Securing Linux

by | Jan 31, 2017 | Uncategorized | 0 comments

Securing Linux
setenforce 1
getenforce

Configuring FirewallD 

firewall-cmd --get-active-zones
firewall-cmd --zone=FedoraServer --list-all
firewall-cmd --zone=FedoraServer --permanent --add-service=https
firewall-cmd --zone=FedoraServer --permanent --add-service=http
firewall-cmd --zone=FedoraServer --permanent --add-service=smtp
firewall-cmd --zone=FedoraServer --permanent --add-service=imap
firewall-cmd --zone=FedoraServer --permanent --remove-service=imap
systemctl reload firewalld
firewall-cmd --zone=FedoraServer --list-all

Check the specific firewall rules:
iptables -nvL

Securing SSHD (server side)
vi /etc/ssh/sshd_config
uncomment PermitRootLogin yes
change to PermitRootLogin no