<p>The DoD uses Retina from e-eye for auditing compliance on windows. I think it's capable of Linux and Solaris as well. </p>
<p>Will</p>
<p>Sent from my Droid. </p>
<p><blockquote type="cite">On Jun 30, 2010 12:53 AM, "George Allen" <<a href="mailto:glallen01@gmail.com">glallen01@gmail.com</a>> wrote:<br><br>ALE:<br>
<br>
I've used linux since 96, but it's always been at home. So, now, after<br>
a 3-year anti FUD campaign at work, I *finally* have a chance to setup<br>
a linux box to run some network tools for the organization.<br>
<br>
For compliance reasons, we're supposed to run RHEL, because that's<br>
what our security/patch guidelines are written to. So, I'm using<br>
Centos, which I know nothing about, having always used<br>
Slackware/Gentoo/Debian/Ubuntu. Of course I'll RTFM, but:<br>
<br>
1) Is there a bare-bones version of RHEL/Centos that is the equivalent<br>
of a 'server' or 'jeos' install? I did a Centos 5.5 install the other<br>
day, picked only the "server task" (to put it in debian terms) and<br>
still came out with a 2gig install. I'll try again without selecting<br>
anything and see what it comes down to.<br>
<br>
2) What is the best way to manage application of "configuration<br>
items." There are the standard version control systems to track<br>
changes. But I'd like something that can manage OS configuration items<br>
based on a policy document. Maybe puppet, bastille, or cfengine? I'll<br>
read up on each of these, but what do you suggest?<br>
<br>
3) We get re-digested forms of CVEs that we're told to check and prove<br>
compliance with. Our windows shop has this system in place with tools<br>
that can read the XML of these alerts, execute scripts to test against<br>
them (on windows), and then generate another report of compliance. We<br>
will need something similar, what's out there for that?<br>
<br>
Thanks,<br>
George<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></p>