Linux security level configuration for database applications

? Function of shielding Ctrl+alt+delete key shutdown

#vi/etc/inittab

Change "Ca::ctrlaltdel:/sbin/shutdown-r-T 4 Now" to: "Ca::ctrlaltdel:/bin/true", and then execute "init Q" to make the update effective.

? Session Timeout limit

Edit/etc/profile File:

Readonlytmout=90;export Tmout

The session of the remote character Terminal window after setting is automatically disconnected after 90 seconds

? disabling USB storage

# ls/lib/modules/$ (uname-r)/kernel/drivers/usb/storage/usb-storage.ko

# mv/lib/modules/$ (uname-r)/kernel/drivers/usb/storage/usb-storage.ko/tmp

? Number of open files limit

Edit/etc/security/limits.conf file, add two lines

* Hard nofile8192

* Soft nofile10240

? Limit root users to login directly via SSH protocol

#vi/etc/ssh/sshd_config

Add Permitrootlogin no row

#rcsshdrestart//Reboot SSH service

? IP Access Control

Only allow specific IP addresses to access the server through the SSH protocol.

#vi/etc/hosts.deny

Sshd:allexcept IP Address