Bastille is an extremely cool security hardening tool for Linux, it teaches while it secures. There's an article about recent Bastille project developments over at Slashdot:"NewsForge interviews the Bastille project lead Jay Beale about Bastille's cool new
which reports and scores Linux security and -- as always -- makes Linux
lockdown super-easy. Available for many distros and Mac OS X, too. Best
of all, it's free and open source!"
As Jay points out in the interview, the work was "sponsored by the U.S. government's Technical Support Working Group."
An anonymous reader summarizes the new capability: "In
essence, Bastille now does two things. In one mode, it locks down an
operating system, tweaking the configuration for increased security,
asking you about each step and teaching you along the way. In the new
Assessment mode, it reports on what hardening steps have been taken and
what could be taken."