Taking Linux Security to a Whole New Level
Posted by admin in Linux on 04 2nd, 2010 | no responses
KarinVerbeek asked:
Undoubtedly, it is a reality that Linux users have a lot much less to worry about compared to Windows and Apple users. The argument that ?Security through obscurity is meant to recommend that proprietary software like Windows is more secure by virtue of its closed nature. However, Linux open source seems to be beat this argument using the Linus law which states that ?Given enough eyeballs, all bugs are shallow. This suggests that the global community of Linux users is its greatest advantage when it comes to protection. A global community is much more likely to spot flaws in code and produce a solution as opposed to a restricted set of paid developers. This nevertheless isn’t to say that Linux security is impervious. No system can claim that. So what can Linux users to ensure that they have much more secure systems running on their machines?
1, always use the keyring. This is the password required when connecting to a network. A keyring encrypts sensitive passwords and utilizing it adds a degree of security to the system. Two, enforce user password update. This indicates that you need to enforce a command that requires users to alter passwords. Set an expiration period using command sudo alter I USERNAME. Third, don’t disable the SELinux function. This security enhanced mechanism is there for a cause and is used to restrict access to applications. It may seem much more convenient to disable this seemingly irritating feature, but disabling it’ll only result in uglier experiences. If a plan is having problems, merely modify the SELinux policy.
Fourth, and this cannot be stressed further, steer clear of logging in as the root user. Even where you need to administrate a machine, log in as a normal user or use the sudo feature. Logging in as the root user bypasses a main security hurdle that permits access to systems and subsystems that would otherwise have been inaccessible by any other indicates. Fifth, install security updates as soon as they become accessible. Linux updates usually includes security patches and ought to thus be installed quickly. Set up cron jobs that check for these updates.
Express Cards
There are other additional precautions that Linux administrators can take to further improve Linux security. 1 is disallowing root login over SSH. Additionally to this, the SSHD should be set to listen to a port quantity above 1024. This setting ultimately shields you from 99.9% of brute force attackers. Do not listen on port 22, rather map an external port to listen to this port number if behind a firewall or router. Administrators may also limit the domains that connect and specify explicitly known remote IP addresses by editing the /etc/hosts.permit and /etc/hosts.deny files. These suggestions should undoubtedly take your Linux security to a whole new level.
Caffeinated Content – Members-Only Content for WordPress
Undoubtedly, it is a reality that Linux users have a lot much less to worry about compared to Windows and Apple users. The argument that ?Security through obscurity is meant to recommend that proprietary software like Windows is more secure by virtue of its closed nature. However, Linux open source seems to be beat this argument using the Linus law which states that ?Given enough eyeballs, all bugs are shallow. This suggests that the global community of Linux users is its greatest advantage when it comes to protection. A global community is much more likely to spot flaws in code and produce a solution as opposed to a restricted set of paid developers. This nevertheless isn’t to say that Linux security is impervious. No system can claim that. So what can Linux users to ensure that they have much more secure systems running on their machines?
1, always use the keyring. This is the password required when connecting to a network. A keyring encrypts sensitive passwords and utilizing it adds a degree of security to the system. Two, enforce user password update. This indicates that you need to enforce a command that requires users to alter passwords. Set an expiration period using command sudo alter I USERNAME. Third, don’t disable the SELinux function. This security enhanced mechanism is there for a cause and is used to restrict access to applications. It may seem much more convenient to disable this seemingly irritating feature, but disabling it’ll only result in uglier experiences. If a plan is having problems, merely modify the SELinux policy.
Fourth, and this cannot be stressed further, steer clear of logging in as the root user. Even where you need to administrate a machine, log in as a normal user or use the sudo feature. Logging in as the root user bypasses a main security hurdle that permits access to systems and subsystems that would otherwise have been inaccessible by any other indicates. Fifth, install security updates as soon as they become accessible. Linux updates usually includes security patches and ought to thus be installed quickly. Set up cron jobs that check for these updates.
Express Cards
There are other additional precautions that Linux administrators can take to further improve Linux security. 1 is disallowing root login over SSH. Additionally to this, the SSHD should be set to listen to a port quantity above 1024. This setting ultimately shields you from 99.9% of brute force attackers. Do not listen on port 22, rather map an external port to listen to this port number if behind a firewall or router. Administrators may also limit the domains that connect and specify explicitly known remote IP addresses by editing the /etc/hosts.permit and /etc/hosts.deny files. These suggestions should undoubtedly take your Linux security to a whole new level.
Caffeinated Content – Members-Only Content for WordPress
Related Posts
No Comments »
No comments yet.
RSS feed for comments on this post. TrackBack URL