The first time you sign into developerWorks, a profile is created for you. Select information in your profile (name, country/region, and company) is displayed to the public and will accompany any content you post. You may update your IBM account at any time.

All information submitted is secure.

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

All information submitted is secure.

My developerWorks:

My notifications:

Sign out

Select a language:

Hardening the Linux server

An introduction to GNU/Linux server security

Jeffrey Orloff, Director of IT/Security, SafeWave, LLC

Jeffrey Orloff serves as the Director of IT and Security for SafeWave, LLC. He also works as the technology coordinator for the School District of Palm Beach County's Department of Alternative Education/DJJ.

Summary: Servers—whether used for testing or production—are primary targets for attackers. By taking the proper steps, you can turn a vulnerable box into a hardened server and help thwart outside attackers. Learn how to secure SSH sessions, configure firewall rules, and set up intrusion detection to alert you to any possible attacks on your GNU/Linux® server. Once you've gained a solid foundation in the basics of securing your server, you can build on this knowledge to further harden your systems.

Date: 17 Dec 2008
Level: Intermediate
PDF: A4 and Letter (333 KB | 16 pages)Get Adobe® Reader®

Activity: 56835 views
Comments:

Resources

Learn

Also by Jeffrey Orloff, "Hardening the Linux desktop" (developerWorks, November 2008) is a step-by-step guide to securing a GNU/Linux desktop computer.
Scott Culp's 10 Immutable Laws of Security boils down the important facts of security for users, and his follow-on article, 10 Immutable Laws of Security Administration gives similar guidance for administrators.
In the developerWorks Linux zone, find more resources for Linux developers (including developers who are new to Linux), and scan our most popular articles and tutorials.
See all Linux tips and Linux tutorials on developerWorks.
Stay current with developerWorks technical events and Webcasts.

Get products and technologies

Download Ubuntu Server Edition to follow along with the lessons in this tutorial.
Download Sun VirtualBox to create a virtual machine so that you can practice with the lessons in this tutorial.
With IBM trial software, available for download directly from developerWorks, build your next development project on Linux.

Discuss