Language Selection

English French German Italian Portuguese Spanish

Building Systems Secure From The Start

Filed under
Software

Default operating system installs on a server are almost always wrong. Unfortunate, but true. In an attempt to build a generic system that appeals to as many situations as possible, the default install is often overloaded with software that is not necessary, and a filesystem layout that would allow one rogue daemon to fill up the entire drive. This is wrong, but easily remedied. A little extra care during the installation and initial setup of the server will result in a system that is smaller, cleaner, easier to maintain, and more secure than what ships on a default install.

FIlesystem Layout

I’ve mentioned before how to setup a filesystem to allow for maximum control and flexibility, so I won’t dive into the details here. Suffice to say that the basic idea is to put as much as possible into a volume manager like LVM, and then give each partition only as much as it needs.

rest here




More in Tux Machines

today's leftovers

Ninja Blocks prepares to begin shipping, announces major Ubuntu IoT deal

Ninja Blocks has begun shipping the Ninja Sphere and announced it has signed up as a key partner for Canonical’s Ubuntu Core embedded device operating system, as it opens its first office in the US. The startup launched in 2012, when it was selected to participate the Startmate accelerator program, and also smashed a Kickstarter campaign for its first product, which was also called Ninja Blocks. Read more

Netrunner 14.1 – Main Edition (Frontier)

The “14.1” indicates an updated and polished release of Netrunner 14 LTS on the same underlying base. Since 14.1 is using the same base “trusty” like Netrunner 14, there is no need for users of 14 to migrate: Simply updating from the shared backports ppa of the Frontier release cycle should give the same result, while keeping customizations in place. Read more

Wayland 1.6.1 & Weston 1.6.1 Released

Bryce Harrington, the former Canonical employee part of Ubuntu's X/Mir team turned Samsung open-source employee, has issued the first maintenance update for Wayland 1.6. Wayland 1.6.1 and the reference compositor Weston 1.6.1 were released on Friday night by Harrington. The Wayland 1.6.1 stable update has just over a dozen changes and they're mostly tiny bug-fixes/corrections but there is also improved handling for some error situations between servers and clients. The brief Wayland 1.6.1 release announcement can be read on the Wayland mailing list. Read more