March 2012 Meeting Details
The meeting of the “Indian Libre User Group” was successfully held on March 25th 2012.
Date: 25-03-2012
Time: 2:00pm – 5.30pm
Venue: Internet Club, IInd Floor, AMI Trust Building,
Broadway Enclave, Broadway, Ernakulam
2.30pm – 2.45pm
Customary Self Introduction.
People shared their experience with Free Software
2.45pm – 4.15pm – Session by G. Venkit Subramanian
Server Hardening is the process of enhancing server security through a variety of means resulting in a much more secure server operating environment which is due to the advanced security measures that are put in place during the server hardening process.
Methods for Server Hardening
1. Encrypt Data Communication
2. Avoid Using FTP, Telnet, And Rlogin / Rsh
3. Minimize Software to Minimize Vulnerability
4. One Network Service Per System or VM Instance
5. Keep Linux Kernel and Software Up to Date
6. Use Linux Security Extensions
7. User Accounts and Strong Password Policy
8. Password Aging
9. Restricting Use of Previous Passwords
10. Locking User Accounts After Login Failures
11. Make Sure No Non-Root Accounts Have UID Set To 0
12. Disable root Login
13. Physical Server Security
14. Disable Unwanted Services
15. Delete X Windows
16. Configure Iptables and TCPWrappers
17. Linux Kernel /etc/sysctl.conf Hardening
18. Disk Quotas
4.15pm – 4.30pm
Tea break
4.30pm – 5.30pm – Continuation of Server Hardening
Methods for Server Hardening
19. Turn Off IPv6
20. Disable Unwanted SUID and SGID Binaries
21. Logging and Auditing
22. Monitor Suspicious Log Messages With Logwatch / Logcheck
23. System Accounting with audit
24. Secure OpenSSH Server
25. Install And Use Intrusion Detection System
Concluding Session
People were requested to handle small technical discussions for the next meeting.
Thanks to all the attendees for coming and they are requested to put their feedback on the mailing list so that we can improve future meetings
The next user meet is on 22nd April 2012