Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The NSA has came up with the "Guide to the Secure Conguration of Red Hat Enterprise Linux 5" ( I have read through this guide and it is amazing information. My question is, is there a program out there that you can run on your server and it can tell you which sections you are compliant on?

For example it would say "Add nodev, nosuid, and noexec Options to /tmp" is not correctly configured?

If there was a program like this it could help to make sure that you have configured everything correctly. I know there are kickstart programs and such not but this would be helpful for already running servers.

share|improve this question

The commercial version of Nessus contains NSA audit templates (including RHEL 5):

enter image description here

share|improve this answer
Thanks for the information. I am a commercial user of Nessus so I will check into that. – user106104 Apr 11 '12 at 22:06

Outside of the audit files available to Nessus Pro Feed users, I am unaware of any applications that validate against the NSA hardening guide. You are likely on your own to develop a audit script.

I would recommend taking a look at the Center for Internet Security benchmarks as a place to start. As a companion piece to their hardening guides they also include shell scripts to audit against the benchmark. The guides should be similar enough that their scripts would be an acceptable starting place for developing your own.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.