Re: Linux hardening

From: paavan shah (paavan.shah_at_gmail.com)
Date: 08/25/05

  • Next message: AragonX: "Re: Linux hardening" 
    Date: Thu, 25 Aug 2005 12:16:32 +0530
To: leusent@link-net.org

    > Many people have recommended mounting /tmp and /var/tmp noexec. This is a good
    > idea but keep in mind that it is easy to execute commands even on a noexec
    > filesystem (using the ld-linux library). So don't be surprised if some
    > slighly clever attacker is running a binary from that location.
    >

    how is it possible to run binaries using ld-linux library?Can you put
    more light on it?
    I am asking this because i believe to catch a thief you have to become a thief.

    As far as linux hardening is concerned: I would like to
    summarize,group members please add your notes to it:

    1)Installing your servers with bare minimum packages and see to it
    that only needed services are running.
    2)Before you install a new package on your production do check for
    known vulnerabilities for that package and if possible always get the
    latest package.always verfiy the integrity of the package using
    md5sum.
    3)With integrity checkers like tripwire periodically check your
    essential binaries and configuration files for any modifications.
    4)DO use log analyzers like logcheck and swath to detect important events.
    5)Periodically check your system for rootkits using rootkit hunter and
    chkrootkit.
    6)Regulary backup your essential data to other machines or hard disks
    such that in case of failure the data can be recovered.
    7)get packages from autorized sites only.
    8)Keep a watch for upcoming attacks and vulnerabilites for the
    softwares installed on ur machine.Patch them and keep them uptodate.
    9)check your system for possible viruses using antivirus like clamAV.

    List,if more points are to be added then do add to the summary.

  • Next message: AragonX: "Re: Linux hardening"

    Relevant Pages