[mdlug] Best Linux Security? Anyone use tripwire?

[Jason]

To toss my $.02 in, I use SELinux (Enforcing, Targeted) with AIDE and
IPtables along with the usual log watching. The usual practices of not
running frivolous services, properly configuring/hardening the ones that
are running, proper passwords, etc. also apply. :D

-Jason

On Mon, 2008-01-21 at 20:23 -0500, Robert Meier wrote:
> ... tripwire ... AppArmor ... SELinux
> 
> I've used and liked all three.
> IMHO AppArmor and SELinux subsume tripwire's features.
> IMHO SELinux subsumes most but not all of AppArmor's features.
> 
> I add one more.
> 
>   Hire a friendly attacker.
> 
> 
> 
> Hire someone to try chronically to break your security,
> and tell you how they did it.
> 
> IMHO, It is no coincidence that friendly attack ceased
> to be normal business practice shortly before identity
> theft became a normal concern.
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://mdlug.org/pipermail/mdlug/attachments/20080122/868d8800/attachment-0001.sig>