LXer: 9 Ways to Harden Your Linux Workstation After Distro Installation

LXer · 04-17-2017, 07:12 AM

Published at LXer:

So far in this series, we’ve walked through security considerations for your SysAdmin workstation from choosing the right hardware and Linux distribution, to setting up a secure pre-boot environment and distro installation. Now it’s time to cover post-installation hardening.

Read More...

Habitual · 04-17-2017, 08:10 AM

Covers the basics.
+1

but...
"Globally disable firewire and thunderbolt modules"
I miss something important?

GazL · 04-18-2017, 04:19 AM

As I understand it, firewire/thunderbird devices can do DMA access to system ram, so a maliciously constructed controller firmware in a device could do bad things to a connected computer. I don't think it's something many people will need to worry about protecting against though.