GNU/Linux security baseline and Reinforcement

GNU/Linux security baseline and Reinforcement

"With the popularity of GNU/Linux in IT infrastructure in various industries, security issues have become the focus of attention. GNU/Linux is mainly built by the GNU core (compiler GCC, C library Glibc, etc.) and Linux kernel combination, in the environment where free open source software dominates the basic platform, many people think that open source must be safe, this is an incorrect idea, coverity reports only show that open-source software is more secure than closed-source software. This does not mean that free open-source software is unbreakable. To some extent, free open-source software has some security features, these features are not necessarily enabled by default in the GNU/Linux release. Some of these features must be deployed in the security baseline, and some can be customized as needed, this document mainly introduces some basic information about security baseline construction and reinforcement.

In actual security consultation work, many ordinary individual users and enterprise users are not hackers in the security field. Most customers require a simple and easy-to-understand deployment document, that is, the so-called security baseline. Baseline and reinforcement are a big topic. I will try my best to update the content of this document and hope that some friends from the community will participate in this document, or directly contribute to DNFWAH. The GNU/Linux release used in this article is Debian. "

This article permanently updates the link address: