Security Strategies in Linux Platforms and Applications, 3rd Edition

Identifying a Baseline System State

A baseline is a default system configuration. In an ideal world, you could use the gold baseline described earlier as the starting point for production systems. To that end, any new system should differ from the baseline only with respect to the new packages that may be installed for functionality, updates, and security issues. That does not reflect ­reality, however.

Systems deviate from a baseline in a number of ways. Log files are added. Users add personal and work files to their home directories. Fortunately, such changes affect only a limited number of directories. You should be able to limit additional changes. Some users may install a new service. However, if you have configuration control of the systems ...