Created
November 22, 2009 18:55
-
-
Save cvonkleist/240660 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
lockdown: | |
- change passwords for all shell accounts and come up with policy | |
- remove ssh authorized_keys | |
- change mysql root password | |
- grep for any | |
- restart mysql with query logging -> mysql --log=/var/log/mysql | |
- change mysql passwords | |
- | |
- establish quotas and limits for memory, disk, and cpu usage | |
- run `netstat -nl` to see what services are listening | |
- make sure mysql accounts only have access to the databases they need | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment