Its not enough to harden just Debain. Its necessary to harden the rest of Apache-MySQL-PHP as well. Harden MYSQL sudo mysql_secure_installation answer Yes to all questions (but no need to change password) Disabling SSH root login and settings sudo vi /etc/ssh/sshd_config change PermitRootLogin yes to PermitRootLogin no LoginGraceTime 120 to LoginGraceTime 30 add line AllowUsers username username username Consider disabling...
This setup is for Virtual Host server – not a dedicated server with a single domain SSH to your server ssh root@IP Update Debian/Ubuntu apt-get update && apt-get upgrade –show-upgraded -y Create User How To Create a User in Linux Setup SSH for Remote Access With GPG Keys – No Password How To Setup SSH for Remote Access IMPORANT –...
https://help.ubuntu.com/community/BastilleLinux sudo apt-get install bastille sudo apt-get install perl-tk sudo bastille -x
Its not enough to harden just Ubuntu. Its necessary to harden the rest of LAMP as well. So here is how I do it. Harden MYSQL sudo mysql_secure_installation answer Yes to all questions (but no need to change password) Harden PHP – and tune performance sudo apt-get install php5-suhosin sudo vi /etc/php5/apache2/php.ini uncomment this code or update setting max_execution_time =...
Install MYSQL Server sudo apt-get install mysql-server Harden MYSQL Server sudo mysql_secure_installation
sudo vi /etc/apt/sources.list update/add deb http://cdn.debian.net/debian/ wheezy main deb-src http://cdn.debian.net/debian/ wheezy main deb http://security.debian.org/ wheezy/updates main deb-src http://security.debian.org/ wheezy/updates main # wheezy-updates, previously known as ‘volatile’ deb http://cdn.debian.net/debian/ wheezy-updates main deb-src http://cdn.debian.net/debian/ wheezy-updates main deb http://download.virtualbox.org/virtualbox/debian wheezy contrib deb-src http://download.virtualbox.org/virtualbox/debian wheezy contrib deb http://http.debian.net/debian/ wheezy-backports main contrib deb-src http://http.debian.net/debian/ wheezy-backports main contrib
I have had some problems getting backups (of VMs) to run on new Debian Desktop installations. Best practice seems to be as follows: sudo apt-get install dkms Use the latest from https://www.virtualbox.org/wiki/Linux_Downloads sudo vi /etc/apt/sources.list deb http://download.virtualbox.org/virtualbox/debian wheezy contrib deb http://http.debian.net/debian/ wheezy-backports main contrib wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | sudo apt-key add – sudo apt-get update sudo apt-get install virtualbox-4.3
Harden WordPress chown [username]:www-data find /var/www/html/DOMAIN -type d -exec chmod 755 {} \; find /var/www/html/DOMAIN -type f -exec chmod 644 {} \; chmod 440 /var/www/html/DOMAIN/*.php chmod 450 -R /var/www/html/DOMAIN/wp-admin chmod 450 -R /var/www/html/DOMAIN/wp-includes chmod 440 /var/www/html/DOMAIN/.htaccess chmod 766 /var/www/html/DOMAIN/sitemap.* chmod 770 -R /var/www/html/DOMAIN/wp-content/uploads chmod 770 -R /var/www/html/DOMAIN/wp-content/upgrade chmod 750 -R /var/www/html/DOMAIN/wp-content/plugins (You could put all that in a script for...
Checklist of things to do after installing Debian Gnome The first problem you have with a brand new linux (Debian/Ubuntu) install is the user is not setup in sudoers. So first thing: login as root su sudo adduser username sudo sudo vi /etc/sudoers give permissions to your new user – below root username ALL=(ALL:ALL) ALL alternately – unsecure username ALL=(ALL)...
sudo vi /etc/apache2/conf.d/security ServerTokens Prod ServerSignature Off sudo vi /etc/apache2/sites-available/default Directory /var/www/html> Options -Indexes /Directory> https://www.linuxquestions.org/questions/blog/rearden888-507430/howto-set-up-modsecurity-on-debian-7-35569/