Index

account security
Products Secured by Bastille Linux
Account Security

additional hardware
Requirements for Additional Hardware
Requirements for Additional Hardware

administration interface
What Do I Need to Do?
Accessing the GUI

annex box
Uses for a Serial Console

anonymous download
FTP

Apache Web server
Products Secured by Bastille Linux
Apache

APMD
Miscellaneous Daemons

atd
Miscellaneous Daemons

banners
Secure inetd

Bastille Linux
and other systems
Network Port Use Security Policy
completing the lockdown
Completing the Lockdown
log file
Bastille Linux Recommendations
overview
What is Bastille Linux?
products secured by
Products Secured by Bastille Linux
recommended answers
Account Security
Account Security
Apache
Apache
Boot Security
Boot Security
Configure Misc PAM
Configure Misc PAM
Disable User Tools
Disable User Tools
DNS
DNS
File Permissions
File Permissions
FTP
FTP
ipchains
IPCHAINS
Logging
Logging
Miscellaneous Daemons
Miscellaneous Daemons
Printing
Printing
Secure inetd
Secure inetd
sendmail
sendmail
recommended use of
What is Bastille Linux?
Web site
What is Bastille Linux?

BIND DNS server configuration
Products Secured by Bastille Linux

boot (physical) security
Products Secured by Bastille Linux

boot floppy
Boot Security

/boot mount point
Partitioning the System Disk or RAID LUN

boot security
Boot Security

broadband
General Product Feedback

cabling
Setting Up a Serial Console

cat-5 cabling
Setting Up a Serial Console

C-class subnet
Secure inetd

CD-ROM installation
See reinstalling from CD-ROM

CGI script execution
Apache

chroot'ed prison
DNS

clock chip settings
Selecting a Monitor

COM1
Requirements for Additional Hardware

compiler disabling
Disable User Tools

connectivity instructions
Configuring the Network

console access
Setting Up Console Access

cron
Miscellaneous Daemons

CTRL-ALT-DEL rebooting
Boot Security

daemon security
Products Secured by Bastille Linux

DB9 female
Requirements for Additional Hardware

DHCPD
Miscellaneous Daemons

DNS co-master service
DNS

DOS emulation (dosemu)
File Permissions

/etc/motd file
Network Port Use Security Policy

/etc/security/limits.conf file
Configure Misc PAM

/etc/shadow file
Account Security

/etc/sysconfig/network file
Configuring the Network

eth0 & eth1
Network Port Use Security Policy

expn
sendmail

feedback
General Product Feedback

File permission tightening
Products Secured by Bastille Linux

file permissions
File Permissions

File transfer protocol (FTP) server configuration
Products Secured by Bastille Linux

firewall perforation
Bastille Linux Recommendations

firewalling
Products Secured by Bastille Linux

forms
network connectivity
Network Connectivity Worksheet
password
Password Worksheet

FTP
FTP

gated
Miscellaneous Daemons

gateway IP address
Configuring the Network

GATEWAYDEV
Configuring the Network

generic multisync SVGA monitor
Requirements for Additional Hardware

GUI URL
Accessing the GUI

hardware installation
What Do I Need to Do?

hardware requirements
Requirements for Additional Hardware
Requirements for Additional Hardware

/home mount point
Partitioning the System Disk or RAID LUN

HTTP access for Linuxconf
access control
Managing Linuxconf HTTP Access Control
delegating selected Linuxconf privileges
Delegating Selected Linuxconf Privileges to Hosted Customers
HTTP access
Configuring Linuxconf for HTTP Access
http invocation privileges
Activating Linuxconf HTTP Invocation Privileges
overview
Enabling HTTP Access for Linuxconf Administration
user privileges
Managing Linuxconf User Privileges

inetd
Products Secured by Bastille Linux
Linuxconf HTTP invocation privileges and
Activating Linuxconf HTTP Invocation Privileges
security
Secure inetd

innd
Miscellaneous Daemons

inndstart
File Permissions

install serial console
Setting Up a Serial Console

installing from CD-ROM
See reinstalling from CD-ROM

ipchains
Setting Up a Serial Console
IPCHAINS
Secure inetd

jacks
Setting Up a Serial Console

keyboard
Requirements for Additional Hardware

KVM switch
Requirements for Additional Hardware

limits.conf file
Configure Misc PAM

Linux loader (LILO) security module
Products Secured by Bastille Linux

Linux support services
Support

Linuxconf
enabling HTTP access
See HTTP access for Linuxconf
network connectivity configuration
Configuring the Network

