Paul M. Whitney wrote: <snip> > You can also look at NIST web pages for SCAP and OVAL for tools that may > help you with securing your system. And while I would not recommend > following it to the letter, there is a huge amount of tips and suggestions > in the NSA SNAC Guide available here: > http://www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf > > You may also want to consider reading up on the NIST Common > Criteria/Protection Profiles that companies such as HP and IBM have > developed to secure their systems with an Evaluated Assurance Level of 4 > (EAL4). <snip> Heh - a lot of the NIST recommendations actually either use, or refer to (I forget) Bastille Linux. mark -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list