Basic Security For Every Linux Server

Basic Security For Every Linux Server

Brodie Robertson

3 года назад

2,383 Просмотров

Ссылки и html тэги не поддерживаются


Комментарии:

@kommentator1157
@kommentator1157 - 18.01.2021 23:16

You can use "-m" with useradd to create a home directory for the user automatically.

Ответить
@DannyMexen9
@DannyMexen9 - 18.01.2021 23:21

Why did you pick Linode?

Ответить
@yasoomorimoto814
@yasoomorimoto814 - 18.01.2021 23:33

I'm actually setting up a server for the first time and this was useful, thank you

Ответить
@Xdavidel
@Xdavidel - 19.01.2021 00:16

Noooo where's the awesomewm ricing video???

Ответить
@danwilhelm7214
@danwilhelm7214 - 19.01.2021 01:38

I would recommend nftables instead of ip tables.

Ответить
@dhw9406
@dhw9406 - 19.01.2021 01:51

"...iptables could be a whole video on its own..."
Yes, please!

Ответить
@alexthelion335
@alexthelion335 - 19.01.2021 02:14

I rarely update my servers(like once or twice a year). Probably not a good thing :P

Ответить
@0x007A
@0x007A - 19.01.2021 02:54

Using certificate-based login is not only good for servers accessed via SSH but for notebooks / desktop computers too for local authentication.

Ответить
@shaytal100
@shaytal100 - 19.01.2021 03:03

I think arch linux is perfectly fine to run on a server if you know what you are doing.
If you do know what you are doing you will NOT auto update an arch system!
From the arch wiki System_maintenance:
Before upgrading, users are expected to visit the Arch Linux home page to check the latest news, or alternatively subscribe to the RSS feed or the arch-announce mailing list.
User interventions can be necessary when updating the system! So auto updating should be out of question if you run Arch, no matter if it is a server or a pc!

Ответить
@yasagarwal859
@yasagarwal859 - 19.01.2021 06:48

I am actually hosting a proxmox server to teach people linux and bring them to linux.

Ответить
@Calajese
@Calajese - 19.01.2021 08:20

"Keep your VPS nice and secure" Looks at old computer in the corner of the room, "Haha yes I do need to keep my VPS secure"

Ответить
@chu-kuanchang693
@chu-kuanchang693 - 19.01.2021 17:24

It is possible to block ssh port and only use vps services web interface to login to server. It is most useful when performing whole system update.

Ответить
@learningbird9940
@learningbird9940 - 19.01.2021 17:26

I vote for a dedicated video over iptables on that server.

Ответить
@tux7k
@tux7k - 19.01.2021 21:55

wait... hold up... bspwm? (I guess this was recorded before you switched)

Ответить
@pZq_
@pZq_ - 20.01.2021 00:07

Now useful content. Thx.

Ответить
@woouinluigh
@woouinluigh - 20.01.2021 14:22

you might want to disable 'ChallengeResponseAuthentication' as well on some other distro to completely disable password authentication.
I think I have encountered some cases where that is left on by default (I believe this is upstream default as well)

Ответить
@drumpf4all
@drumpf4all - 20.01.2021 14:53

There is no way to spoof public ip addresses. That's silly talk.

Ответить
@sasakanjuh7660
@sasakanjuh7660 - 06.02.2021 23:52

I would suggest using -m and -G "SECONDARY GROUP" while creating user, which will automatically add user home directory and add it to a provided secondary group (wheel), respectively..

Ответить