From owner-freebsd-security  Wed Jul 30 09:49:44 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id JAA14655
          for security-outgoing; Wed, 30 Jul 1997 09:49:44 -0700 (PDT)
Received: from ns1.netcorps.com (ns1.netcorps.com [207.1.125.101])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA14644
          for <security@FreeBSD.ORG>; Wed, 30 Jul 1997 09:49:39 -0700 (PDT)
Received: from localhost (satya@localhost)
	by ns1.netcorps.com (8.8.5/8.8.5) with SMTP id JAA16566;
	Wed, 30 Jul 1997 09:45:04 -0700 (PDT)
X-Authentication-Warning: ns1.netcorps.com: satya owned process doing -bs
Date: Wed, 30 Jul 1997 09:45:04 -0700 (PDT)
From: Satya Palani <satya@longshadows.com>
X-Sender: satya@ns1.netcorps.com
Reply-To: Satya Palani <satya@longshadows.com>
To: Shashi Joshi <shashi@shift-f1.com>
cc: Marco Molteni <molter@logic.it>, vince@mail.MCESTATE.COM,
        security@FreeBSD.ORG, mario1@PrimeNet.Com
Subject: Re: So, lets have a checklist compiled (was Re: Security hole)
In-Reply-To: <199707301450.JAA25877@shift-f1.com>
Message-ID: <Pine.NEB.3.96.970730093724.16467C-100000@ns1.netcorps.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Wed, 30 Jul 1997, Shashi Joshi wrote:

> Exactly my thoughts. So, do we get a checklist or reference list from the
> gurus?
	<snip>
> My point? Having a document or a checklist would be real helpful to newbies
> and can serve as a quick reference for the gurus.

All new systems administrators should be forced to read the following two
books: "Practical Unix & Internet Security" and "Essential System
Administration."  Both are published by O'Reilly & Associates
(www.ora.com).  After this, you should be able to make a checklist that is
appropriate for your environment.
				-Satya