thiagoeh/SSH-basic-hardening.md

Last active April 20, 2018 19:41

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/thiagoeh/9f2241c5a36a349b75796b3692964d39.js"></script>
Save thiagoeh/9f2241c5a36a349b75796b3692964d39 to your computer and use it in GitHub Desktop.

Download ZIP

Basic hardening of SSH for a (Debian based) Linux instance

Raw

SSH-basic-hardening.md

Automation script draft

ADMIN_USER=thiago

usermod -a $ADMIN_USER -G sudo

Locking the `root`account for password authentication

This should be the last step, after being sure that you can login with your admin account AND sucessfully switch to root using sudo -s

sudo passwd -l root

After this, the only way to become root will be through sudo (except for some privilege escalation vulnerability, but it's another entire subject to deal with).

thiagoeh/SSH-basic-hardening.md

Select an option

No results found

Select an option

No results found

Automation script draft

Locking the `root`account for password authentication

thiagoeh/SSH-basic-hardening.md

Automation script draft

Locking the rootaccount for password authentication

Locking the `root`account for password authentication