Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5473

Re: Questions

Show all headers | View raw

Hi

On Fri, Nov 16, 2018 at 04:31:39PM +0100, Jérôme Bardot wrote:
> Hello i try to harden my debian server.
You are welcome to do so. 

> I want do understand all of this «warning».
> If they are false positive maybe this part should be update because
> it’s debian related ?
On Debian by default the files and directories have 644 or 755 perms 
unless special cases (i.e. shadow has 640, /root has 740). 
See the relevant section of the Debian Policy at 
https://www.debian.org/doc/debian-policy/ch-files.html#permissions-and-owners. 
By default the Debian OS is not hardened. However, your mileage may
vary, so you are welcome to harden your Debian OS if you are concerned
about security or you simply would like to apply a more stringent security
policy. In addition to making sure you apply the latest security updates from 
security.debian.org in your APT settings (i.e. /etc/apt/sources.list), you can 
harden the your OS by using one or the combination of the following methods:

1- Set up HIDS (OSSEC)
2- Install file/directory integrity checker (i.e. Tripwire)
3- Run remote vulnerability scans (i.e. Openvas, Nessus)

See 
https://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html#s-intrusion-detect
. 

Regards,
-- 
qmi | Debian GNU/Linux enthusiast
WWW: www.miklos.info
GPG: 3C4B 1364 A379 7366 7FED  260A 2208 F2CE 3FCE A0D3

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-11-16 16:40 +0100
  Re: Questions qmi <lista@miklos.info> - 2018-11-28 22:30 +0100
    Re: Debian hardening (was: Questions) Michiel Klaver <michiel@klaver.it> - 2018-11-29 10:10 +0100
      Re: Debian hardening (was: Questions) Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 11:40 +0100
    Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 12:20 +0100
      Re: Questions Paul Wise <pabs@debian.org> - 2018-12-04 02:50 +0100
        Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
          Re: Questions Paul Wise <pabs@debian.org> - 2018-12-05 05:30 +0100
      Re: Questions Jonathan Hutchins <hutchins@tarcanfel.org> - 2018-12-04 20:00 +0100
        Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-04 20:40 +0100
          Re: Questions SZÉPE Viktor <viktor@szepe.net> - 2018-12-04 21:00 +0100
          Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
            Re: Questions "Phil." <phil@reseau-libre.net> - 2018-12-05 07:30 +0100

csiph-web