Linux Hardening

This section is about hardening the Linux operating system. The information provided here can be used on most Linux distributions.

• Identifiers
  • Locale
  • Username
  • Hostname
  • Machine ID
  • Time synchronisation
• Kernel Hardening
  • Choosing a kernel release
  • Kernel options
  • Blacklisting unneeded kernel modules
• Bootloader hardening
  • Boot parameters
  • GRUB password
• Filesystem hardening
  • Mount points
  • Proc hardening
  • File permissions
• PAM
  • Restricting su
  • Increasing number of hashing rounds
  • Enforcing strong passwords
  • Enforcing login delays
• Network
  • Firewall
  • Honeypot
  • Portscan protection
• Miscellaneous hardening
  • Creating admin user
  • SSH
  • /etc/securetty
  • Locking the root account
  • Core dumps
  • Microcode
  • Editing files as root