Linux Security Hardening

Internal

• Linux Security

Steps

Minimal Footprint

Install a minimal image and add utilities as needed.

Eliminate Users

Remove all unneeded users.

root

Change the root's password to a long, random one.

Scan for Services Listening on Ports

 netstat -tupln

Eliminate:

• postfix

sshd

• Create a special login user with a random name and a long, random password.

• Disallow root to log in.

TODO

• Penetration detection.