Server
Server Checklist
| Step | √ | To Do |
Preparation |
||
| 1 | Install server image | |
| 2 | Change default shell | |
| 3 | Disable AppArmor and APPort | |
System Update |
||
| 4 | Update with the latest updates | |
| 5 | Configure automatic updates | |
| 6 | Configure network time protocol (NTP) | |
Process Hardening |
||
| 7 | Restrict core dumps | |
| 8 | Enable randomized virtual memory region placement | |
OS Hardening |
||
| 9 | Remove legacy services (e.g., telnetserver, rsh, rlogin, rcp, ypserv, ypbind, tftp, tftp-server, talk, talkserver) | |
| 10 | Disable or remove server services that are not going to be utilized (e.g., FTP, DNS, LDAP, SMB, DHCP, NFS, SNMP, etc.) | |
Network Security and Firewall Configuration |
||
| 11 | Firewall configuration | |
Remote Administration Via SSH |
||
| 12 | Set SSH protocol to 2 | |
| 13 | Disable SSH root login | |
| 14 | Set SSH permitemptypasswords to no | |
System Integrity and Intrusion Detection |
||
| 14 | Install and configure Fail2Ban | |
| 15 | Install and configure AIDE | |
Anti-Virus Considerations |
||
| 16 | Install and enable anti-virus software | |
| 17 | Configure daily scan |