LXer: Securing Linux Opearting System

LXer · 07-09-2011, 10:51 PM

Published at LXer:

Please find below the bare minimum checklists for Linux Hardening Guide.ZEROCONF: On by default. Used by avahi for local service discovery. Disable this service. Edit /etc/sysconfig/network. Add NOZEROCONF=yes . Then remove the avahi package and its dependencies /etc/sysctl.conf settings : Don’t reply to broadcasts. Prevents joining a smurf attack. net.ipv4.icmp_echo_ignore_broadcasts = 1 Enable protection for bad icmp error messages. net.ipv4.icmp_ignore_bogus_error_responses = 1

Read More...

craigevil · 07-10-2011, 04:20 PM

More like a bare silly.

What distro uses /etc/sysconfig/network ? Not Debian, Ubuntu or their derivatives.

Bare minimum checklist:
1) Do not run browser as root
2) Install a firewall or use a hardware firewall(router)
3) Keep your system updated
4) Turn off any services you do not need
5) Stick to packages in your distros repos