Skip to content

Instantly share code, notes, and snippets.

@curtismckee

curtismckee/debian-security.md

Created December 3, 2018 20:28
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save curtismckee/3d78602e36bbe9b2b11a14f185576db6 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save curtismckee/3d78602e36bbe9b2b11a14f185576db6 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. Curtis Mckee created this gist Dec 3, 2018.
    32 changes: 32 additions & 0 deletions debian-security.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,32 @@
    ## Debian Security Guideline

    Encryption/ Device Lock Down
    - Revoke GRUB shell access
    - UEFi setup menu supervisor password protected
    - All Boot devices disabled
    - LUKS hard drive encryption

    TPM Module
    - Storing LUKS key and doing pre-boot integrity checks

    Users Lockdown
    - Users / Groups permissions
    - User TOTP 2factor Authentication

    Password
    - /etc/pam.d/pam-cracklib (pass strength/history)
    - /etc/login.defs (pass rotation)

    Firewall
    - iptables

    Logging
    - iptables log Analysis
    - Rsyslog
    - LogRotate

    Application Whitelisting
    - AppArmor

    Password Management
    - KeePassXC