Any good software out there to detect security holes in Linux?

[eP?]

I have finally got a Linux OS up and running well, but I'm a little worried due to the recent rash of computer hacking being done at my school. We have had one windows machine and a couple of linux machines hacked in the past couple of months. I was wondering how I could protect my linux box. Maybe someone could point me to some good web sites or something?

Thanks.

 

[jsm]

I personally don't know of any sw (though I am sure you could find some easily), but I will point you to some resources.

Linux Security BookLinux Security Book

You can also try a couple sites.

Astalavista.box.sk <- they have some good security focused links.

Good luck!

 

[xyyz]

there's a book called maxium linux security... i saw it at the compusa clearance section for $14.99... you might wanna take a look at that one.

 

[andri]

General rules:

1) Install only packages you need, not what you think you need, will need or just because they sound 'cool'.
2) Apply all updates.
3) Even with packages trimmed down there is always lots of useless network services (telnet, for example). Close everything up, about 3-4 open services for a box is normal. Again, leave open what you know what you need; if you don't know what it does close it. You can look at listeners with `netstat -nlp`, it shows what programs listen for connections and the ports they listen on.
4) Good password security.
5) Paranoia. Trust noone and you will be safer.

 

[rahvin]

Harden your system, consult:

Security Focus