bastillechooser(8)
NAME
BastilleChooser - harden a host using predefined profiles
SYNOPSIS
BastilleChooser
DESCRIPTION
This manual page briefly documents BastilleChooser .
This manual page was written for the Debian GNU/Linux distribution
because the original program does not have a manual page.
BastilleChooser offers a GTK+ GUI to let administrators choose between different security profiles and implement them without going through the questions of InteractiveBastille.
BastilleChooser asks for the type of host (workstation or server), a
security level (lax, moderate or paranoid), and services to leave
enabled on the host. Using the selected profile, a new configuration
is built and installed on the system.
Note, however, that even if servers and workstations have very different security levels, general security levels are not as good as security levels adapted to your own security policy.
FILES
- /usr/share/Bastille/WorkstationLax.config /usr/share/Bastille/WorkstationModerate.config /usr/share/Bastille/WorkstationParanoid.config /usr/share/Bastille/ServerLax.config /usr/share/Bastille/ServerModerate.config /usr/share/Bastille/ServerParanoid.config
- Configuration files which define available profiles. These are customized using the answers to questions posed by BastilleChooser.
- /etc/Bastille/config
- Configuration file which defines all the security measures selected by the administrator to be enabled.
- /var/log/Bastille/action-log /var/log/Bastille/error-log
- Logs that hold information of actions taken on the system.
- /var/log/Bastille/undo/
- Directory holding all information for the undo operation.
SEE ALSO
bastille(7), RevertBastille(8), AutomatedBastille(8), BastilleBackEnd(8), InteractiveBastille(8). The programs have more documentation available at /usr/share/doc/bastille on Debian systems.
AUTHOR
This manual page was written by Javier Fernandez-Sanguino Peña
<jfs@computer.org> for the Debian GNU/Linux system (but may be used on
other systems).
- Bastille was primarily written by Jay Beale, and is licensed under the
GNU General Public License