added table of content

- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray
2018-10-07 09:32:42 +02:00
parent 90be52267c
commit 678fb1829e

View File

@@ -11,6 +11,8 @@
<p align="center">"<i>Did you know all your doors were locked?</i>" - Riddick (The Chronicles of Riddick)</p>
<br>
<p align="center">
<a href="https://github.com/trimstray/the-practical-linux-hardening-guide/tree/master">
<img src="https://img.shields.io/badge/Branch-master-green.svg?longCache=true"
@@ -32,6 +34,79 @@
<br>
:collision: Work in progress, just a moment... First, I update a [Table Of Content](#table-of-content).
****
Work in progress, just a moment...
## Table Of Content
- [Checklist - document the host information](#checklist-document-the-host-information)
- [Pre install tasks](#pre-install-tasks)
* [Physical system security](#physical-system-security)
+ [BIOS protection](#bios-protection)
* [Partitioning scheme](#partitioning-scheme)
* [Hard disk encryption](#hard-disk-encryption)
* [Bootloader configuration](#bootloader-configuration)
- [Post install tasks](#post-install-tasks)
* [Keep system updated](#keep-system-updated)
* [Package management](#package-management)
+ [Remove packages with known issues](#remove-packages-with-known-issues)
* [Netfilter ruleset](#netfilter-ruleset)
* [TCP wrapper](#tcp-wrapper)
* [Users and groups](#users-and-groups)
+ [Limit su access](#limit-su-access)
+ [Disable root account](#disable-root-account)
+ [Logins to system console](#logins-to-system-console)
+ [Disable shell accounts](#disable-shell-accounts)
+ [Strong password policy](#strong-password-policy)
+ [Password aging](#password-aging)
+ [Previous passwords](#previous-passwords)
+ [Login failures](#login-failures)
* [System path permissions](#system-path-permissions)
+ [World writable files](#world-writable-files)
* [Disk partitions](#disk-partitions)
+ [Secure /tmp and /var/tmp](#secure-tmp-and-var-tmp)
+ [Disk quotas](#disk-quotas)
* [PAM module](#pam-module)
* [Limits](#limits)
* [Shadow passwords](#shadow-passwords)
* [Linux kernel hardening](#linux-kernel-hardening)
* [Kernel parameters](#kernel-parameters)
+ [Improve network security](#improve-network-security)
+ [Improve system security](#improve-system-security)
* [Remove unused modules](#remove-unused-modules)
* [Secure shared memory](#secure-shared-memory)
* [IRQ balance](#irq-balance)
* [Disable compilers](#disable-compilers)
* [Email notifications](#email-notifications)
* [Backups](#backups)
- [Tools](#tools)
* [Logging and Auditing](#logging-and-auditing)
+ [Auditd](#auditd)
+ [Tiger](#tiger)
+ [Aide](#aide)
+ [Logwatch](#logwatch)
* [Other](#other)
+ [Fail2ban](#fail2ban)
+ [PSAD](#psad)
+ [SELinux](#selinux)
+ [Centralized authentication service](#centralized-authentication-service)
* [Testing tools](#testing-tools)
+ [Lynis](#lynis)
+ [Chrootkit](#chrootkit)
- [Hardening Services](#hardening-services)
* [Disable all unnecessary](#disable-all-unnecessary)
* [System services](#system-services)
+ [OpenSSH](#openssh)
+ [NTP](#ntp)
+ [Cron](#cron)
+ [Anacron](#anacron)
* [DNS services](#dns-services)
+ [Bind9](#bind9)
* [Mail services](#mail-services)
+ [Postfix](#postfix)
* [Web services](#web-services)
+ [Nginx](#nginx)
+ [Apache](#apache)
- [Testing configuration](#testing-configuration)
- [External resources](#external-resources)