{"id":184,"date":"2017-08-26T11:40:34","date_gmt":"2017-08-26T11:40:34","guid":{"rendered":"https:\/\/d1m0.com\/?p=184"},"modified":"2017-09-11T11:37:54","modified_gmt":"2017-09-11T11:37:54","slug":"securing-os","status":"publish","type":"post","link":"https:\/\/d1m0.com\/?p=184","title":{"rendered":"Securing Linux OS"},"content":{"rendered":"

Update Your System – Frequently <\/strong><\/p>\n

Software updates range from critical vulnerability patches to minor bug fixes, and many software vulnerabilities are actually patched by the time they become public.<\/p>\n

Usea Limited User Account<\/strong><\/p>\n

Do not give sudo privileges on every user on your systems.Limit privileged commands in \/etc\/sudoers<\/strong>. It\u2019s not a good practice to ssh into your server as superuser.Use limited users with sudo privileges.<\/p>\n

Run What You Need<\/strong><\/p>\n

Regularly check used ports, runnging services.For network used ports – netstat -nputl<\/strong>Also you may dont need ipv6 support, so disable it . .Disable unnecessary services – systemctl list-unit-files –type=service | grep enabled <\/strong> and disable it with systemctl disable<\/strong>.
\nchkconfig –list | grep ‘3:on’
\nservice serviceName stop
\nchkconfig serviceName off<\/strong><\/p>\n

Minimize Software to Minimize Vulnerability<\/strong>
\nAvoid installing unnecessary software to avoid vulnerabilities in software.Delete all unwanted packages.<\/p>\n

# yum list installed
\n# yum list packageName
\n# yum remove packageName
\nOR
\n# dpkg –list
\n# dpkg –info packageName
\n# apt-get remove packageName<\/p>\n

User Accounts and Password policy<\/strong>
\nUse the useradd \/ usermod commands to create and maintain user accounts. Make sure you have a good and strong password policy. For example, a good password includes at least 8 characters long and mixture of alphabets, number, special character, upper & lower alphabets etc.
\nCheck for users and their passwords. viwp -s<\/strong> or check for yousers with no password cat \/etc\/shadow | awk -F: ‘($2==””){print $1}<\/strong>‘<\/p>\n

Use firewall<\/strong>
\nIt\u2019s highly recommended to enable Linux firewall to secure unauthorised access of your servers. Apply rules in iptables to filters incoming, outgoing and forwarding packets. We can specify the source and destination address to allow and deny in specific udp\/tcp port number.<\/p>\n","protected":false},"excerpt":{"rendered":"

Update Your System – Frequently Software updates range from critical vulnerability patches to minor bug fixes, and many software vulnerabilities are actually patched by the time they become public. Usea Limited User Account Do not give sudo privileges on every user on your systems.Limit privileged commands in \/etc\/sudoers. It\u2019s not a good practice to ssh …<\/p>\n

Continue reading ‘Securing Linux OS’ »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-184","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=184"}],"version-history":[{"count":5,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/184\/revisions"}],"predecessor-version":[{"id":294,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/184\/revisions\/294"}],"wp:attachment":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}