"Bastille is a great project, but ultimately it targets people
who sort-of know what they are doing. How do you feel about
projects like the NetBSD/i386 Firewall Project who (whilst having
all sources available) targets people who have no clue other than
"I need security" by giving them a firewall that has an install
that's about as simple as one can make it? Is this just a matter of
defining the target audience different?"
"Jay: Really, it's not entirely targetted away from newbies. In
fact, I sorta thought it was newbie-friendly. In designing the
Bastille Linux hardening script, we originally sought to make a
basic script, that would simply go through the sytem making
changes. It could shut down unneeded programs/daemons, tighten up
permissions and deactive bad protocols like telnet. At some point,
we realized that this would leave many people believing we'd broken
something... So, we decided we'd make the script interactive,
asking the user before turning off telnet. Unfortunately, this
meant that many of the target boxes never got hardened much. Since
people didn't know why telnet was bad, they'd leave it on. So, I
became a writer! Bastille carries a large number of explanations,
targeted to the new user/sysadmin...."
"Given the world's largest cluestick with which you could
assault every single SysAd on the planet, what clues would you
distribute, other than the use of bastille, and the knowledge that
there's life outside computers?"
"Jay: I'd have one major clue that I think supersedes most:
Educate yourself! In terms of security, there's few solutions that
can beat a clueful sysadmin. On the other hand, any solution you
choose for security usually turns to mush when a clueless admin
makes the wrong mistake with it. For instance, you might have
incredible encryption on your passwords and such, but if you choose
"bob" for a password, your system can usually be brute forced!"
Some of the products that appear on this site are from companies from which QuinStreet receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. QuinStreet does not include all companies or all types of products available in the marketplace.