How to Secure a Linux Server
github.com
How to Secure a Linux Server
1–10 of 108 posts
Re: How to Secure a Linux Server
#2I didn’t know you could add google Authenticator to your server. Thank you for this write up.
Re: How to Secure a Linux Server
#3I didn’t know you could add google Authenticator to your server. Thank you for this write up.
I'm surprised Authy doesn't have a pam module: https://github.com/authy/authy-ssh/issues/53
Re: How to Secure a Linux Server
#4I didn’t know you could add google Authenticator to your server. Thank you for this write up.
Yes, you can add it to almost anything and the best part is; you don’t have to be online to generate and/or verify the code.
Re: How to Secure a Linux Server
#5I was pleased to notice that the author used DuckDuckGo search link in their article instead of Google.
Re: How to Secure a Linux Server
#6[deleted]
Re: How to Secure a Linux Server
#7The CIS benchmarks are a great place to start for hardening a system (https://www.cisecurity.org/cis-benchmarks/) and there's also OpenSCAP gives you a nice way to scan systems for compliance against a set of hardening rules (https://www.open-scap.org/).
Re: How to Secure a Linux Server
#8No mention of shipping off logs to another place? It's probably good to assume someone will gain access and make after-the-fact forensics a primary concern as well.
Something a lot of hardening guides seem to skip!
Re: How to Secure a Linux Server
#9Here’s a bonus one: If you install Docker don’t add your non-admin to the docker group as it’s effectively passwordless sudo.
Re: How to Secure a Linux Server
#10The CIS benchmarks are a great place to start for hardening a system ( https://www.cisecurity.org/cis-benchmarks/ ) and there's also OpenSCAP gives you a nice way to scan systems for compliance against a set of hardening rules ( https://www.open-scap.org/ ).
Yes! This guide is good for securing maybe a personal server, but any business systems should use a server hardening standard that has industry mindshare (CIS, STIG, etc.) I can speak from personal experience that QSAs give you a very skeptical look when you say "our security standard is homebrewed."