Linux System Hardening Method

1. Preface
The platform for the Linux system solidification experiment is Guangzhou Chuang Long tl5728-idk Development Board
Introduction to the Development Board:
? Based on Ti AM5728 floating-point dual dspc66x+ dual ARMCORTEX-A15 industrial control and high performance audio and video processor;
? Strong video codec capability, support 1-way 1080p60 or 2-way 720p60 or 4-way 720P30 video hardware codec, support h.265 video soft decoding;
? Dual-core PRU-ICSS industrial real-time control subsystem, support EtherCAT, ETHERNET/IP, Profibus and other industrial protocols;
? Peripheral interface Rich, GPMC, USB 2.0, UART, SPI, QSPI, I²c, Dcan and other industrial control bus and interface, support high-speed interface pcle GEN2, USB 3.0, SATA 2.0;
? Used in industrial Pc&hmi, industrial robots, machine vision, medical imaging, power automation and other fields.

2. Based on SD system boot card curing Linux system to eMMC
Fixed Linux system to eMMC script file for the CD-ROM material "shell\mkemmc-boot.sh", Guangzhou Dragon provided by the file system has the script file stored in the "/opt" directory. Running a script into the file system's "/opt" directory automatically cures the Linux system to EMMC, which automatically formats the EMMC as the boot partition and ROOTFS partition.
2.1 SD System boot Card partition mount description
Using SD card to launch the Development Board, go to the Development Board file system execute the following instructions to view the system detailed mount information:
target# DF

The mounting information is described as follows:
? SD system boot card boot partition
Device node:/DEV/MMCBLK0P1
Mount Directory:/RUN/MEDIA/MMCBLK0P1
? EMMC Device boot partition
Device node:/DEV/MMCBLK1P1
Mount Directory:/RUN/MEDIA/MMCBLK1P1
? EMMC Device ROOTFS Partition
Device node:/DEV/MMCBLK1P2
Mount Directory:/RUN/MEDIA/MMCBLK1P2
2.2 Using the script one-click Cure Linux System to eMMC
Enter the path to the file system mkemmc-boot.sh script file, execute the script file to cure all related files of Linux system to EMMC:
target# cd/opt/
target#./mkemmc-boot.sh--DEVICE/DEV/MMCBLK1

After entering the ENTER key, the following message pops up, because the ROOTFS partition already exists in the EMMC device, here asks if you need to repartition. Enter "Y" to confirm repartitioning, press ENTER to start the curing system, 5 min after the system cured successfully, as shown in:

2.3 Booting the system from the EMMC
After successfully curing the Linux system to EMMC, the Development Board is powered off, the SD system boot card is removed, the dial switch is dialed to 00000 gear, and the Development Board is started from emmc such as:

Linux System Hardening Method