How Will You Harden The Server?

⟩ How will you harden the server?

A Server-- it is weather in testing or production-- are primary targets for

the attackers. By taking the proper steps, you can turn a vulnerable box into

a hardened server.

How to secure SSH sessions, configure firewall rules, minimize software, listed below,

1. Encrypt Data communication

-- use scp, ssh avoid FTP, Telnet and Rlogin /rsh

2. Minimize Software to minimize vulnerability

-- use RPM pkg management / YUM utility to remove unwanted packages installed

3. One Network Service per System or Vm Instance

-- Run different network services on separate servers or vm instance.

For example, if an attacker able to successfully exploit software called

Apache flow, he/she get an access to entire server including other services

such as MYSQL, email server and so on.

4. Keep linux software and Kernel up to date.

-- Use yum update or up2date

some distros apt-get update

5. Security essentials like selinux

6. password authentication like password aging, restricting to user previous

passphrases, and locking user accounts after login failures.

7. Disable unwanted services using chkconfig --list | grep "3:on"

Is this answer helpful?
0 Yes | 0 No

121 views

The command "cd /proc/10/cwd" provides the a) current working directory of process having PID 10 b) current status of the process having PID 10 c) current version of the filesystem d) none of the mentioned

Most files and directories within /proc are 0 bytes in size because a) proc filesystem exists only as a reflection of the in-memory kernel data structure b) these files contains very only one or two instructions c) both(a) and (b) d) none of the mentioned

Accessing the file /proc/meminfo gives the different result each time because a) memory usages is always fluctuating b) a new process id is assigned c) logical address is different from the physical address d) none of the mentioned

Question and Answer:

Home Linux System Calls