Index
Prev
Index
1200 rear view
Setting Up a Local Console
account security
Account Security
Bastille Linux and
Products Secured by Bastille Linux
additional hardware
Requirements for Additional Hardware
Requirements for Additional Hardware
administration interface
What Do I Need to Do?
Accessing the Web Administration GUI
annex box
Uses for a Serial Console
anonymous download
FTP
Apache Web server
Apache
Apache Web server configuration
Bastille Linux and
Products Secured by Bastille Linux
APMD
Miscellaneous Daemons
atd
Miscellaneous Daemons
banners
Secure
inetd
Bastille Linux
and other systems
Network Port Use Security Policy
completing the lockdown
Completing the Lockdown
log file
Bastille Linux Recommendations
overview
What is Bastille Linux?
products secured by
Products Secured by Bastille Linux
recommended answers
Account Security
Account Security
Apache
Apache
Boot Security
Boot Security
Configure Misc PAM
Configure Misc PAM
Disable User Tools
Disable User Tools
DNS
DNS
File Permissions Set File Permissions From a List
File Permissions
FTP
FTP
ipchains
IPCHAINS
Logging
Logging
Miscellaneous Daemons
Miscellaneous Daemons
Printing
Printing
Secure inetd
Secure
inetd
sendmail
sendmail
recommended use of
What is Bastille Linux?
Web site
What is Bastille Linux?
Berkeley Internet name domain (BIND) domain name service (DNS) server configuration
Bastille Linux and
Products Secured by Bastille Linux
BIOS settings
Required CD-ROMs
boot (physical) security
Bastille Linux and
Products Secured by Bastille Linux
boot floppy
Boot Security
/boot mount point
Partitioning the RAID LUN
boot security
Boot Security
broadband
General Product Feedback
cabling
Setting Up a Serial Console
cat-5 cabling
Setting Up a Serial Console
C-class subnet
Secure
inetd
CD-ROM installation
See
reinstalling from CD-ROM
CGI script execution
Apache
chroot'ed prison
DNS
clock chip settings
Selecting a Monitor
COM1
Requirements for Additional Hardware
compiler disabling
Disable User Tools
connectivity instructions
Configuring the Network
console access
Setting Up Console Access
cron
Miscellaneous Daemons
CTRL-ALT-DEL rebooting
Boot Security
daemon security
Bastille Linux and
Products Secured by Bastille Linux
DB9 female
Requirements for Additional Hardware
DHCPD
Miscellaneous Daemons
Miscellaneous Daemons
diagram of hardware connectors
Setting Up a Local Console
DNS co-master service
DNS
DOS emulation
File Permissions
dosemu
File Permissions
/etc/motd file
Network Port Use Security Policy
/etc/security/limits.conf file
Configure Misc PAM
/etc/shadow file
Account Security
/etc/sysconfig/network file
Configuring the Network
eth1
Network Port Use Security Policy
expn
sendmail
feedback
General Product Feedback
File permission tightening / set user ID (SUID) audit
Bastille Linux and
Products Secured by Bastille Linux
file permissions
File Permissions
File transfer protocol (FTP) server configuration
Bastille Linux and
Products Secured by Bastille Linux
firewall perforation
Bastille Linux Recommendations
firewalling
Products Secured by Bastille Linux
forms
network connectivity
Network Connectivity Worksheet
network connectivity information
Network Connectivity Worksheet
password
Password Worksheet
FTP
FTP
gated
Miscellaneous Daemons
gateway IP address
Configuring the Network
GATEWAYDEV
Configuring the Network
generic multisync SVGA monitor
Requirements for Additional Hardware
GUI URL
What Do I Need to Do?
Accessing the Web Administration GUI
hardware installation
What Do I Need to Do?
hardware requirements
Requirements for Additional Hardware
Requirements for Additional Hardware
HTTP access for Linuxconf administration
access control
Managing Linuxconf HTTP Access Control
delegating selected Linuxconf privileges to hosted customers
Delegating Selected Linuxconf Privileges to Hosted Customers
HTTP access
Configuring Linuxconf for HTTP Access
http invocation privileges
Activating Linuxconf HTTP Invocation Privileges
overview
Enabling HTTP Access for Linuxconf Administration
user privileges
Managing Linuxconf User Privileges
inetd
Bastille Linux and
Products Secured by Bastille Linux
Linuxconf HTTP invocation privileges and
Activating Linuxconf HTTP Invocation Privileges
inetd security
Secure
inetd
innd
Miscellaneous Daemons
inndstart
File Permissions
install serial console
Setting Up a Serial Console
installing from CD-ROM
See
reinstalling from CD-ROM
ipchains
Setting Up a Serial Console
IPCHAINS
Secure
inetd
ISEM installation
Installing SGI ISM
jacks
Setting Up a Serial Console
keyboard
Requirements for Additional Hardware
KVM switch
Requirements for Additional Hardware
limits.conf file
Configure Misc PAM
Linux loader (LILO) security module
Bastille Linux and
Products Secured by Bastille Linux
Linux support services
Support
Linuxconf
enabling HTTP access
See
HTTP access for Linuxconf administration
network connectivity configuration
Configuring the Network
local console access
Local Console Access
logging
Logging
Bastille Linux and
Products Secured by Bastille Linux
marketing
General Product Feedback
monitor and OS installation
Selecting a Monitor
motd file
Network Port Use Security Policy
mount point
Partitioning the RAID LUN
mouse
Requirements for Additional Hardware
mouse port
Selecting a Mouse
mouse support to text
Miscellaneous Daemons
multisync SVGA monitor
Requirements for Additional Hardware
navigation in Linuxconf
Configuring the Network
network
configuration
Configuring the Network
port use security policy
Network Port Use Security Policy
network address translation
Bastille Linux and
Products Secured by Bastille Linux
news server daemon
Miscellaneous Daemons
NFS
Miscellaneous Daemons
NIS server
Miscellaneous Daemons
NTP co-master
Bastille Linux Recommendations
null modem cable
Requirements for Additional Hardware
overlay
Installing the SGI ProPack Overlay
PAM
Configure Misc PAM
PAM configuration
Bastille Linux and
Products Secured by Bastille Linux
partitioning the RAID LUN
Partitioning the RAID LUN
password for root from the factory
What Do I Need to Do?
