Linux › Section J · Network applications and services › Topic J.4
Network security and hardening
Linux runs a large share of the world's internet-facing servers, so a new machine is probed by automated attacks within minutes of going online. A few habits, applied consistently, defeat most of them: run little, block the rest, patch quickly, and confine whatever must run.
In this topic
- What attackers aim for
- Typical weaknesses
- Run as little as possible
- Patch promptly and automatically
- Firewalls and least privilege
- Mandatory access control: SELinux and AppArmor
- Worked example: hardening a new web server
- Sandboxing services with systemd
- Worked example: verifying a download with GPG
- Common mistakes to avoid
- Key takeaways
This topic is part of Wuanberri Pro. Checking your access…