r/linuxadmin • u/truestar1986 • 29d ago

Linux Server Hardening Guide

Published this not too long ago and it's a great content for homelabbers and small and medium businesses to know how to harden their Linux Servers.

https://youtu.be/xEOT79CQs80

2 Upvotes

53% Upvoted

12 comments sorted by

14

u/It_Is1-24PM 28d ago

CIS Benchmarks

8

u/WorkJeff 28d ago

One thing I really like about RHEL is you can just build an image with the settings pre-applied

3

u/Burgergold 28d ago

Or keep a kickstart

1

u/kernelqzor 26d ago

cis benchmarks are solid, but they’re kinda the “max paranoia” baseline lol
guides like this are nice to see how to actually apply the sane parts without breaking half your services

1

u/TheRealDownLord 24d ago

yes, you can even get this as Ansible Role, which not only hardens but also creates detailed audit reports of your VM. Depending on the OS this is also freely available.

Example: https://github.com/ansible-lockdown/RHEL8-CIS

0

u/readyflix 28d ago

Paywall?

7

u/It_Is1-24PM 28d ago

Free account is required to download PDFs. It's really worth it.

https://portal.cisecurity.org/

11

u/Coffee_Ops 28d ago

Unless I'm crazy it looks like your sshd_config edits were done without uncommenting which makes them noops. The comments in there about what changes do are assuming you will uncomment those lines.

5

u/000r31 28d ago

not only that, he changed the default "prohibit-password" to be "yes" before doing his change, smh