Innodata Server Hardening Document: Difference between revisions
Created page with "<center>'''Innodata Server Hardening'''</center> == '''Contents''' == [#__RefHeading__900_1672326576 Block root access:1] [#__RefHeading__902_1672326576 Apply ssh Banner1] ..." |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
[[category:INNODATA]] | |||
='''Innodata Server Hardening'''= | |||
= Block root access: = | |||
Root user should not be allowed to access shell,steps to do it below | Root user should not be allowed to access shell,steps to do it below | ||
[[Image:]] | [[Image:hard-1.png]] | ||
| Line 18: | Line 14: | ||
Include company propriety Banner in ssh config file | Include company propriety Banner in ssh config file | ||
[[Image:]] | [[Image:hard-2.png]] | ||
Banner will be displayed in blow fashion: | Banner will be displayed in blow fashion: | ||
[[Image:]] | [[Image:hard-3.png]] | ||
| Line 29: | Line 25: | ||
Ssh ciphers should only entertain the request if ciphers are minimum aes256 bit. | Ssh ciphers should only entertain the request if ciphers are minimum aes256 bit. | ||
[[Image:]] | [[Image:hard-4.png]] | ||
= Account lockout policy = | = Account lockout policy = | ||
[[Image:]] | [[Image:hard-5.png]] | ||
Latest revision as of 14:32, 31 December 2012
Innodata Server Hardening[edit]
Block root access:[edit]
Root user should not be allowed to access shell,steps to do it below
Apply ssh Banner[edit]
Include company propriety Banner in ssh config file
Banner will be displayed in blow fashion:
ssh channel encryption[edit]
Ssh ciphers should only entertain the request if ciphers are minimum aes256 bit.
Account lockout policy[edit]
