/cyb/ - linux hardening

Name	8oz⚖,2☠5^JE♁⛦sIDF9⚛7vCi\|[S>*RagW:n1{\'⚿p`(uY_M6lk-$A?☩@3 ♞Ty;~ON]♤4dmh}t⛊PUx#GjVfr&
Email
Subject	Spoiler Image
Comment formatting options
File
Password	(For file deletion.)

File: 1494837366528.jpg (158.87 KB, 1440x810, Ghost_hacker.jpg)

linux hardening oftheuniverse 2017/05/15 (Mon) 08:36:06 No.309

Discussion about linux hardening.

Creating the perfect Fort Knox distro.

useful links:
https://github.com/lfit/itpol/blob/master/linux-workstation-security.md
https://github.com/hardenedlinux

Batou 2017/05/15 (Mon) 08:44:17 No.310

>>309
A word of advice. I happened to destroy my laptop following one of the cheats. Apparently something must have lightened up the glue.

Lt. Col. Daisuke Aramaki 2017/05/15 (Mon) 15:10:44 No.313

What would be the most secure off the shelf easy install distro?
>inb4 open BSD

Puppet Master 2017/05/15 (Mon) 18:07:47 No.315

>>313
I know it's a GNU/Linux thread, but OpenBSD really is easy.

Incognito 2017/05/15 (Mon) 19:34:07 No.316

File: 1494876847458.png (2.28 MB, 3333x4374, hopingnobodyhacksyou-big.png)

>helpful resources
https://wiki.archlinux.org/index.php/Security
https://wiki.centos.org/HowTos/OS_Protection
https://wiki.debian.org/Hardening
https://wiki.gentoo.org/wiki/Hardened_Gentoo
https://docs.fedoraproject.org/en-US/Fedora/17/html/Security_Guide/chap-Security_Guide-Basic_Hardening.html
https://help.ubuntu.com/community/Security

Crash Override 2017/05/15 (Mon) 19:43:22 No.317

>>315
From what I hear about OpenBSD, I love it. I've tried to install it by flash drive before, but what happens is that I

dd

the image to the drive, I try to install, it asks me for the file sets' location – and I got nothing. I know where to download the sets from, but how do I put them on the flash drive so I can use them? Or is the image supposed to contain them?

Azuma 2017/05/15 (Mon) 21:21:14 No.318

>>317
Make sure to use install61.fs and not miniroot61.fs
If anything, if you don't find the file sets for whatever reason, tell it to fetch them via HTTP (it's actually HTTPS)
install61.fs comes with the file sets

Gaff 2017/05/15 (Mon) 21:30:25 No.319

>>318
And when the installer asks me where the sets are, what do I respond with?

Masami Eiri 2017/05/16 (Tue) 02:42:07 No.325

>>319
The installer is menu driven. It gives you the options. If you just want to tool around in BSD and get a Linux desktop experience, try GhostBSD. If you want to run OpenBSD, read the manual like it's your job.

Unnamed 2017/05/16 (Tue) 21:21:17 No.335

>>319
If you have them on the flash drive, say disk. If over the network, say http
Doesn't it tell you the options? I don't do installs often.
>>325
>read the manual like it's your job
That's not even necessary, the FAQ is very clear.
>get a Linux desktop experience
cwm and lumina aren't that hard

Incognito 2017/05/17 (Wed) 18:24:06 No.341

>>319
The default option will be in [square brackets] just before the prompt. Just press enter to use it.

Unknown 2017/05/20 (Sat) 10:31:25 No.364

https://stribika.github.io/2015/01/04/secure-secure-shell.html

read this if you're running a Gahnoo+Linux server and use SSH

The Plague 2017/05/21 (Sun) 16:47:30 No.384

>>313
I know there's a lot of hate for Red Hat here, but fedora has pretty good security out of the box as it has selinux enabled and firewalld.

Paz 2017/05/29 (Mon) 02:52:52 No.454

>grsec unofficial 4.9.X LTS
https://github.com/minipli/linux-unofficial_grsec/releases
>Stay up to date with new kernel hardening features upstream
http://www.openwall.com/lists/kernel-hardening/
>trying to get grsec features in ( needs help look at issues)
https://github.com/thestinger/linux-hardened