local console access
Local Console Access

logging
Products Secured by Bastille Linux
Logging

marketing
General Product Feedback

monitor and OS installation
Selecting a Monitor

motd file
Network Port Use Security Policy

/ mount point
Partitioning the System Disk or RAID LUN

mouse
Requirements for Additional Hardware

mouse port
Selecting a Mouse

multisync SVGA monitor
Requirements for Additional Hardware

navigation in Linuxconf
Configuring the Network

network
address translation and Bastille Linux
Products Secured by Bastille Linux
configuration
Configuring the Network
port use security policy
Network Port Use Security Policy

news server daemon
Miscellaneous Daemons

NFS
Miscellaneous Daemons

NIS server
Miscellaneous Daemons

NTP co-master
Bastille Linux Recommendations

null modem cable
Requirements for Additional Hardware

overlay
Installing the SGI ProPack Overlay

PAM configuration
Configure Misc PAM
Products Secured by Bastille Linux

PCMCIA devices
File Permissions
Miscellaneous Daemons

Permission tightening
Products Secured by Bastille Linux

Pluggable Authentication Modules (PAM)
Products Secured by Bastille Linux

port 98
Enabling HTTP Access for Linuxconf Administration

port use security policy
Network Port Use Security Policy

preproduction console
Uses for a Serial Console

print server
Products Secured by Bastille Linux
File Permissions
Printing

private network and port name
Network Port Use Security Policy

product feedback
General Product Feedback

ProPack overlay
Installing the SGI ProPack Overlay

PS/2 keyboard and mouse
Requirements for Additional Hardware

public network and port name
Network Port Use Security Policy

reboot
Completing the Lockdown
Rebooting the SGI Server

recommendations
Vendor Recommendations

refresh rate
Selecting a Monitor

reinstalling from CD-ROM
Installing the SGI Internet Server for E-commerce Software
CD-ROMs required
Required CD-ROMs
completing the configuration
Completing the Configuration
hardware preparation
Preparing the Hardware
Linux OS
Installing the Linux Operating System
monitor
Selecting a Monitor
mouse port
Selecting a Mouse
packages to install
Selecting the Packages to Install
reboot the server
Rebooting the SGI Server
SGI ProPack overlay
Installing the SGI ProPack Overlay
time zone
Selecting a Time Zone
when to reinstall
When to Reinstall from CD-ROM

remote console access
Serial Console Access

root and telnet login
Setting Up a Serial Console

/root/bastille-action-log file
Bastille Linux Recommendations

routing daemons
Miscellaneous Daemons

RS-232 console device
Requirements for Additional Hardware

samb
Miscellaneous Daemons

sdaX
Partitioning the System Disk or RAID LUN

secondary firewall
Bastille Linux Recommendations

secure inetd
Secure inetd

secure shell
Products Secured by Bastille Linux

security policy
Security Policies
Network Port Use Security Policy

sendmail
Products Secured by Bastille Linux
sendmail

serial concentrator
Requirements for Additional Hardware
Requirements for Additional Hardware

serial console access
Serial Console Access

serial RS-232 console device
Requirements for Additional Hardware

server reboot
Rebooting the SGI Server

service
Support

set user ID audit
Products Secured by Bastille Linux

SGI ProPack overlay
Installing the SGI ProPack Overlay

shadowing
Account Security

SNMPD
Miscellaneous Daemons

ssh secure shell
Products Secured by Bastille Linux
Secure inetd

SSI (Server Side Includes)
Apache

SSL encryption and Linuxconf
Enabling HTTP Access for Linuxconf Administration

startinnfeed
File Permissions

subnet
Secure inetd

SUID audit
Products Secured by Bastille Linux

SUID status
File Permissions

support
Support

SVGA monitor
Requirements for Additional Hardware

swap space
Partitioning the System Disk or RAID LUN

system daemon security
Products Secured by Bastille Linux

task overview
What Do I Need to Do?

tcp_wrappers
Setting Up a Serial Console
Products Secured by Bastille Linux
Secure inetd

tcpdchk
Secure inetd

telnet and root
Setting Up a Serial Console

terminal emulation software
Requirements for Additional Hardware

terminal server
Requirements for Additional Hardware
Setting Up a Serial Console

time zone
Selecting a Time Zone

traceroute
File Permissions

user tools
Disable User Tools

usrnetctl
File Permissions

vendor recommendations
Vendor Recommendations

vertical refresh rate
Selecting a Monitor

video
Requirements for Additional Hardware

vrfy
sendmail

Web administration GUI
What Do I Need to Do?
Accessing the GUI

Web hosting
Bastille Linux Recommendations
sendmail

Web layer URL
What Do I Need to Do?
Accessing the GUI

worksheets
network connectivity
Network Connectivity Worksheet
password
Password Worksheet