Linux Server Build Checklist

From Federal Burro of Information
Revision as of 18:35, 10 June 2013 by David (talk | contribs) (Created page with " * THe purpose of the ser ver is clear * Who will use the server / via what ports? What services? * What software will be installed * minimal software stack is installed. unne...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search
  • THe purpose of the ser ver is clear
  • Who will use the server / via what ports? What services?
  • What software will be installed
  • minimal software stack is installed. unneeded stuff removed ( bluetooth, gnome )
  • Time services ( Ntp | PTP )
  • Logging services
  • ssh updated, and locked down ( no remore root, no version 1 protocol , keys only )
  • open ssl updated
  • kernel updated
  • Password policy updated.
  • update system working
  • users defined and locked down.
  • service list defined and locked done
  • selinux setup as needed
  • iptables / firewall.
  • server is monitored properly
  • Hardened ( http://www.nsa.gov/ia/_files/factsheets/rhel5-pamphlet-i731.pdf )
  • check list: ( http://security.utexas.edu/admin/redhat-linux.html )