How To Harden My Filesystem - Page 2.25

Find the HOWTO or step-by-step guide that you need right here.

Discover How To Harden My Filesystem HOWTOs

Get No-Fuss File-Level Crypto With Fscrypt

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Learn how to use fscrypt to create an encrypted filesystem - but be warned: this involves tinkering on the command line and doing a partially or fully manual operating system installation. However, if you are willing to put in the time and effort, you will enjoy a high-performing computing experience with seamless modern encryption protection.

UNIX Network Scanning

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A bit of a shift towards UNIX for those looking to a get a different view of network scanning: Discover how to scan your network for services and how to regularly monitor your services to keep uptimes to a maximum. A key way of ensuring the security of your network is to know what is on your network and what services individual machines are at risk of exposure. Unauthorized services, such as Web servers or file sharing solutions, not only degrade performance, but others can use these services as routes into your network. In this article, learn how to use these same techniques to ensure that genuine services remain available.

Take Control of your VPN Connections with Boot CD's

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This will show you how to take boot CD's and make them hardened enough for what you need in any VPN application. From the introduction: For several years now, users at the Institution where I currently work part-time have expressed a need for a robust and secure connection to the internal network. The internal network actually has some clients that are on private networks and some clients that are Internet-route-able. Being mostly a Microsoft shop, the options that have been available were not deemed appropriate for various reasons, usually due to security concerns. After being introduced to the problem a few months ago and listening to the concerns surrounding it, I suggested using a boot CD, which would alleviate all of their security concerns. They gave me the go ahead to give it a try. I now have a working prototype and this document describes the process used to create it.

Lock-Down Ubuntu 7.10 Gutsy-Gibbon

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Ubuntu Gutsy-Gibbon on the brain? Looking to set up a solid defense with Intrusion Detection Snort, MySQL and more? HowToForge has a great guide from a contributor, Devilman: In this tutorial I will describe how to install and configure Snort (an intrusion detection system (IDS)) from source, BASE (Basic Analysis and Security Engine), MySQL, and Apache2 on Ubuntu 7.10 (Gutsy Gibbon). Snort will assist you in monitoring your network and alert you about possible threats. Snort will output its log files to a MySQL database which BASE will use to display a graphical interface in a web browser. Read on...

Securing and Hardening Red Hat Linux Production Systems

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This is a recently found HOWTO, and is an amazing and comprehensive resource for getting many different Linux systems secure. This Linux Security HOWTO is intended for a technical audience, Linux system administrators, and security people in corporations and organizations that have to use commercial Linux distributions for their production environment. Check out the index for a complete listing of what this HOWTos Cover. The description also states it is "A Practical Guide to Basic Linux Security in Production Enterprise Environments" Written by Werner Puschitz

Adding Modules to BackTrack In linux

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

BackTrack, the penetration testing distribution, is a great LIve-CD to test a system and tear it apart. This HOWTO: One of BackTracks' most appealing features is it's modularity. As an end user, you can add your own modules scripts and tools to the livecd.

Protecting Data with Encrypted Linux Partitions

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

All too often, you hear the story of how X number of laptops or social security numbers were stolen from company Y. And why is so little attention paid to how and why that information was left unprotected and so easily accessible? There are many ways to combat this problem. One of the best ways is with encryption. And Carla Schroder takes us through a great way Today let us focus on the issue of protecting sensitive data on hard drives with encrypted file systems. This is for your mobile users and anyone who needs extra data security on workstations and servers. We're going to use cryptsetup-luks because it is easy and it is strong. We will create an encrypted partition that requires a passphrase only at mount time. Then you can use it just like any other partition. Nice summary and easy to follow.

How to Secure Ubuntu With AppArmor

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

AppArmor is one way to protect your assets on your Ubuntu Gutsy system. AppArmor attempts to protect processes on the server or desktop from security threats. AppArmor enforces limits on what processes can access on the system. It attempts to restrict processes to those resources that the process requires to function only. If you wanted to give AppArmor a try, and SELinux isn't your flavor, get your start here.

Giving RSYNC a run for its money: Duplicity???

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

According to the Merriam-Webster online dictionary, duplicity is defined as "contradictory doubleness of thought, speech, or action." To the more Linux-initiated, however, it is an exceedingly useful tool. Make no mistakes about it, Duplicity is a very capable way of encrypting data and throwing its weight around against the standard Rsync. Read here to learn more about why duplicity is an alternative worth looking into.