SECURITY ALERT-Why It Seems To Be Ignored?

Following up on Finger's post :

Securing Debian Manual

http://www.debian.org/doc/manuals/se...-debian-howto/

Quote:

Originally Posted by bongski55

Thanks Stephen for replying and please pardon my seemingly paranoid reaction to this. One of the reasons why I am shifting to Linux is the frequent security problems and various viri which seem to plague windows systems. At one time my pc and the office pc was infected with 10 viri which fortunately norton was able to catch. And now this.

BTW, the .qt directory in my pc is NOT in the /tmp. It is one of the hidden directory on the /home/user. In this case, does this relate to the alert or it is not affected ,being not in the /tmp directory?

In addition to the fine suggestion above you may want to look into installing the program bastille-linux a security hardening tool. Also coming from the windows world where security seems to be taken so lightly by MS I can see where you would be concerned. Rest assured that people in Linux take security as their number 1 priority and when problems arise they are fixed ASAP you do not have to wait months or even years for problems that are known to be corrected.

I do not wish to ascribe motives to the person who made this post but I find it strange that he did not even make the effort to inform the developers ( at least I have seen no mention of it on the developers list) the usual procedure in cases of a problem is to inform the developers give them the opporitunity to correct the problem and then when you post the vulnerability you offer a solution or work around to the problem. Just my 2 cents and worth every penny.

I've installed bastille and done the scripts. Is there a way to check that it (particularly the firewall is working?

Quote:

Originally Posted by FelixDzerzhinsky

I've installed bastille and done the scripts. Is there a way to check that it (particularly the firewall is working?

Gibson Research Corporation has a free port scanner you would be looking for the Shield's Up link. You can also use security scan from Sygate.

Thanks Stephen. It works! :D