintain it. The Bastille pages appear to be either very stagnant or dead. They are at least 3 years out of date.
Well yes and no. Yes Jay Beale may have dropped maintaining Bastille-linux but if you check the changelog you'll see Javier Fernandez-Sanguino Pena at least does maintain the Debian port and this does include vuln fixes.
 
Old 03-02-2011, 03:39 PM   #13
lugoteehalt
Senior Member
 
Registered: Sep 2003
Location: UK
Distribution: Debian
Posts: 1,215
Blog Entries: 2

Original Poster
Rep: Reputation: 49
Quote:
Originally Posted by unSpawn View Post
Try these patches (3 files in the bastille-3.0.*/Bastille dir) and tell me if it does or does not work
Thanks. Will do, give me a couple of days.

EDIT: eveningsky339, thanks, I'll try to organise that.

Last edited by lugoteehalt; 03-02-2011 at 03:43 PM.
 
Old 03-29-2012, 08:23 AM   #14
nerdalert
LQ Newbie
 
Registered: Mar 2012
Location: in the basement
Distribution: Debian
Posts: 4

Rep: Reputation: Disabled
Other Options

Is there anything out there like Bastille that I should try?
 
Old 03-30-2012, 01:51 AM   #15
craigevil
Senior Member
 
Registered: Apr 2005
Location: OZ
Distribution: Debian Sid
Posts: 4,734
Blog Entries: 12

Rep: Reputation: 461Reputation: 461Reputation: 461Reputation: 461Reputation: 461
Everything Bastille does can be done without it. Just takes a little more work.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
My movieplayer can't play mpeg-files. What's wrong? BF1 Linux - Newbie 3 02-06-2011 04:37 AM
cat /proc/version - displays wrong version babu198649 Linux - Newbie 2 11-10-2008 04:10 AM
mp3's created with kaudiocreator play in wrong order MartyJay Linux - Software 14 10-31-2008 06:08 AM
[openal] :sound file dosen't play well. Am i doing anything wrong? Hyakutake Programming 15 12-05-2006 11:42 AM
slackware startx starts the wrong version, i didn't even know i had another version edman007 Linux - Software 3 05-16-2004 07:38 PM


All times are GMT -5. The time now is 09:10 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration