Linux System Foundation Tuning

• Without root, add regular users and manage with sudo authorization

• Change the default remote connection SSH service port and disable root user remote connection

• Scheduled Automatic server time update

• Configure the Yum update source to download and install the RPM package from the domestic update

• Turn off SELinux and iptables (iptables work scenario if a WAN IP is typically turned on, except for high concurrency)

• Adjust the number of file descriptors, and the process and file opening will consume the file descriptor

• Automatically cleans/var/spool/clientmquene/directory junk files regularly, preventing inodes nodes from being filled (c6.4 default is no sendmail, so it is not possible)

• Streamlined boot-up service (Crond,sshd,network,rsyslog (c5.8 syslog))

• Linux kernel parameter optimization/etc/sysctl.conf execution sysctl-p effective

• Change character set, support Chinese, but suggest or use English character set, prevent garbled problem, do not use Chinese

• Lock critical system files

  Chattr +i/etc/passwd/etc/shadow/etc/group/etc/gshadow/etc/inittab

After processing the above content to change chattr,lsattr renamed XCN, so it is much safer

• Clear/etc/issue, remove system and kernel version before login screen display

• Clear unused default system account or group (not required)

This article is from the "Little Rookie" blog, please be sure to keep this source http://baishuchao.blog.51cto.com/12918589/1945916

Linux System Foundation Tuning