From the course: Linux Hardening
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Minimizing the OS attack surface, part one - Linux Tutorial
From the course: Linux Hardening
Minimizing the OS attack surface, part one
Hello, and welcome to Cybrary's Linux Hardening course and part one of minimizing the OS attack surface. I'm your instructor, Corey Holzer. This lesson has three objectives that we're going to cover. First, we're going to explain the importance of regular patching. And I will explain to you how and why to uninstall unused packages. Finally, I'll explain how and why to disable firewire ports. Patching is a basic part of securing an operating system. It's so important that canonical default message tells users how many packages have to be updated as part of their initial login. I'll touch more on this later. But from a security perspective, providing this information to users who are not administrators reveals too much information about the systems on the network. Therefore, I think you should consider changing the banner for regular users. For easier administration, canonical provides an automated update process. Consider installing this unless the server has requirements that an…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
Hardening the hardware2m 22s
-
(Locked)
Hardening the bootloader4m 24s
-
(Locked)
Securing the kernel9m
-
(Locked)
Disabling Ctrl-Alt-Delete (demo)1m 6s
-
(Locked)
Securing storage devices, part one9m 3s
-
(Locked)
Securing storage devices, part two7m 35s
-
(Locked)
Disabling SUID and SGID permissions (demo)51s
-
(Locked)
Blocking unwanted activities and traffic7m 52s
-
(Locked)
Minimizing the OS attack surface, part one5m 36s
-
(Locked)
Minimizing the OS attack surface, part two4m 41s
-
(Locked)
Network hardening at the host4m 54s
-
(Locked)
System administration hardening6m 8s
-
(Locked)
Testing, monitoring, and reviewing9m 25s
-
-
-
-