Linux gurus: What are your post install security routines? [installing slackware] [expert friend]

Q: I remember, after for the first time three years ago, my friend expert guided me through the process of plugging a few holes. I remember clearly how to modify the hosts.allow and therefore another file where you could comment out FTP and Telnet services so that it would not run (I forget the filename).

What are some of the things you all do to leak to close after a new installation? Or do you just leave everything at default?


Escape The Friend Zone – Offical eBook
Re:Originally posted by: guy

Another thing one can do is edit startx with -nolisten tcp in the serverargs section.

This should be done by default, Ubuntu is based on Debian and Debian has been doing that by default for as long as I can remember.

Yes, I agree. The main reason I mentioned it, is in case someone using a distro that doesnt do that by default reads this.


Friends Into Lovers
Re:Another thing one can do is edit startx with -nolisten tcp in the serverargs section.

This should be done by default, Ubuntu is based on Debian and Debian has been doing that by default for as long as I can remember.


Secrets Of A Professional Installer.
Re:http://www.geocities.com/jtarin47/linux/Slackware/Securing_Slackware.html is a good basic guide to start with. Another thing one can do is edit startx with -nolisten tcp in the serverargs section. The guide I posted a link to and editing the default startx is usually a basic starting place for me after a fresh install. Then depending on the machines role I either leave it alone or take further steps to secure it.

Img Fmg Friendly residency programs and observerships
Re:AFAIK Ubuntu comes with no network services listening, /etc/inetd.conf or /etc/xinetd.d/* and /etc/xinetd.conf, I don't remember which Ubuntu defaults to installing.

Satellite Installer Professional
Re:/etc/inetd.conf is probably the place to comment out services you don't need. I generally just don't let inetd run.

In /etc/hosts.deny:
ALL:ALL

Don't forget to update your system.


Related posts

Leave a comment

0 Comments.

Leave a Reply


click to changeSecurity Code

[ Ctrl + Enter ]