server_hardening.md

Server Hardening Checklist

This is mostly a checklist of things that I need to research and automate.

1. OpenSSH Hardening:

• Secure Secure Shell
• How To Protect SSH With Two-Factor Authentication

1. Automated Security Updates

• UnattendedUpgrades

1. Users/Groups

• Permissions
• Password requirements
  • libpam-cracklib

1. IPTables
2. SELinux or/and GRSecurity ? (Need to research this)
3. HIDS (Host-based Intrusion Detection System)

• OSSEC

1. Increase entropy by ensuring randomness

• rng-tools
• haveged

Useful links (in no particular order)

• https://www.inversoft.com/guides/2016-guide-to-user-data-security
• https://github.com/openstack/openstack-ansible-security
• https://github.com/geerlingguy/ansible-role-security

Note: If you somehow find this gist, feel free to leave comments with tips, critics, whatever...