You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
901 B
901 B
Linux Stuff
Hardening
- Automatic Updates (Non-prod only)
- SSH Logins
- Lockdown logins
- Firewall
Automatic Updates
To do updates manually. Don't do this on Production servers because you should have better planning to upgrade you key servers.
apt update
apt upgrade
Install a utility that will perform auto-upgrades
apt install unattended-upgrades
Configure the utility
dpkg-reconfigure --priority=low unattended-upgrades
SSH Logins
Lockdown Logins
Edit the following file in nano on the server:
sudo nano /etc/ssh/sshd_config
Make the following changes:
- Change the Port to something other than 22
- Uncomment AddressFamily
- Change AddressFamily to inet
- Change PermitRooLogin to no
- Change PasswordAuthentication to no
Save the file and restart the ssh service
sudo systemctl restart sshd