secure_ubuntu_system:base_security

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
secure_ubuntu_system:base_security [2016/07/14 00:16] – created petersecure_ubuntu_system:base_security [2020/07/15 09:30] (current) – external edit 127.0.0.1
Line 1: Line 1:
 ====== Secure Ubuntu System - Base Security ====== ====== Secure Ubuntu System - Base Security ======
  
-====== Get root privileges (Optional) ======+====== Get root privileges (optional) ======
  
 Because we must run all the next steps from this document with root privileges, we can either prepend all commands in this tutorial with the string sudo, or we become root right now by typing: Because we must run all the next steps from this document with root privileges, we can either prepend all commands in this tutorial with the string sudo, or we become root right now by typing:
Line 9: Line 9:
 </code> </code>
  
-...and entering the Administrator's password, adminpass.+...and entering the Administrator's password, <color red>adminpass</color>.
  
-**IMPORTANT**:  If this is done, then remember to remove the sudo command from the front of any future issued command.+<WRAP notice> 
 +**IMPORTANT**:  If this is done, then remember to remove the **sudo** command from the front of any future issued command. 
 +</WRAP>
  
-**IMPORTANT**:  Do __NOT__ use the following command:+<WRAP alert> 
 +**DANGER**:  Do **__NOT__** use the following command:
  
 <code bash> <code bash>
Line 19: Line 22:
 </code> </code>
  
-and do __NOT__ enable the root login by running:+and do **__NOT__** enable the root login by running:
  
 <code bash> <code bash>
Line 34: Line 37:
 sudo passwd -dl root sudo passwd -dl root
 </code> </code>
 +</WRAP>
  
 +----
  
 ===== Disable Ctrl-Alt-Delete ===== ===== Disable Ctrl-Alt-Delete =====
  
-Anyone that has physical access to the keyboard can simply use the Ctrl+Alt+Delete key combination to reboot the server without having to log on.  Sure, someone could simply unplug the power source, but you should still prevent the use of this key combination on a production server.  This forces an attacker to take more drastic measures to reboot the server, and will prevent accidental reboots at the same time. +Anyone that has physical access to the keyboard can simply use the Ctrl+Alt+Delete key combination to reboot the server without having to log on. 
 + 
 +Sure, someone could simply unplug the power source, but you should still prevent the use of this key combination on a production server. 
 + 
 +This forces an attacker to take more drastic measures to reboot the server, and will prevent accidental reboots at the same time. 
  
 Issue the following command: Issue the following command:
Line 46: Line 55:
 </code> </code>
  
-…and comment out the following line by placing a hash # sign in front.+…and comment out the following line by placing a hash **#** sign in front.
  
 <file bash /etc/init/control-alt-delete.conf> <file bash /etc/init/control-alt-delete.conf>
Line 53: Line 62:
  
  
-===== Setup the correct time zone (Optional, but Highly-Recommended) =====+---- 
 + 
 +===== Setup the correct time zone (optional, but highly-recommended) =====
  
 Having the right time zone is a requirement for proper security of the server.  ShareWiz security standards require the time zone to be set to GMT.  This standardizes time in the system and prevents security issues which may occur with unusual time movements.  It also ensures that logs files are consistent. Having the right time zone is a requirement for proper security of the server.  ShareWiz security standards require the time zone to be set to GMT.  This standardizes time in the system and prevents security issues which may occur with unusual time movements.  It also ensures that logs files are consistent.
Line 68: Line 79:
  
  
 +----
 +
 +===== Continue =====
 +
 +Continue to [[Secure Ubuntu System:Add Software]]
secure_ubuntu_system/base_security.1468455368.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki