>Can anyone suggest resources or sites with info on securing a UNIX system >for installation of a firewall. I used to believe in "stripping" operating systems. Now I believe in "building" them. Rather than removing what I think may be bad, I prefer to start with a bootstrap loader and add the things I need. :) The NFR appliance (which I happened to do the first round of system integration for) was built in the manner described above. I took the bootstrap, added a kernel and filesystem, a minimum of devices, and then coded my own version of init and everything above kernel space. Been bitten too many times by trusting other people's apps. No shell, no password file, no /etc/fstab, no nothing equals nothing to go wrong. mjr. -- Marcus J. Ranum, CEO, Network Flight Recorder, Inc. work - http://www.nfr.net home - http://www.clark.net/pub/mjr
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:45:35 PDT