System SEcurity

Question 1

Best practices for Kernel Security

Answer 1

Apply kernel security patches
implement kernel module signing
update /etc/syscrl.conf with secure configurations when possible
disable booting from external drives
set a grub bootloader password

Question 2

Best practices for app security

Answer 2

Update software apps regulary
remove unnecessary pacakges
disable unnecessary services (systemctl disable)
implement security best practices for common system services (apache, nginx, php etc)
setup dedicated users for services

Question 3

File System Security Best practices

Answer 3

Use separate partitions for suer files and system files
Use separate partitions for services
Utilize relevant mount options for security
Implement SELinux for apparmor
manage bash history
impelment instrusion detection with AIDE

Question 4

Authentication and Authorization Security

Answer 4

Disable root login
Implement SSH key pairs
Enforce strong passwords
Enforce password expiration
Limit user permissions