Quick, Easy "Security Cheat Sheet" for new Centos 5.4 VPS?
Hi -
I looked at the sticky ... ... but does anybody have any recommendations for establishing "basic security" on a new Centos 5.4 VPS? I just want to make sure: a) I've done "due diligence" to prevent compromises <= I'm looking for pretty much the Linux equivalent of enabling Windows Firewall and installing Symantec or McAfee b) If, for whatever reason, I *am* compromised, I have a fighting chance of detecting it Thank you very much in advance .. PSM |
Quote:
|
Hi -
Thank you, but the NSA guidelines are the EXACT OPPOSITE of what I'm looking for. They're 182 pages of advice like "disable your USB ports", "use centralized authentication", and "enable SE Linux". No: I'm looking for something short, simple and eminently practical. Preferably somthing oriented toward "VPS Linux" in general, and "Centos 5.4" in particular. For an internet-facing, single-user environment. Any suggestions? Thank you in advance .. PSM |
Quote:
|
Hi -
Thanx for the suggestion. I'll post back what I find (this might be a good opportunity to play with LQ blogs for the first time). My new VPS comes with an iptables firewall (yay!), the iptables is enabled (yay!) .... but it's the default configuration: absolutely no rules. Essentially, no firewall ;) The VPS service also offers (optional) Plesk control panel and applets. I installed a bunch of the Plesk stuff: including Kapersky A/V and Plesk's own firewall. Which pretty much covers the "Windows firewall and McAfee" I mentioned (as generic metaphors, not necessarily specific items that I actually wanted to duplicate on Linux) earlier. I was hoping to find a short (1 page or less) "Linux VPS Security for Dummies" kind of "how-to". I'm sure they exist - but I haven't found one yet. And, unfortunately, the things cited in the LQ "security" sticky seem to be relatively old (some of the links are actually broken) and not particularly relevant to my particular needs (IMHO). Anyway - thanx again for the suggestions, and please let me know if you think of anything else. |
I have a RHEL/CentOS 5 system "baseline" that I put together. It's both basic and easy to follow. (Read: it's certainly not comprehensive or specific to any one situation.) Here's a summarized version.
Install time:
Post install steps:
------- That's the starting point for everything else I do to each system. |
All times are GMT -5. The time now is 10:33 AM. |