Re: Linux auditing checklist, documents



DISA came out with a listing of Security Technical Implementation Guides (Stigs) that are used as a baseline for all DoD systems. Everything from Web Servers, *nix, Windows, even go into Databases, and VoIP. Good place to start, and if you do some digging you will see they have a checklist, and some scripts if you wish to run them.

http://iase.disa.mil/stigs/stig/index.html

Regards,

J.A. Simmons V
EDS - Navy Marine Corps Intranet (NMCI)
Information Assurance Engineer
jsimmons@xxxxxxx