[Freeswitch-users] FreeSWITCH Security Hardening Project

[Patrick Lists]

On 19-02-12 20:51, Josh wrote:
>
>> Definitely interested. Please keep the list updated with your progress
>> and the location where the policy can be downloaded once you are ready
>> to share it.
>>
> OK, will do.
>
> At this stage, I just managed to compile the whole FS distribution and
> package it into .rpm files and that was a challenge in itself (I did
> find some bugs in the process, which I will post through JIRA later on),
> so the next thing for me to do is to deploy this on my test harness and
> read up a bit more about FS itself before configuring it, running some
> pretty basic configuration, before I finish up the 2nd draft of the
> security policy and fine-tune it based on the feedback I get from
> SELinux/auditd. Will keep you posted on my progress.

Thanks! Does your FS RPM install to /opt/freeswitch/... or do you follow 
the FHS [1] and stick binaries in /usr/sbin, libs in /usr/lib64, configs 
in /etc/{sysconfig} etc.?

Regards,
Patrick

[1] https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard