[Linux-disciples] Bastille

[Stephen R Laniel]

Slashdot has an article up about the Bastille
security-hardening tool:
http://it.slashdot.org/article.pl?sid=05/04/19/232230&from=rss

It's in Debian, looks like, and I've been using it a little
bit. It's interesting. I had no idea that ping was suid.
Apparently only root can write to a raw socket, so ping has
to be that way.

Worth checking out, maybe possibly.

-- 
Stephen R. Laniel
steve at laniels.org
+(617) 308-5571
http://laniels.org/