开源软件名称（OpenSource Name）：

开源软件地址(OpenSource Url)：

开源编程语言(OpenSource Language)：

开源软件介绍(OpenSource Introduction)：

Table of Contents

• Introduction
  • Status
  • Todo
  • Prologue
  • Levels of priority
  • OpenSCAP
• Partitioning
  • Separate partitions
  • Restrict mount options
  • Polyinstantiated directories
  • Shared memory
  • Encrypt partitions
  • Summary checklist
• Physical Access
  • Password for Single User Mode
  • Summary checklist
• Bootloader
  • Protect bootloader config files
  • Summary checklist
• Linux Kernel
  • Kernel logs
  • Kernel pointers
  • ExecShield
  • Memory protection
  • Summary checklist
• Logging
  • Syslog
• Users and Groups
  • Passwords
  • Logon Access
  • Summary checklist
• Filesystem
  • Hardlinks & Symlinks
  • Dynamic Mounting and Unmounting
  • Summary checklist
• Permissions
• SELinux & Auditd
  • SELinux Enforcing
  • Summary checklist
• System Updates
• Network
  • TCP/SYN
  • Routing
  • ICMP Protocol
  • Broadcast
  • Summary checklist
• Services
• Tools

Introduction

In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. The main goal of systems hardening is to reduce security risk by eliminating potential attack vectors and condensing the system’s attack surface.

This list contains the most important hardening rules for GNU/Linux systems.

Status

Still work in progress...