BastilleBackEnd − harden a host
BastilleBackEnd
This manual page briefly documents briefly BastilleBackEnd .
This manual page was written for the Debian GNU/Linux distribution because the original program does not have a manual page.
BastilleBackEnd implements all the changes configured previously by using InteractiveBastille or AutomatedBastille based on the appropiate configuration file.
BastilleBackEnd uses the following options:
−v |
Verbose mode. Actions are printed to the logs and to STDOUT. |
||
−l |
Log-only mode. No action is taken; merely logs what changes would have been made. |
−r PREFIX
All the filenames are prefixed with PREFIX (/etc/whatever becomes /PREFIX/etc/whatever). This option could be used to commit changes to NFS filesystems, or file systems with a different mount point than the current root (/) filesystem.
/etc/Bastille/config
Configuration file which defines all the security measures selected by the administrator to be enabled.
/var/log/Bastille/action-log
/var/log/Bastille/error-log
Logs that hold information of actions taken on the system. /var/log/Bastille/undo/
Directory holding all information for the undo operation.
AutomatedBastille(8), RevertBastille(8). InteractiveBastille(8).
The programs have more documentation available at /usr/share/doc/bastille on Debian systems.
This manual page was written by Javier Fernandez-Sanguino Peña <jfs AT computer DOT org> for the Debian GNU/Linux system (but may be used on other systems).
Bastille was primarily written by Jay Beale, and is licensed under the GNU General Public License