BastilleBackEnd - harden a host

BastilleBackEnd

This manual page briefly documents briefly BastilleBackEnd .

This manual page was written for the Debian GNU/Linux distribution because the original program does not have a manual page.

BastilleBackEnd implements all the changes configured previously by using InteractiveBastille or AutomatedBastille based on the appropiate configuration file.

BastilleBackEnd uses the following options:

-v

Verbose mode. Actions are printed to the logs and to STDOUT.

-l

Log-only mode. No action is taken; merely logs what changes would have been made.

-r PREFIX

All the filenames are prefixed with PREFIX (/etc/whatever becomes /PREFIX/etc/whatever). This option could be used to commit changes to NFS filesystems, or file systems with a different mount point than the current root (/) filesystem.

/etc/Bastille/config Configuration file which defines all the security measures selected by the administrator to be enabled. /var/log/Bastille/action-log

/var/log/Bastille/error-log Logs that hold information of actions taken on the system. /var/log/Bastille/undo/ Directory holding all information for the undo operation.

AutomatedBastille(8), RevertBastille(8). InteractiveBastille(8).

The programs have more documentation available at /usr/share/doc/bastille on Debian systems.

This manual page was written by Javier Fernandez-Sanguino Peña <jfs@computer.org> for the Debian GNU/Linux system (but may be used on other systems).

Bastille was primarily written by Jay Beale, and is licensed under the GNU General Public License