What are your methods to harden *nix servers? (infosec.pub)

submitted 1 month ago by fishynoob@infosec.pub to c/cybersecurity@infosec.pub

8 comments fedilink hide all child comments

I have been looking at hardening *nix servers for my lab and maybe carry some of that over to work. CIS benchmarks are something I like doing but that's barely scratching the surface. What do you do for your servers?

I have Lynis, systemd-analyze, Kernel self protection in mind but I'd love to hear your thoughts. Bonus points for the most paranoid setups!

you are viewing a single comment's thread
view the rest of the comments

[-] dotslashme@infosec.pub 2 points 1 month ago

I'm probably in minority here. My setup is simple, I chose a good OS like Debian or Alpine to run things on, make sure it's always patched, move sshd to a nonstandard port and harden it.

this post was submitted on 19 Apr 2025

5 points (77.8% liked)

cybersecurity

4387 readers

21 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 2 years ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub