How to secure a Ubuntu Server (part 1)
How to secure a Ubuntu Server (part 1)
Ubuntu Security Documentation
https://ubuntu.com/server/docs/securi...
0:00 - Intro
0:27 - Creating new local accounts, adding new profile photographs, Removing Users
4:20 - Securing their home folders
Remove the world readable-permissions using the following syntax:
sudo chmod 0750 /home/username
6:21 - A much more efficient approach to the matter would be to modify the adduser global default permissions when creating user home folders. Simply edit the file /etc/adduser.conf and modify the DIR_MODE variable to something appropriate, so that all new home directories will receive the correct permissions.
sudo nano /etc/adduser.conf
DIR_MODE=0750
8:23 - Firewall Configuration and GUI firewall - Adding new programs to favorites
sudo apt install gufw
11:00 - Creating new password policies
sudo nano /etc/pam.d/common-password
If you would like to adjust the minimum length to 8 characters, change the appropriate variable to min=8. The modification is outlined below.
password [success=1 default=ignore] pam_unix.so obscure sha512 minlen=8
12:20 - Password Expiration
When creating user accounts, you should make it a policy to have a minimum and maximum password age forcing users to change their passwords when they expire.
To easily view the current status of a user account, use the following syntax:
sudo chage -l username
sudo chage -E 01/01/2021 -m 5 -M 90 -I 30 -W 14 username
This is an example of how you can manually change the explicit expiration date (-E) to 01/31/2015, minimum password age (-m) of 5 days, maximum password age (-M) of 90 days, inactivity period (-I) of 30 days after password expiration, and a warning time period (-W) of 14 days before password expiration.
16:57 - Adding new groups and Adding a user to a group (SSH group)
sudo groupadd -g 10000 groupname
sudo adduser username groupname
18:00 - Install openssh-server
sudo apt-get install openssh-server
Select "Install the package maintainer version"
19:00 - Configuring the SSH file to accept only specific users
sudo nano /etc/ssh/sshd_config
Add the following:
AllowGroups sshlogin
ctrl+X and the y and enter to save file
Restart server
sudo systemctl restart sshd.service
20:15 - App Armor server install and configuration
sudo apt install apparmor-profiles
View Status
apparmor_status is used to view the current status of AppArmor profiles.
sudo apparmor_status
Install Armor utilities
sudo apt-get install apparmor-utils
New Profiles
sudo aa-genprof executable
25:00 - Firewall Logging
sudo ufw logging on
view log in /var/log/ufw.log
27:40 - Console security
To disable the reboot action taken by pressing the Ctrl+Alt+Delete key combination, run the following two commands:
sudo systemctl mask ctrl-alt-del.target
sudo systemctl daemon-reload
En esta página del sitio puede ver el video en línea How to secure a Ubuntu Server (part 1) de Duración hora minuto segunda en buena calidad , que subió el usuario Telifox 23 noviembre 2021, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 313 veces y le gustó 4 a los espectadores. Disfruta viendo!
