Index

1100 server installation
Installing ISE from CD-ROM for SGI 1100 Servers

account security
Products Secured by Bastille Linux
Account Security

additional hardware
Requirements for Additional Hardware
Requirements for Additional Hardware

administration interface
What Do I Need to Do?
Accessing the Web Administration GUI

annex box
Uses for a Serial Console

anonymous download
FTP

Apache Web server
Products Secured by Bastille Linux
Apache

APMD
Miscellaneous Daemons

atd
Miscellaneous Daemons

banners
Secure inetd

Bastille Linux
and other systems
Network Port Use Security Policy
completing the lockdown
Completing the Lockdown
log file
Bastille Linux Recommendations
overview
What is Bastille Linux?
products secured by
Products Secured by Bastille Linux
recommended answers
Account Security
Account Security
Apache
Apache
Boot Security
Boot Security
Configure Misc PAM
Configure Misc PAM
Disable User Tools
Disable User Tools
DNS
DNS
File Permissions Set File Permissions From a List
File Permissions
FTP
FTP
ipchains
IPCHAINS
Logging
Logging
Miscellaneous Daemons
Miscellaneous Daemons
Printing
Printing
Secure inetd
Secure inetd
sendmail
sendmail
recommended use of
What is Bastille Linux?
Web site
What is Bastille Linux?

Berkeley Internet name domain (BIND) domain name service (DNS) server configuration
Products Secured by Bastille Linux

boot (physical) security
Products Secured by Bastille Linux

boot device
Required CD-ROMs

boot floppy
Boot Security

/boot mount point
Partitioning the System Disk or RAID LUN

boot security
Boot Security

broadband
General Product Feedback

cabling
Setting Up a Serial Console

cat-5 cabling
Setting Up a Serial Console

C-class subnet
Secure inetd

CD-ROM installation
See reinstalling from CD-ROM

CGI script execution
Apache

chroot'ed prison
DNS

clock chip settings
Selecting a Monitor

COM1
Requirements for Additional Hardware

compiler disabling
Disable User Tools

connectivity instructions
Configuring the Network

console access
Setting Up Console Access

cron
Miscellaneous Daemons

CTRL-ALT-DEL rebooting
Boot Security

daemon security
Products Secured by Bastille Linux

DB9 female
Requirements for Additional Hardware

DHCPD
Miscellaneous Daemons

DNS co-master service
DNS

DOS emulation
File Permissions

dosemu
File Permissions

/etc/motd file
Network Port Use Security Policy

/etc/security/limits.conf file
Configure Misc PAM

/etc/shadow file
Account Security

/etc/sysconfig/network file
Configuring the Network

eth1
Network Port Use Security Policy

expn
sendmail

feedback
General Product Feedback

File permission tightening / SUID audit
Products Secured by Bastille Linux

file permissions
File Permissions

File transfer protocol (FTP) server configuration
Products Secured by Bastille Linux

firewall perforation
Bastille Linux Recommendations

firewalling
Products Secured by Bastille Linux

forms
network connectivity
Network Connectivity Worksheet
network connectivity information
Network Connectivity Worksheet
password
Password Worksheet

FTP
FTP

gated
Miscellaneous Daemons

gateway IP address
Configuring the Network

GATEWAYDEV
Configuring the Network

generic multisync SVGA monitor
Requirements for Additional Hardware

GUI URL
What Do I Need to Do?
Accessing the Web Administration GUI

hardware installation
What Do I Need to Do?

hardware requirements
Requirements for Additional Hardware
Requirements for Additional Hardware

/home mount point
Partitioning the System Disk or RAID LUN

HTTP access for Linuxconf administration
access control
Managing Linuxconf HTTP Access Control
delegating selected Linuxconf privileges
Delegating Selected Linuxconf Privileges to Hosted Customers
HTTP access
Configuring Linuxconf for HTTP Access
http invocation privileges
Activating Linuxconf HTTP Invocation Privileges
overview
Enabling HTTP Access for Linuxconf Administration
user privileges
Managing Linuxconf User Privileges

inetd
Products Secured by Bastille Linux
Linuxconf HTTP invocation privileges and
Activating Linuxconf HTTP Invocation Privileges
security
Secure inetd

innd
Miscellaneous Daemons

inndstart
File Permissions

install serial console
Setting Up a Serial Console

installing from CD-ROM
See reinstalling from CD-ROM

installing ISE on SGI 1100 servers
Installing ISE from CD-ROM for SGI 1100 Servers

ipchains
Setting Up a Serial Console
IPCHAINS
Secure inetd

ISE installation
Installing ISE
Installing ISE

jacks
Setting Up a Serial Console

keyboard
Requirements for Additional Hardware

KVM switch
Requirements for Additional Hardware

limits.conf file
Configure Misc PAM

Linux loader (LILO) security module
Bastille Linux and
Products Secured by Bastille Linux

