1. Forum
  2. Usenet
  3. LINUX.DEBIAN.SECURITY

  • Securing Debian Manual too old?

    From Stephan Seitz@21:1/5 to All on Fri Jun 23 13:00:01 2023
    Hi!

    I found the Securing Debian Manual (https://www.debian.org/doc/manuals/securing-debian-manual/index.en.html).
    This version is from 2017.

    It has „Chapter 6. Automatic hardening of Debian systems” which mentions Harden packages and Bastille. None of these packages exist anymore in
    Debian 11 or 12.

    https://bastille-linux.sourceforge.net/running_bastille_on.htm#debian
    lets you follow a link to http://packages.debian.org/bastille but without results.

    So what happened here?

    Many greetings,

    Stephan

    --
    | If your life was a horse, you'd have to shoot it. |

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Konstantin Khomoutov@21:1/5 to Stephan Seitz on Fri Jun 23 17:10:01 2023
    On Fri, Jun 23, 2023 at 12:40:19PM +0200, Stephan Seitz wrote:

    I found the Securing Debian Manual (https://www.debian.org/doc/manuals/securing-debian-manual/index.en.html). This version is from 2017.

    It has „Chapter 6. Automatic hardening of Debian systems” which mentions Harden packages and Bastille. None of these packages exist anymore in Debian 11 or 12.

    https://bastille-linux.sourceforge.net/running_bastille_on.htm#debian lets you follow a link to http://packages.debian.org/bastille but without
    results.

    So what happened here?

    I cannot say anything on the Securing Debian manual but when you're interested in digging up the fate of a particular package in Debian, you can roll like this:

    1) Go to the "package tracker", and search for the package of interest.
    In this particular case, there was no need to search as a plain guess
    that it should (have been) named "bastille" worked -
    https://tracker.debian.org/bastille is the URL of interest.

    2) There, you can examine the package's status - it's sort of a dashboard.
    In the case of bastille, you can see that the last entry in the log
    of the package activity says it has been removed from unstable.

    Examining that [1] will tell you the reason, and provide further pointers.


    1. https://tracker.debian.org/news/589646/bug718783-removed-packages-from-unstable/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Moritz_M=C3=BChlenhoff?=@21:1/5 to Stephan Seitz on Tue Jul 11 23:00:01 2023
    Stephan Seitz <stse+debian@rootsland.net> writes:

    Hi!

    I found the Securing Debian Manual (https://www.debian.org/doc/manuals/securing-debian-manual/index.en.html). This version is from 2017.

    This document is in fact too outdated and not in a shape we should
    prominently present it on the Debian website, thanks for flagging it.
    It even predates systemd and no mention of it at all...

    Can you please "reportbug www.debian.org" asking to remove it from the
    website?

    It's also packaged as src:harden-doc and probably stick around in
    case someone wants to improve it going forward.

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)