Bastille Linux

2000 February 16

Redhat 6.1 support is here! Automation too! And nice Text-User-Interfaces!
Bastille 1.0.3 fully supports RH6.1. It also includes our initial automation and default configuration, which lets people run the script after answering only one question!

Bastille Linux 1.0
1999 December 15

The Bastille Linux development team is proud to announce the first release of the Bastille Linux hardening script. The Bastille Hardening script attempts to provide the most secure, yet functional, Redhat 6.0 system available. (Support for Red Hat 6.1 is forthcoming.) Bastille Linux was designed with several major goals:

COMPREHENSIVENESS

Bastille Linux draws from every available major reputable source on Linux Security. The initial development integrated Jay Beale's existing hardening scripts for Solaris and Linux with most major points from the SANS Securing Linux Step by Step, Kurt Seifried's Linux Administrator's Security Guide, and several other sources.

INSTRUCTIVENESS

Bastille Linux has been designed to educate the installing administrator about the security issues involved in each of the script's tasks. Each step is optional and contains a description of the security issues involved.

COMMUNITY

Once the initial development was near complete, we brought the effort to the developers of the Bastille Discussion mailing list. Further, we began soliciting outside suggestions and testing. The script was GPL'd promptly and the Specification shared.

The Bastille Linux hardening script is a community consensus project: it attempts to integrate existing "best practices" documents and the shared knowledge of many administrators. The project needs constant input from its user community (This means you!) in order to remain current, as well as to fill in the gaps in our existing structure. Bastille Linux is far from perfect, and your input is crucial to making it better.

---

Download Bastille Linux 1.0.3

Bastille Linux 1.0.3 is available from the following locations:

http://sourceforge.net/download.php/bastille-linux/Bastille-1.0.3.tar.gz

http://www.gl.umbc.edu/~jbeale1/Bastille-1.0.3.tar.gz

Please check the MD5 checksums on the tarball to verify authenticity. Compare the number with the checksum below. The following signature is the only valid 1.0.3 checksum:

$ md5sum Bastille-1.0.3.tar.gz

579b2b81a65b22403ca142ea32ce67d2 Bastille-1.0.3.tar.gz

Bug Fix!!!

1/20/2000

We've released a new release of version 1.0, 1.0.2, which corrects several small bugs. You can find more information in Changelog in the tarball, but, suffice it to say, Bastille no longer breaks useradd.

You MUST untar the file in /root and run the first script from /root/run-Bastille!