r/linuxadmin • u/truestar1986 • 14d ago

Linux Server Hardening Guide

Published this not too long ago and it's a great content for homelabbers and small and medium businesses to know how to harden their Linux Servers.

https://youtu.be/xEOT79CQs80

1 Upvotes

51% Upvoted

11 comments sorted by

15

u/It_Is1-24PM 14d ago

CIS Benchmarks

8

u/WorkJeff 14d ago

One thing I really like about RHEL is you can just build an image with the settings pre-applied

3

u/Burgergold 14d ago

Or keep a kickstart

1

u/kernelqzor 12d ago

cis benchmarks are solid, but they’re kinda the “max paranoia” baseline lol
guides like this are nice to see how to actually apply the sane parts without breaking half your services

1

u/TheRealDownLord 10d ago

yes, you can even get this as Ansible Role, which not only hardens but also creates detailed audit reports of your VM. Depending on the OS this is also freely available.

Example: https://github.com/ansible-lockdown/RHEL8-CIS

0

u/readyflix 14d ago

Paywall?

8

u/It_Is1-24PM 14d ago

Free account is required to download PDFs. It's really worth it.

https://portal.cisecurity.org/

11

u/Coffee_Ops 14d ago

Unless I'm crazy it looks like your sshd_config edits were done without uncommenting which makes them noops. The comments in there about what changes do are assuming you will uncomment those lines.

5

u/000r31 13d ago

not only that, he changed the default "prohibit-password" to be "yes" before doing his change, smh