secure_ubuntu_system:base_security
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
secure_ubuntu_system:base_security [2016/07/14 00:16] – [Disable Ctrl-Alt-Delete] peter | secure_ubuntu_system:base_security [2020/07/15 09:30] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
====== Secure Ubuntu System - Base Security ====== | ====== Secure Ubuntu System - Base Security ====== | ||
- | ====== Get root privileges (Optional) ====== | + | ====== Get root privileges (optional) ====== |
Because we must run all the next steps from this document with root privileges, we can either prepend all commands in this tutorial with the string sudo, or we become root right now by typing: | Because we must run all the next steps from this document with root privileges, we can either prepend all commands in this tutorial with the string sudo, or we become root right now by typing: | ||
Line 9: | Line 9: | ||
</ | </ | ||
- | ...and entering the Administrator' | + | ...and entering the Administrator' |
- | **IMPORTANT**: | + | <WRAP notice> |
+ | **IMPORTANT**: | ||
+ | </ | ||
- | **IMPORTANT**: Do __NOT__ use the following command: | + | <WRAP alert> |
+ | **DANGER**: Do **__NOT__** use the following command: | ||
<code bash> | <code bash> | ||
Line 19: | Line 22: | ||
</ | </ | ||
- | and do __NOT__ enable the root login by running: | + | and do **__NOT__** enable the root login by running: |
<code bash> | <code bash> | ||
Line 34: | Line 37: | ||
sudo passwd -dl root | sudo passwd -dl root | ||
</ | </ | ||
+ | </ | ||
+ | ---- | ||
===== Disable Ctrl-Alt-Delete ===== | ===== Disable Ctrl-Alt-Delete ===== | ||
- | Anyone that has physical access to the keyboard can simply use the Ctrl+Alt+Delete key combination to reboot the server without having to log on. Sure, someone could simply unplug the power source, but you should still prevent the use of this key combination on a production server. | + | Anyone that has physical access to the keyboard can simply use the Ctrl+Alt+Delete key combination to reboot the server without having to log on. |
+ | |||
+ | Sure, someone could simply unplug the power source, but you should still prevent the use of this key combination on a production server. | ||
+ | |||
+ | This forces an attacker to take more drastic measures to reboot the server, and will prevent accidental reboots at the same time. | ||
Issue the following command: | Issue the following command: | ||
Line 53: | Line 62: | ||
- | ===== Setup the correct time zone (Optional, but Highly-Recommended) ===== | + | ---- |
+ | |||
+ | ===== Setup the correct time zone (optional, but highly-recommended) ===== | ||
Having the right time zone is a requirement for proper security of the server. | Having the right time zone is a requirement for proper security of the server. | ||
Line 68: | Line 79: | ||
+ | ---- | ||
+ | |||
+ | ===== Continue ===== | ||
+ | |||
+ | Continue to [[Secure Ubuntu System:Add Software]] |
secure_ubuntu_system/base_security.1468455418.txt.gz · Last modified: 2020/07/15 09:30 (external edit)