Linux support services
Support

Linuxconf
enabling HTTP access
See HTTP access for Linuxconf administration
network connectivity configuration
Configuring the Network

local console access
Local Console Access

logging
Products Secured by Bastille Linux
Logging

marketing
General Product Feedback

monitor and OS installation
Selecting a Monitor

motd file
Network Port Use Security Policy

/ mount point
Partitioning the System Disk or RAID LUN

mouse
Requirements for Additional Hardware

mouse port
Selecting a Mouse

multisync SVGA monitor
Requirements for Additional Hardware

navigation in Linuxconf
Configuring the Network

network
address translation and Bastille Linux
Products Secured by Bastille Linux
configuration
Configuring the Network
port use security policy
Network Port Use Security Policy

news server daemon
Miscellaneous Daemons

NFS
Miscellaneous Daemons

NIS server
Miscellaneous Daemons

NTP co-master
Bastille Linux Recommendations

null modem cable
Requirements for Additional Hardware

overlay
Installing the SGI ProPack Overlay

PAM configuration
Products Secured by Bastille Linux
Configure Misc PAM

partitioning the system disk or RAID LUN
Partitioning the System Disk or RAID LUN

password for root from the factory
What Do I Need to Do?

PCMCIA devices
File Permissions
Miscellaneous Daemons

Pluggable Authentication Modules (PAM)
Products Secured by Bastille Linux

port 98
Enabling HTTP Access for Linuxconf Administration

port use security policy
Network Port Use Security Policy

preproduction console
Uses for a Serial Console

print server
Products Secured by Bastille Linux
File Permissions
Printing

private network and port name
Network Port Use Security Policy

product feedback
General Product Feedback

ProPack overlay
Installing the SGI ProPack Overlay

PS/2 keyboard and mouse
Requirements for Additional Hardware

public network and port name
Network Port Use Security Policy

reboot
Completing the Lockdown
Rebooting the Server

recommendations
Vendor Recommendations

reformat partitions
Selecting Partitions to Reformat

refresh rate
Selecting a Monitor

reinstalling from CD-ROM
CD-ROMs required
Required CD-ROMs
completing the configuration
Completing the Configuration
hardware preparation
Preparing the Hardware
ISE
Installing ISE
Linux OS
Installing the Linux Operating System
monitor
Selecting a Monitor
mouse port
Selecting a Mouse
packages to install
Selecting the Packages to Install
partitioning the system disk or RAID LUN
Partitioning the System Disk or RAID LUN
partitions to reformat
Selecting Partitions to Reformat
time zone
Selecting a Time Zone
reboot the server
Rebooting the Server
SGI ProPack overlay
Installing the SGI ProPack Overlay
when to reinstall
When to Reinstall from CD-ROM

remote console access
Serial Console Access

root and telnet login
Setting Up a Serial Console

root password
What Do I Need to Do?

/root/bastille-action-log file
Bastille Linux Recommendations

routing daemons
Miscellaneous Daemons

RS-232 console device
Requirements for Additional Hardware

samb
Miscellaneous Daemons

sdaX
Partitioning the System Disk or RAID LUN
Partitioning the System Disk or RAID LUN

secondary firewall
Bastille Linux Recommendations

secure inetd
Secure inetd

secure shell
Products Secured by Bastille Linux

security policy
Security Policies
Network Port Use Security Policy

sendmail
Products Secured by Bastille Linux
sendmail

serial concentrator
Requirements for Additional Hardware
Requirements for Additional Hardware

serial console access
Serial Console Access

serial RS-232 console device
Requirements for Additional Hardware

server reboot
Rebooting the Server

service
Support

SGI ProPack overlay
Installing the SGI ProPack Overlay

shadowing
Account Security

SNMPD
Miscellaneous Daemons

ssh secure shell
Secure inetd
Products Secured by Bastille Linux

SSI (Server Side Includes)
Apache

SSL encryption and Linuxconf
Enabling HTTP Access for Linuxconf Administration

startinnfeed
File Permissions

subnet
Secure inetd

SUID status
File Permissions

support
Support

SVGA monitor
Requirements for Additional Hardware

swap space
Partitioning the System Disk or RAID LUN

system daemon security
Products Secured by Bastille Linux

task overview
What Do I Need to Do?

tcp_wrappers
Setting Up a Serial Console
Products Secured by Bastille Linux
Secure inetd

tcpdchk
Secure inetd

telnet and root
Setting Up a Serial Console

terminal emulation software
Requirements for Additional Hardware

terminal server
Requirements for Additional Hardware
Setting Up a Serial Console

time zone
Selecting a Time Zone

traceroute
File Permissions

user tools
Disable User Tools

usrnetctl
File Permissions

vendor recommendations
Vendor Recommendations

vertical refresh rate
Selecting a Monitor

video
Requirements for Additional Hardware

vrfy
sendmail

Web administration GUI
What Do I Need to Do?
Accessing the Web Administration GUI

Web hosting
Bastille Linux Recommendations
sendmail

Web layer URL
What Do I Need to Do?
Accessing the Web Administration GUI

worksheets
network connectivity
Network Connectivity Worksheet
password
Password Worksheet