Oracle: Unbreak my Linux Heart

Just wanted to share an update about my clamav setup with you... I currently have autoupdating of the data files working properly. But I still watch and download Dag Wieers' site for new packages of the engine. I tried swiping his site with wget for changes and automatically copying (aka mirroring) them, but the filenames are different each time. So I rely on the update emails from clamav and then check Dag Wieers' site. He usually has them pretty quickly anyway. (Thanks for that, BTW!) I roll out the clamav RPMs in a script from a shared NFS mount, install them, copy my custom .conf files over the default and do a freshclam to get the latest data files. I get the data files from a local web server, where I run a check every 6 hours for updates and put them in the root of the web server . The last thing is important, because it took me a while to get that right. The .cvd files must be in the web server's root, not in a subdir or so.

You use a "hardening program" to try to make your system as secure as possible, from the ground up. Generally, you deactivate unnecessary services and better the configurations of the ones you leave enabled. This is wildly effective, as it can eliminate many of the vulnerabilities that are common on Linux/Unix platforms. SecurityFocus has an article that presents a walk through of Bastille Linux , a popular hardening program for Red Hat and Mandrake, available for free from Jon Lasser, Pete Watkins, myself, and the rest of the Bastille Linux project. This walk through won't be the kind of "paranoid" setup that the writer enjoys most, as that could remove too much functionality for the average reader.

While waiting for McAfee binaries for Linux, I was told me quickly get some anti-virus solution up and running so we'd be able to cover our asses bases. Naturally, I turned to Clam AntiVirus . For some reason, the Oracle Enterprise Linux RPM pages did not show clamav anywhere. So I checked their website and found the wonderful Dag Wieers maintaining all kinds of clamav binaries for RedHat and Fedora . While at it, I'm trying to build a local clamav server too, so my servers all update from an internal repository instead of the web (as it's easier on the lives of our security officers!). I'm not sure of and how I can do that, though.