LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Stock Install of Fedora Core 4 with SELinux (http://www.linuxquestions.org/questions/linux-security-4/stock-install-of-fedora-core-4-with-selinux-337531/)

SYD2005 06-27-2005 01:49 AM

Stock Install of Fedora Core 4 with SELinux
 
Hi guys,

I have a question with regards to stock standard installs of FC4 with SELinux switched on and set in passive mode. For general surfing, emailing, and learning linux, would you guys consider this a reasonable setup security wise? Also, after setting up the box I have gone and turned off nearly everything that wasnt needed as a Service. Is there anything else you would suggest to do in terms of tightening up the system?

Many thanks in advance for your advice....

Skyline 06-27-2005 08:38 AM

Hi SYD2005, and welcome to LQ.

One obvious candidate would be a Firewall - you could utilise Fedora's own basic Firewall, or alternately, another popular option would be to install Firestarter - for example, simply su to root user in an xterm, then:

Code:

# yum install firestarter
In addition, make sure your Passwords are adequate, and make sure you keep your box Updated with yum - ie:

Code:

# yum update

SYD2005 06-27-2005 07:31 PM

Quote:

Originally posted by Skyline
Hi SYD2005, and welcome to LQ.

One obvious candidate would be a Firewall - you could utilise Fedora's own basic Firewall, or alternately, another popular option would be to install Firestarter - for example, simply su to root user in an xterm, then:

Code:

# yum install firestarter
In addition, make sure your Passwords are adequate, and make sure you keep your box Updated with yum - ie:

Code:

# yum update

Hi Skyline,

Thanks very much for your reply and welcome.

OK, noted the firewall and will install it. One further question though, are there any extra benefits to Firestarter, Guarddog etc over the inbuilt firewall? As for services, I have turned pretty much everything off accept for yum, etc. I figured it is more common sense to turn everything off untill I know I need it. Am open to any other suggestions from the community...

Thanks again :-)


All times are GMT -5. The time now is 11:22 AM.