| Step |
√ |
To Do |
| |
|
Preparation
|
| 1 |
|
Install the server image |
| 2 |
|
Add additional repositories |
| |
|
System Update
|
| 3 |
|
Update with the latest updates |
| 4 |
|
Configure automatic updates |
| 5 |
|
Configure network time protocol (NTP) |
| |
|
Process Hardening
|
| 6 |
|
Restrict core dumps |
| 7 |
|
Enable randomized virtual memory region placement |
| |
|
OS Hardening
|
| 8 |
|
Remove legacy services (e.g., telnetserver; rsh, rlogin, rcp; ypserv, ypbind; tftp, tftp-server; talk, talkserver) |
| 9 |
|
Disable or remove server services that are not going to be utilized (e.g. FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.) |
| |
|
Network Security and Firewall Configuration
|
| 10 |
|
Firewall Configuration |
| |
|
Remote Administration Via SSH
|
| 11 |
|
Set SSH protocol to 2 |
| 12 |
|
Disable SSH root login |
| 13 |
|
Set SSH permitemptypasswords to no |
| |
|
System Integrity and Intrusion Detection
|
| 14 |
|
Install and configure Fail2Ban |
| 15 |
|
Install and configure AIDE |
| |
|
Anti-Virus Considerations
|
| 16 |
|
Install and enable anti-virus software |
| 17 |
|
Configure daily scan |