Step-by-step Securing Slackware 9.1

odin123 · 11-11-2003, 03:32 PM

Hi all,

Is there a checklist for securing 9.1?

Anything simple (easy step-by-step procedures with easy explanations) yet complete?

I have found either too simplistic lists or too technical ones.

Anything in-between?

Thanks,

Odin

ringwraith · 11-16-2003, 08:59 AM

You might check the following project. THey have some scripts to help secure your box.

http://www.sastk.org/

daYz · 11-16-2003, 09:21 AM

Only one TCP port will stay open I believe if you disable inetd and the portmapper. You can disable them with the package tool. (And then choose setup) Port 6000 will stay open but can be closed. I will do a search to see how it can be.

Disabling inetd has consequences if your have servers running, disabling the portmapper will have consequences if you use NSF I believe.

daYz · 11-16-2003, 10:12 AM

Port 6000 can be closed by editing /usr/X11R6/bin/startx and putting "-nolisten tcp" behind serverargs=

serverargs="-nolisten tcp"

Works for me

odin123 · 11-16-2003, 11:03 AM

Thanks all for your suggestions!

daYz · 11-16-2003, 11:57 AM

You're welcome

ringwraith · 11-16-2003, 12:12 PM

I found another link I had stored away that gives step by step on hardening a slackware system. But you should never do anything that you do not personally understand what it is you are doing and why.

http://www.c2i2.com/~dentonj/system-hardening

Scruff · 11-16-2003, 07:59 PM

Quote:

Originally posted by ringwraith
I found another link I had stored away that gives step by step on hardening a slackware system. But you should never do anything that you do not personally understand what it is you are doing and why.

http://www.c2i2.com/~dentonj/system-hardening

Lol. I was over there reading through all that, then decided to search here and found this. I understood a fair portion of Denton's instructions, but much of it is over my head. I read a lot of good things about Bastille for system hardening and was ready to try it, but found out Slack is not yet supported.

Off to search some more... I'll post if I learn anything good

ringwraith · 11-16-2003, 08:49 PM

http://firestarter.sourceforge.net/

I found this link in a thread on aols on usenet. Looks like an easy to use gui to set up a firewall.