安全技术执行指南

Question

有没有人找到了最好的方法来自动增加RHEL 6.x的版本？我发现的其他答案要么过时了，要么没有完全搅拌机器。即使是一个图像，有一个斯蒂格的RHEL将有所帮助。

Answer 1

这个项目听起来像是你要找的东西，标题是：stig-fix-el6 6 6。

节选

DISA对RHEL 6 STIG强化一个系统。这些脚本将使系统变硬，使其符合基于以下项目先前提供的强化的规范: DISA RHEL 6 STIG V1 R2

• http://iase.disa.mil/stigs/os/unix/red_hat.html

  NIST 800-53 (USGCB) Content for RHEL 5      

• http://usgcb.nist.gov/usgcb/rhel_content.html

  NSA SNAC Guide for Red Hat Enterprise Linux 5      

• http://www.nsa.gov/ia/_档案/os/redhat/国安局_拉赫尔_5_导轨_v4.2.pdf

  Aqueduct Project      

• https://fedorahosted.org/aqueduct

  Tresys Certifiable Linux Integration Platform (CLIP)      

• http://oss.tresys.com/projects/clip

该项目的内容包括以下脚本：

apply.sh - master script that runs scripts in cat1-cat4 and misc
toggle_ipv6.sh - toggles IPv6 support, requires reboot (default is off)
toggle_nousb.sh - toggles the 'nousb' kernel flag only
toggle_udf.sh - toggles 'udf' mounting of DVDs (USGCB Blacklists udf) 
toggle_usb.sh - toggles 'nousb' kernel flag and the mass storage kernel 
                module config - Directory with some pre-STIGed 
                configurations (auditd,iptables,system-auth-local,etc.) 
cat1 - CAT I STIG Scripts
cat2 - CAT II STIG Scripts
cat3 - CAT III STIG Scripts
cat4 - CAT IV STIG Scripts
misc - NSA SNAC, GNOME, and Other miscellenous lockdown scripts
manual - Manaully run (There be dragons here)
backups - Backup copy of modified files to compare and restore configurations