Bastille Hardening Program

I don't see much discussion in this forum on the Bastille Hardening Program. I have never used Bastille. I am a Linux Newbie.

Does anyone have some good feedback on Bastille?

Which "Newbie Friendly" Distro would work best with Bastille?

Thanks in Advance.

Bastille:

http://bastille-linux.sourceforge.net/

I first noticed Bastille here:

https://www.wilderssecurity.com/showpost.php?p=2036438&postcount=22430

 

I think it's mostly aimed at people running SMTP mail servers. IDK.

 

I just noticed that Active Development of Bastille was resumed in January 2012.

 

https://www.wilderssecurity.com/showthread.php?t=247664&highlight=bastille

 

Bastille works great on Ubuntu. Almost everything it can do you can do manually though. It's pretty much an aide for easily configuring you desktop or server for security, disabling services that aren't need, removing setuid where it's not used, preventing root sign on on the TTY's and so on.

Don't mess with the anti-denial of service settings though. They limit requests and actually can lead to issues on a desktop machine.

 

Yes, but according to this bug one should fix some permissions:

Code:

sudo chown root:crontab /etc/cron/allow 
sudo chmod 640 /etc/cron.allow

 

Thanks! I running fedora now but hope the fix everything in the new version.