Differences

This shows you the differences between two versions of the page.

--- setup_an_ultra_secure_ubuntu_system [2020/05/26 11:54] – peter
+++ setup_an_ultra_secure_ubuntu_system [2022/07/19 10:25] (current) – 85.203.36.251
@@ Line 9: / Line 9: @@
 [[Secure Ubuntu System:Install the Base Ubuntu System]]
-[[Secure Ubuntu System:Initial Setup]]
+[[Secure Ubuntu System:First Configuration]]
 [[Secure Ubuntu System:Initial Configuration]]
@@ Line 16: / Line 16: @@
 [[Secure Ubuntu System:Add Software]]
 ----
-====== Ubuntu - USB - Disable USB Booting ======
+===== References =====
-<code bash>
+https://ubuntuforums.org/showthread.php?t=1983344
-echo 'install usb-storage /bin/true' >> /etc/modprobe.d/disable-usb-storage.conf
-</code>
-<WRAP info>
-**NOTE:**  USB booting can also often be turned off from the BIOS menu.
-</WRAP>
-----
-====== Ubuntu - Legacy Communication Services ======
-A large number of legacy Unix programs do not provide essential security during data transmission. These include FTP, Telnet, rlogin, and rsh. No matter whether you’re securing your Linux server or personal system, stop using these services for good.
-You can use other alternatives for this type of data transfer tasks. For example, services like OpenSSH, SFTP, or FTPS makes sure that data transmission happens over a secure channel.
-Some of them employ SSL or TLS encryptions to harden your data communication.
-You may use the below commands to remove legacy services like NIS, telnet, and rsh from your system.
-<code bash>
-# yum erase xinetd ypserv tftp-server telnet-server rsh-server
-# apt-get --purge remove xinetd nis yp-tools tftpd atftpd tftpd-hpa telnetd rsh-server rsh-redone-server
-</code>
-----
-===== References =====
 The CIS benchmarks recommendations for hardening the system.
@@ Line 62: / Line 33: @@
 debsums
 http://ubuntuforums.org/showthread.php?t=2225059
 http://manpages.ubuntu.com/manpages/xenial/man1/debsums.1.html