Ah, yes,
that familiar glow, the sunset on this module, a module where we've looked
at implementing security hardening on our Linux system.
Now remember that security is that onion. It's a multi‑layered
approach, and it affects every aspect of Linux.
So,
services, both having services that we don't use that could be providing
access to resources or where we have services that we are using, but they're
perhaps a little bit too liberal on the access that they are given or the
interfaces that they are listening on. With our user accounts, we want to make
sure that our users are changing passwords where it's mandated, so we can
check on password last changed.
But we also try and locate some of those user accounts that haven't been
used recently, so we can start tidying up those accounts, making sure we
haven't left back holes into our system.
And then looking at how where users are using password‑based
authentication, we can prevent against scripted attacks to our system by
locking accounts after so many failed login attempts.
Hopefully, you've got a lot from this, but remember, this
is only just the tip of the iceberg.
There is a lot in securing your system and included in
that is firewalling your system.
And we're going to be taking a look at firewalling with firewalld in our next module.