[Leaplist] Security Audit Advice

[Aaron Morrison]

On 14 Dec 2007, at 20:40, Aaron Morrison wrote:

> Ok.
>
> Looks like I may have a small gig doing a security audit for a  
> company.
>
> Other than port scanning (which will be authorized, BTW), checking  
> running services/processes, checking usernames, and the odd setuid  
> root app, what kinds of things should a good audit be checking for?
>
> Opinions?  Tool recommendations?
>
> --am


Oh yeah, this is a colocated Linux box[en] running web services.

--am