what linux secirity issues that should be taken care of?

shibu

SHIBU wrote:

> what linux secirity issues that should be taken care of?

1. use proper passwords
2. hide behind a firewall or use iptables to create one
3. check for patches often
4. don't run as root if you don't need to
5. think before you act
6. get a root kit detector and run it every day (google chrootkit)
7. turn off every service you don't need
8. don't use telnet, use ssh
9. don't use ftp, use scp, sftp or rsync over ssh

--
Ruurd
..o.
...o
ooo

"R.F. Pels" wrote:
>
> SHIBU wrote:
>
> > what linux secirity issues that should be taken care of?
>
> 1. use proper passwords
> 2. hide behind a firewall or use iptables to create one
> 3. check for patches often
> 4. don't run as root if you don't need to
> 5. think before you act
> 6. get a root kit detector and run it every day (google chrootkit)
> 7. turn off every service you don't need
> 8. don't use telnet, use ssh
> 9. don't use ftp, use scp, sftp or rsync over ssh

10. Turn off and uninstall all daemons/services that you
don't need.

Erik
--
+-----------------------------------------------------------+
Erik de Castro Lopo [email]nospam@mega-nerd.com[/email] (Yes it's valid)
+-----------------------------------------------------------+
I'd rather not work with people who aren't careful. It's darwinism in
software development.
Linus Torvalds on the linux-kernel list

Erik de Castro Lopo <nospam@mega-nerd.com> wrote in message news:<40746F0F.7D9BF1CE@mega-nerd.com>...
> "R.F. Pels" wrote:
> >
> > SHIBU wrote:
> >
> > > what linux secirity issues that should be taken care of?
> >
> > 1. use proper passwords
> > 2. hide behind a firewall or use iptables to create one
> > 3. check for patches often
> > 4. don't run as root if you don't need to
> > 5. think before you act
> > 6. get a root kit detector and run it every day (google chrootkit)
> > 7. turn off every service you don't need
> > 8. don't use telnet, use ssh
> > 9. don't use ftp, use scp, sftp or rsync over ssh
>
> 10. Turn off and uninstall all daemons/services that you
> don't need.

Thats no.7 ;)

10. Familiarise yourself with security in general. Read. Look at sites like
[url]http://www.linuxsecurity.com/,[/url] for examle.