john pfeiffer
  • Home
  • Categories
  • Tags
  • Archives

Ubuntu base image hardening

Manual -> SCSI 10GB -> Yes new partition table -> pri/log 10.7GB FREE SPACE -> new partition (PRIMARY) -> / ext4 (bootable) -> no swap

UTC time + openssh server (default packages)

userdel backup, games, gnats, irc, list, lp, mail, news, proxy, uucp, www-data

/etc/security/limits.conf * soft nofile 65000 * hard nofile 65000 root soft nofile 65000 root hard nofile 65000 /etc/pam.d/common-session session required pam_limits.so /etc/sysctl.conf net.ipv4.tcp_timestamps=0 net.ipv6.conf.all.disable_ipv6=1 /etc/ssh/sshd_config PermitRootLogin no # KeyRegenerationInterval 3600 # ServerKeyBits 768

apt-get install python-software-properties (easier PPA installation)

apt-get update

UPDATE TO A NEW DISTRIBUTION RELEASE

apt-get update ? apt-get install update-manager-core apt-get upgrade do-release-upgrade

INSTALL JAVA JRE

apt-get install openjdk-7-jre-headless

INSTALL JAVA JDK? (JAVAC)

INSTALL TOMCAT?


  • « Perl readchar stdin password ascii string as chars
  • ide on android javac dex terminalide »

Published

Apr 27, 2012

Category

linux

~105 words

Tags

  • base 1
  • hardening 1
  • image 8
  • installs 41
  • ubuntu 30