Bastille Linux on Red Hat, SuSE and Mandrake Linux

Running Bastille on Red Hat, SuSE and Mandrake Linux

Bastille supports a number of Linux distributions and operating systems. In the RPM-focused world, it supports Fedora Core, Red Hat Enterprise, Red Hat Classic (Red Hat 6 through 9), SuSE and Mandrake systems. On these systems, Bastille is primarily used via an RPM, though you can also download the raw source tarball.

Installing Bastille 2.x on Red Hat (Classic, Enterprise or Fedora Core), SuSE or Mandrake is easiest via the RPM. You need to install the Bastille RPM as well as a supporting perl module to provide either the graphical or text-based interface.

First, install the Bastille RPM, like so:

        rpm -ivh Bastille-3.0.7-1.0.noarch.rpm

Second, if you want to use Hardening mode, you'll need to install perl-Tk (for our Graphical Interface) or perl-Curses (for console/text mode).
(Installing perl-Tk/perl-Curses isn't necessary in Assessment mode, as it generates a report in both HTML and Text.)
You can usually do this most easily by getting the RPM shown in this table, installing it via this command:
```
        rpm -ivh perl-Tk-a.b-c.i386.rpm
or
        rpm -ivh perl-Curses-d.e-f.i386.rpm
```
Alternatively, you can install these using the CPAN method, described here.
Second-and-a-half, if you have RHEL4, you'll need to decide if you want to run Bastille on this platform now or wait until the 27th when we have fully tested RHEL4.
RHEL4 appears to be extremely similar to RHEL3 in all the ways that matter when hardening, but we haven't yet completed our asessment. Read-only hardening Assessment mode is entirely safe, as the worst that can happen is that we don't assess your system perfectly.. Hardening mode might get something wrong and corrupt a file. The chances of this are low but non-zero. Should anything of the sort happen, of course, you can always revert back to the system state before the bastille run via "bastille -r".

Third, run the bastille command:

        bastille -x     (for Graphical Mode Hardening)
or
        bastille -c     (for Text Mode Hardening)
or 
        bastille --report       (for Assessment and Reporting)

NOTE: Just because you're su-ing or ssh-ing into a system doesn't mean you're stuck in text mode.
You can use graphical (X) programs like Bastille's Tk interface or browsers by forwarding your X connections over the ssh connection. It's very, very simple. Just do this:
```
   ssh -X root@remote_box   (when you were already SSH-ing)
OR
   ssh -X root@127.0.0.1    (when you would normally just su)
```