Securing Linux Opearting System – Bare minimum checklist

Posted by linuxaria on Jul 9, 2011 6:14 PM EDT
linux-news.org; By Linux-news.org 		Mail this story
Print this story

Please find below the bare minimum checklists for Linux Hardening Guide. ZEROCONF:

On by default. Used by avahi for local service discovery. Disable this service. Edit /etc/sysconfig/network. Add NOZEROCONF=yes . Then remove the avahi package and its dependencies

/etc/sysctl.conf settings :

Don’t reply to broadcasts. Prevents joining a smurf attack. net.ipv4.icmp_echo_ignore_broadcasts = 1 Enable protection for bad icmp error messages. net.ipv4.icmp_ignore_bogus_error_responses = 1

Full Story

  Nav
» Read more about: Story Type: Tutorial

« Return to the newswire homepage

Subject Topic Starter Replies Views Last Post
what is avahi good for? tuxchick 6 2,513 Jul 12, 2011 9:27 AM

You cannot post until you login.