BastilleChooser - harden a host using predefined profiles

BastilleChooser

This manual page briefly documents BastilleChooser .

This manual page was written for the Debian GNU/Linux distribution because the original program does not have a manual page.

BastilleChooser offers a GTK+ GUI to let administrators choose between different security profiles and implement them without going through the questions of InteractiveBastille.

BastilleChooser asks for the type of host (workstation or server), a security level (lax, moderate or paranoid), and services to leave enabled on the host. Using the selected profile, a new configuration is built and installed on the system.

Note, however, that even if servers and workstations have very different security levels, general security levels are not as good as security levels adapted to your own security policy.

/usr/share/Bastille/WorkstationLax.config

/usr/share/Bastille/WorkstationModerate.config

/usr/share/Bastille/WorkstationParanoid.config

/usr/share/Bastille/ServerLax.config

/usr/share/Bastille/ServerModerate.config

/usr/share/Bastille/ServerParanoid.config Configuration files which define available profiles. These are customized using the answers to questions posed by BastilleChooser. /etc/Bastille/config Configuration file which defines all the security measures selected by the administrator to be enabled. /var/log/Bastille/action-log

/var/log/Bastille/error-log Logs that hold information of actions taken on the system. /var/log/Bastille/undo/ Directory holding all information for the undo operation.

bastille(7), RevertBastille(8), AutomatedBastille(8), BastilleBackEnd(8), InteractiveBastille(8).

The programs have more documentation available at /usr/share/doc/bastille on Debian systems.

This manual page was written by Javier Fernandez-Sanguino Peña <jfs@computer.org> for the Debian GNU/Linux system (but may be used on other systems).

Bastille was primarily written by Jay Beale, and is licensed under the GNU General Public License