The NSA has came up with the "Guide to the Secure Conguration of Red Hat Enterprise Linux 5" (http://www.nsa.gov/ia/_files/os/redhat/NSA_RHEL_5_GUIDE_v4.2.pdf) I have read through this guide and it is amazing information. My question is, is there a program out there that you can run on your server and it can tell you which sections you are compliant on?
For example it would say 220.127.116.11.1 "Add nodev, nosuid, and noexec Options to /tmp" is not correctly configured?
If there was a program like this it could help to make sure that you have configured everything correctly. I know there are kickstart programs and such not but this would be helpful for already running servers.