diff options
Diffstat (limited to 'core/hardening.html')
| -rw-r--r-- | core/hardening.html | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/core/hardening.html b/core/hardening.html index 8c100b2..383f583 100644 --- a/core/hardening.html +++ b/core/hardening.html @@ -10,14 +10,17 @@ <h1>2.2. Hardening</h1> - <p>Kernel <a href="ports/linux-gnu">linux-gnu</a> port have - <a href="apparmor.html">apparmor</a> default options. AppArmor - enforce rules on applications based on security policies. - User space tools are provided by apparmor port and its dependencies, - install them;</p> + <p>Check <a href="apparmor.html">apparmor</a>, + <a href="sysctl.html">sysctl</a>, + <a href="toolchain.html">toolchain</a> and + <a href="samhain.html">samhain</a> before running tests.</p> + + <p>Mount some filesystems in read only</p> + <p>Check processes running as root</p> + <p>Check processes users premissions</p> <pre> - $ sudo prt-get depinst checksec lynis apparmor + $ sudo prt-get depinst checksec lynis </pre> <p>Lynis gives a view of system overall configuration, without changing |