RE: [fw-wiz] Custom Unix server installations -- to harden extens ively ?
From: Paul Robertson (proberts_at_patriot.net)
Date: 05/20/03
- Previous message: TSimons_at_Delphi-Tech.com: "[fw-wiz] FYI: PIX v6.3(1) fixed ISAKMP Renegotiation Problems"
- In reply to: Steve Lunn: "RE: [fw-wiz] Custom Unix server installations -- to harden extens ively ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Steve Lunn <Steve.Lunn@homeowners.co.uk> Date: Mon, 19 May 2003 18:07:56 -0400 (EDT)
On Sun, 18 May 2003, Steve Lunn wrote:
> Sorry if I'm a little late to this discussion, but I've only just
> found the mailing list. If it's already been said before, I'm
> sorry...
>
> The National Security Agency(1) have a security enhanced version
> of Linux available from their website(2).
MAC and TE are really difficult to administer, especially if you expect to
be able to swap out admins easily. Personally, if I were to go to a
"Designed as a TCB," I'd go to RSBAC (http://www.rsbac.org.)
Even so, I haven't had the time to config a test system, and I've been
meaning to for ~2 years now.
[Apologies to the list for allowing an HTML-ized message through, I'm
having one of those mail days.]
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
proberts@patriot.net which may have no basis whatsoever in fact."
probertson@trusecure.com Director of Risk Assessment TruSecure Corporation
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
