Linux Security
"Yes, I'm paranoid — but am I paranoid enough?" ― David Foster Wallace, Infinite Jest
Hardening Public Servers
- Install system accounting On Debian based systems run 'apt-get install acct' then you can use commands lastcomm and sa to see who ran various comands. Also a log file will be writen to /var/log/account/pacct
- Remove compilers from production severs use the command 'apt-get --purge remove gcc'
- Setup remote logging See http://www.thegeekstuff.com/2012/01/rsyslog-remote-logging/ to find out how
Install fail2ban
Linux.com has a good intro to fail2ban
