BastilleChooser8
Harden a host using predefined profiles
Usage
BastilleChooser
Overview
This manual page briefly documents BastilleChooser .
This manual page was written for the Debian GNU/Linux distribution because the original program does not have a manual page.
BastilleChooser offers a GTK+ GUI to let administrators choose between different security profiles and implement them without going through the questions of InteractiveBastille.
BastilleChooser asks for the type of host (workstation or server), a security level (lax, moderate or paranoid), and services to leave enabled on the host. Using the selected profile, a new configuration is built and installed on the system.
Note, however, that even if servers and workstations have very different security levels, general security levels are not as good as security levels adapted to your own security policy.
Files
/usr/share/Bastille/WorkstationLax.config
/usr/share/Bastille/WorkstationModerate.config
/usr/share/Bastille/WorkstationParanoid.config
/usr/share/Bastille/ServerLax.config
/usr/share/Bastille/ServerModerate.config
/usr/share/Bastille/ServerParanoid.config
Configuration files which define available profiles. These are customized using the answers to questions posed by BastilleChooser.
/etc/Bastille/config
Configuration file which defines all the security measures selected by the administrator to be enabled.
/var/log/Bastille/action-log
/var/log/Bastille/error-log
Logs that hold information of actions taken on the system.
/var/log/Bastille/undo/
Directory holding all information for the undo operation.
Releases
4 releases since Debian 3.0 (Woody); the text changed 2 times.