[CentOS] Hardened ver of CentOS?

Rogelio wrote:
> John R Pierce wrote:
>> CentOS /is/ a distro,  there is only one centos 'distribution'.      
>> centos configured with selinux enabled, appropriate firewall rules, 
>> and the minimum number of services required for your application 
>> should be fairly 'hardened' as-is.
> 
> Understood.  I meant CentOS-based, but I suppose the "best" way is to 
> just roll something myself.
> 
> I was hoping to find a nice list HOWTO or script that someone else was 
> using so I wouldn't have to think through everything from scratch.
> 
> Thanks.


There are some guides around, for example:

http://www.puschitz.com/SecuringLinux.shtml

However security is not a one size fits all solution that can be applied 
off the shelf. You need to assess where *your* risks are and what you 
should do to minimize them.

Hope that helps.