Hardened checking - how?

[Björn Esser]

Am Donnerstag, den 06.06.2013, 22:43 +0200 schrieb Björn Esser:
> > Hi,
> > Is there an official Fedora way for telling is something is hardened 
> > correctly?
> > I'm working on hardening mongodb, and I think I have it right, but I'd 
> > really like to check.
> > 
> > I was given a couple of scripts, which had dependencies not in Fedora, 
> > which then had dependencies not in Fedora, and so forth.  At the third 
> > level of dependencies, I figured there had to be a more official way.
> > 
> > If I missed a Fedora web page on it, or it was in the recent hardening 
> > discussion, feel free to point me to it.
> > 
> > Thanks
> > Troy Dawson
> 
> The hardening-check perl-script from
> http://packages.debian.org/sid/hardening-includes sources might work in
> fedora as well...

I did some tests with hardening-check perl-script from debian and it
works well in fedora and el. So I pkged into a rpm:
https://bugzilla.redhat.com/show_bug.cgi?id=971836

If someone wants to review (a quick one, just a noarch perl-script,
manpage and usual %doc)...

Cheers,
  Björn

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20130607/cac0907e/attachment-0001.sig>