mirror of
https://github.com/trimstray/the-practical-linux-hardening-guide.git
synced 2025-12-06 17:22:51 +01:00
added new entries to table of content
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
26
README.md
26
README.md
@@ -48,6 +48,10 @@
|
|||||||
* [Hard disk encryption](#hard-disk-encryption)
|
* [Hard disk encryption](#hard-disk-encryption)
|
||||||
* [Bootloader configuration](#bootloader-configuration)
|
* [Bootloader configuration](#bootloader-configuration)
|
||||||
- [Post install tasks](#post-install-tasks)
|
- [Post install tasks](#post-install-tasks)
|
||||||
|
* [Disk partitions](#disk-partitions)
|
||||||
|
+ [Lock the boot directory](#lock-the-boot-directory)
|
||||||
|
+ [Secure /tmp and /var/tmp](#secure-tmp-and-var-tmp)
|
||||||
|
+ [Disk quotas](#disk-quotas)
|
||||||
* [Keep system updated](#keep-system-updated)
|
* [Keep system updated](#keep-system-updated)
|
||||||
* [Package management](#package-management)
|
* [Package management](#package-management)
|
||||||
+ [Remove packages with known issues](#remove-packages-with-known-issues)
|
+ [Remove packages with known issues](#remove-packages-with-known-issues)
|
||||||
@@ -64,9 +68,6 @@
|
|||||||
+ [Login failures](#login-failures)
|
+ [Login failures](#login-failures)
|
||||||
* [System path permissions](#system-path-permissions)
|
* [System path permissions](#system-path-permissions)
|
||||||
+ [World writable files](#world-writable-files)
|
+ [World writable files](#world-writable-files)
|
||||||
* [Disk partitions](#disk-partitions)
|
|
||||||
+ [Secure /tmp and /var/tmp](#secure-tmp-and-var-tmp)
|
|
||||||
+ [Disk quotas](#disk-quotas)
|
|
||||||
* [PAM module](#pam-module)
|
* [PAM module](#pam-module)
|
||||||
* [Limits](#limits)
|
* [Limits](#limits)
|
||||||
* [Shadow passwords](#shadow-passwords)
|
* [Shadow passwords](#shadow-passwords)
|
||||||
@@ -80,6 +81,8 @@
|
|||||||
* [Disable compilers](#disable-compilers)
|
* [Disable compilers](#disable-compilers)
|
||||||
* [Email notifications](#email-notifications)
|
* [Email notifications](#email-notifications)
|
||||||
* [Backups](#backups)
|
* [Backups](#backups)
|
||||||
|
* [External devices](#external-devices)
|
||||||
|
+ [Disable USB usage](disable-usb-usage)
|
||||||
- [Tools](#tools)
|
- [Tools](#tools)
|
||||||
* [Logging and Auditing](#logging-and-auditing)
|
* [Logging and Auditing](#logging-and-auditing)
|
||||||
+ [Auditd](#auditd)
|
+ [Auditd](#auditd)
|
||||||
@@ -90,6 +93,7 @@
|
|||||||
+ [Fail2ban](#fail2ban)
|
+ [Fail2ban](#fail2ban)
|
||||||
+ [PSAD](#psad)
|
+ [PSAD](#psad)
|
||||||
+ [SELinux](#selinux)
|
+ [SELinux](#selinux)
|
||||||
|
+ [Entropy daemon](#entropy-daemon)
|
||||||
+ [Centralized authentication service](#centralized-authentication-service)
|
+ [Centralized authentication service](#centralized-authentication-service)
|
||||||
* [Testing tools](#testing-tools)
|
* [Testing tools](#testing-tools)
|
||||||
+ [Lynis](#lynis)
|
+ [Lynis](#lynis)
|
||||||
@@ -101,6 +105,8 @@
|
|||||||
+ [NTP](#ntp)
|
+ [NTP](#ntp)
|
||||||
+ [Cron](#cron)
|
+ [Cron](#cron)
|
||||||
+ [Anacron](#anacron)
|
+ [Anacron](#anacron)
|
||||||
|
+ [GnuPG 2](#gnupg2)
|
||||||
|
+ [Unattended key generation](#unattended-key-generation)
|
||||||
* [DNS services](#dns-services)
|
* [DNS services](#dns-services)
|
||||||
+ [Bind9](#bind9)
|
+ [Bind9](#bind9)
|
||||||
* [Mail services](#mail-services)
|
* [Mail services](#mail-services)
|
||||||
@@ -108,5 +114,19 @@
|
|||||||
* [Web services](#web-services)
|
* [Web services](#web-services)
|
||||||
+ [Nginx](#nginx)
|
+ [Nginx](#nginx)
|
||||||
+ [Apache](#apache)
|
+ [Apache](#apache)
|
||||||
|
+ [Securing and tuning HTTP/HTTPS protocols](#securing-and-tuning-http-https-protocols)
|
||||||
|
- [Use HTTPS](#use-https)
|
||||||
|
- [Enable HTTP2](#enable-http2)
|
||||||
|
- [Separate domains](#separate-domains)
|
||||||
|
- [Redirect all unencrypted traffic to HTTPS](#redirect-all-unencrypted-traffic-to-https)
|
||||||
|
- [Enable HTTP Strict Transport Security](#enable-http-strict-transport-security)
|
||||||
|
- [Security related headers](#security-related-headers)
|
||||||
|
* [Databases](#databases)
|
||||||
|
+ [PostgreSQL](#postgresql)
|
||||||
|
+ [MySQL](#mysql)
|
||||||
|
+ [Redis](#redis)
|
||||||
|
* [Queues](#queues)
|
||||||
|
+ [AMQP](#amqp)
|
||||||
|
- [Deployment](#deployment)
|
||||||
- [Testing configuration](#testing-configuration)
|
- [Testing configuration](#testing-configuration)
|
||||||
- [External resources](#external-resources)
|
- [External resources](#external-resources)
|
||||||
|
|||||||
Reference in New Issue
Block a user