Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5476

Re: Questions

Show all headers | View raw

Thx,
Why debian is not more harden by default ?
I try to set up openvas but it’s look like there more to do than a
apt, i will look deeper when i have the time.
Le mer. 28 nov. 2018 à 22:26, qmi <lista@miklos.info> a écrit :
>
> Hi
>
> On Fri, Nov 16, 2018 at 04:31:39PM +0100, Jérôme Bardot wrote:
> > Hello i try to harden my debian server.
> You are welcome to do so.
>
> > I want do understand all of this «warning».
> > If they are false positive maybe this part should be update because
> > it’s debian related ?
> On Debian by default the files and directories have 644 or 755 perms
> unless special cases (i.e. shadow has 640, /root has 740).
> See the relevant section of the Debian Policy at
> https://www.debian.org/doc/debian-policy/ch-files.html#permissions-and-owners.
> By default the Debian OS is not hardened. However, your mileage may
> vary, so you are welcome to harden your Debian OS if you are concerned
> about security or you simply would like to apply a more stringent security
> policy. In addition to making sure you apply the latest security updates from
> security.debian.org in your APT settings (i.e. /etc/apt/sources.list), you can
> harden the your OS by using one or the combination of the following methods:
>
> 1- Set up HIDS (OSSEC)
> 2- Install file/directory integrity checker (i.e. Tripwire)
> 3- Run remote vulnerability scans (i.e. Openvas, Nessus)
>
> See
> https://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html#s-intrusion-detect
> .
>
> Regards,
> --
> qmi | Debian GNU/Linux enthusiast
> WWW: www.miklos.info
> GPG: 3C4B 1364 A379 7366 7FED  260A 2208 F2CE 3FCE A0D3
>

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-11-16 16:40 +0100
  Re: Questions qmi <lista@miklos.info> - 2018-11-28 22:30 +0100
    Re: Debian hardening (was: Questions) Michiel Klaver <michiel@klaver.it> - 2018-11-29 10:10 +0100
      Re: Debian hardening (was: Questions) Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 11:40 +0100
    Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 12:20 +0100
      Re: Questions Paul Wise <pabs@debian.org> - 2018-12-04 02:50 +0100
        Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
          Re: Questions Paul Wise <pabs@debian.org> - 2018-12-05 05:30 +0100
      Re: Questions Jonathan Hutchins <hutchins@tarcanfel.org> - 2018-12-04 20:00 +0100
        Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-04 20:40 +0100
          Re: Questions SZÉPE Viktor <viktor@szepe.net> - 2018-12-04 21:00 +0100
          Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
            Re: Questions "Phil." <phil@reseau-libre.net> - 2018-12-05 07:30 +0100

csiph-web