How to configure a secure Linux operating system _unix Linux

First, disk partition 1, if it is a new installation system, the disk partition should consider security: 1 root directory (/), User directory (/home), temporary directory (/tmp) and/var directory should be separated to different disk partitions;
2 The above directories in the partition of the disk space should be fully considered, to avoid some of the reasons caused by the partition space used to cause system crashes; 2. For the/TMP and/var directory partitions, most of the cases do not require programs with SUID properties, so you should add NOSUID attributes for those partitions; Method One: Modify the/etc/fstab file and add the Nosuid property Word. Example:/dev/hda2/tmp ext2 EXEC,DEV,NOSUID,RW 0 0
^^^^^^
Method Two: If the/etc/fstab file operation is not familiar, recommended by the LINUXCONF program to modify. * Run linuxconf procedures;
* Select "Access local Drive" under "File systems";
* Select the partition on which you want to modify the property;
* Select "No setuid programs allowed" option;
* Choose other options as required;
* Normal exit. (You will be prompted to mount the partition again) second, install 1, for non-test host, should not install too many software packages. This reduces the likelihood that a security vulnerability may occur due to a package.
2. For non-test hosts, you should not select Non-essential services when you select a host to start the service. such as routed, Ypbind and so on. Third, security configuration and enhanced kernel upgrade. Upgrade to at least 2.2.16 version. GNU libc shared library upgrade. (Warning: If you don't have experience, you can't try it easily.) can be postponed. ）
Turn off the dangerous network services. Echo, Chargen, Shell, login, finger, NFS, RPC, etc.
Turn off Non-essential network services. Talk, Ntalk, pop-2, etc.
Common network Services Security Configuration and upgrades
Make sure that the network service is using the latest and safest version.
Canceling anonymous FTP access
Remove nonessential suid Programs
Using Tcpwrapper
Using the IPChains Firewall
Log System Syslogd