Deployment

[Ben Scott]

Hi everybody (Hi Dr. Nick!),

  As Bruce rightly points out, time is running short.

  The server now known as "liberty" appears to be operating okay and
nobody's screamed in pain yet, so I guess we can use the existing
install "as is" if we have to.  If anyone wants major changes in
system configuration, speak now.

  What do we need to get done before we install it at the ISP, and
thus release physical control of and access to the box?

- BIOS password
- Disable boot from non-HD in BIOS
- Boot loader password and restrictions
- Strong root password (currently non-trivial but still too easy)
- Confirm RAID boot works
- Any firewall hardening?
- Tripwire/etc (filesystem IDS)?
- PortSentry or the like?

  Anything else?

-- Ben