i need to know if my linux box is running perfect

[idea]

all i know how to do, is check security sites, sign on to my os's mailing list, and check "syslog" and "messages" as well as "dmesg"

what else can i do?

 

[skyking]

subscribe to cert.org, and be sure to patch the applications you are running also. Is this a server of some sort?

 

[NuclearFusi0n]

What distro? I use Gentoo, so I can use its "Portage" package management system to ensure my system's security and up-to-dateness

 

[n0cmonkey]

Originally posted by: NuclearFusi0n
What distro? I use Gentoo, so I can use its "Portage" package management system to ensure my system's security and up-to-dateness

Using the word ensure when talking about computer security can be dangerous

 

[n0cmonkey]

Other things you can do:
1. frequently update packages (ie. when necessary)
2. turn off/remove unused services
3. turn off/destroy computer
4. look into other security pieces (like systrace/PaX/grsecurity/SELinux)
5. Not allow users other than yourself

 

[drag]

Also this seems like a nice site to visit. linux security

Otherwise there are tons and tons and tons of websites out there that deal with security.

That's one of the great things about Linux/Unix and security; Linux may or may not be fundamentally more secure then windows 2000/2003, however it does give you the tools to make things much more secure, but you have to learn about how to use them. Other then unpatched windows computers, probably the next easiest target on the internet are old redhat boxes with all the services blazing away directly connected to the internet with no firewall.

 

[idea]

Linux santo 2.4.23 #1 Tue Dec 2 18:37:51 EST 2003 i686 Celeron (Coppermine) GenuineIntel GNU/Linux

I disabled all unused services and I am the only user. this is my server for everything, ftp, glftpd, identd, eggdrop, samba, maybe more. it's really fun to play with.

 

[decode]

Nessus is a cool security scanner. Very useful tool for finding remote vulnerabilities on a given computer.

 

[jackdurdenfc]

give me your IP and I will tell you if it is secure lol just messin around...umm I don't know of any good security scanners but you could try hacking it from another computer and see what holes you can find, there are always going to be holes in your computer, just have to find them


Jack

 

[rANGER11]

there isn't really any gooood way to make sure that your system is always secure other than to keep yourself educated on the latest software updates. Most machines are rooted for services they didn't even realize they had running nor did they want them ie: fingerd or pop3d. If you aren't using a service shut it off. Check your /etc/init.d files to see what is enabled and comment out what you don't want, just because you type ps -ef and fingerd dosn't show up dosn't mean that when i connect on port 79 that it won't start up.
good luck,

Ben

 

[Farfrael]

If you are really worried about security, i'd recommend www.tripwire.org

 

[DannyBoy]

Originally posted by: jackdurdenfc
give me your IP and I will tell you if it is secure lol just messin around...umm I don't know of any good security scanners but you could try hacking it from another computer and see what holes you can find, there are always going to be holes in your computer, just have to find them


Jack

Not everyone is l33t

 

[InlineFive]

Originally posted by: DannyBoy

Originally posted by: jackdurdenfc
give me your IP and I will tell you if it is secure lol just messin around...umm I don't know of any good security scanners but you could try hacking it from another computer and see what holes you can find, there are always going to be holes in your computer, just have to find them


Jack

Not everyone is l33t

You realise that all you need is a firewall, considering Linux is a firewall in itself.