PCMCIA devices
File Permissions
PCMCIA services
Miscellaneous Daemons
Pluggable Authentication Modules (PAM) configuration
Bastille Linux and
Products Secured by Bastille Linux
port 98
Enabling HTTP Access for Linuxconf Administration
port use security policy
Network Port Use Security Policy
preproduction console
Uses for a Serial Console
print server
File Permissions
Printing
print server security
Bastille Linux and
Products Secured by Bastille Linux
private network and port name
Network Port Use Security Policy
product feedback
General Product Feedback
ProPack overlay
Installing the SGI ProPack Overlay
PS/2 keyboard and mouse
Requirements for Additional Hardware
public network and port name
Network Port Use Security Policy
rear connectors diagram
Setting Up a Local Console
reboot
Completing the Lockdown
Rebooting the Server
recommendations
Vendor Recommendations
refresh rate
Selecting a Monitor
reinstalling from CD-ROM
CD-ROMs required
Required CD-ROMs
completing the configuration
Completing the Configuration
hardware preparation
Preparing the Hardware
Linux OS
Installing the Linux Operating System
monitor
Selecting a Monitor
mount points specified fpr partitions
Specifying Mount Points for Partitions
mouse port
Selecting a Mouse
packages to install
Selecting the Packages to Install
partitioning the RAID LUN
Partitioning the RAID LUN
time zone
Selecting a Time Zone
reboot the server
Rebooting the Server
SGI ISEM
Installing SGI ISM
SGI ProPack overlay
Installing the SGI ProPack Overlay
when to reinstall
When to Reinstall from CD-ROM
remote console access
Serial Console Access
root and telnet login
Setting Up a Serial Console
root password
What Do I Need to Do?
/root/bastille-action-log file
Bastille Linux Recommendations
routing daemons
Miscellaneous Daemons
RS-232 console device
Requirements for Additional Hardware
samb
Miscellaneous Daemons
sdaX
Partitioning the RAID LUN
secondary firewall
Bastille Linux Recommendations
secure inetd
Secure
inetd
secure shell
Products Secured by Bastille Linux
security policy
Security Policies
Network Port Use Security Policy
sendmail
sendmail
sendmail mail server configuration
Bastille Linux and
Products Secured by Bastille Linux
serial concentrator
Requirements for Additional Hardware
Requirements for Additional Hardware
serial console access
Serial Console Access
serial RS-232 console device
Requirements for Additional Hardware
server reboot
Rebooting the Server
service
Support
SGI ISEM installation
Installing SGI ISM
SGI ProPack overlay
Installing the SGI ProPack Overlay
shadowing
Account Security
SNMPD
Miscellaneous Daemons
specifing mount points for partitions
Specifying Mount Points for Partitions
ssh secure shell configuration
Bastille Linux and
Products Secured by Bastille Linux
ssh secure shell package
Secure
inetd
SSI (Server Side Includes)
Apache
SSL encryption and Linuxconf
Enabling HTTP Access for Linuxconf Administration
startinnfeed
File Permissions
subnet
Secure
inetd
SUID status
File Permissions
support
Support
SVGA monitor
Requirements for Additional Hardware
swap space
Partitioning the RAID LUN
system daemon security
Bastille Linux and
Products Secured by Bastille Linux
task overview
What Do I Need to Do?
tcp_wrappers
Setting Up a Serial Console
Secure
inetd
Bastille Linux and
Products Secured by Bastille Linux
telnet and root
Setting Up a Serial Console
terminal emulation software
Requirements for Additional Hardware
terminal server
Requirements for Additional Hardware
Setting Up a Serial Console
time zone
Selecting a Time Zone
traceroute
File Permissions
user tools
Disable User Tools
usrnetctl
File Permissions
vendor recommendations
Vendor Recommendations
vertical refresh rate
Selecting a Monitor
video
Requirements for Additional Hardware
vrfy
sendmail
Web administration GUI
What Do I Need to Do?
Accessing the Web Administration GUI
Web hosting
sendmail
Web hosting platform
Bastille Linux Recommendations
Web layer URL
What Do I Need to Do?
Accessing the Web Administration GUI
worksheets
network connectivity
Network Connectivity Worksheet
password
Password Worksheet