Security: Basic OS Security

From OnnoWiki
Jump to navigation Jump to search

Disable Services

  • Remote Desktop Disable
  • check active port
nmap -sT -O localhost
netstat -tulpn
netstat -ntlupa
  • check daemon
chkconfig --list | grep '3:on'
service serviceName stop
chkconfig serviceName off

Files Security

  • File Permission
chmod
  • File Owner
chown
  • File Encryption


  • Harddisk Partition
df -h   make sure separate partition
  • Find World Writeable files
find / -xdev -type d \( -perm -0002 -a ! -perm -1000 \) -print
  • Find Noowner files
find / -xdev \( -nouser -o -nogroup \) -print

File Transfer

  • Disable FTP

Sharing Files

  • Enable / Disable SMB

Memory