
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Automated Hardening with Bastille Linux
|
113
dow mode. Since not all versions of all RPM-based distributions include these
packages, the Bastille team maintains a chart that recommends the proper packages
to use for various versions of Red Hat and Mandrake Linux, available at http://www.
bastille-linux.org/perl-rpm-chart.html.
If you run Debian, you can find the deb package bastille in the admin group on your
Debian installation media or your favorite Debian mirror site. As befits its age,
Debian 3.0 (stable) uses Bastille v1.3, but the testing and unstable versions use the
much newer Bastille v2.1. Debian users also need libcurses-perl, perl-tk,orlibgtk-
perl, again depending on whether you intend to run Bastille in text-console or X
Window System mode.
I recommend the text-based interface. Bastille, unlike the scanners we just covered,
must be run on the host you wish to harden. (Remember, bastion hosts shouldn’t
run the X Window System unless absolutely necessary.)
Once your RPMs or debs have successfully installed, you’re ready to harden.
Running Bastille
In Bastille 1.3, you run Bastille by invoking the command InteractiveBastille.
Depending on whether you’ve installed perl-Curses, perl-Tk, or both (or their Debian
equivalents), you can run InteractiveBastille with either the
-c flag ...