The minimization principle is extremely important for Linux system security, that is, more than a few things, including the following aspects:
- Install the Linux system minimized, that is, the package is minimized, yum installation package should be minimized, useless package does not install.
- Start-up service is minimized, that is, useless services are not turned on.
- Operation commands are minimized. For example: You can use "Rm-f test.txt" without "rm-fr test.txt"
- Logging on to Linux users is minimized. Usually no special needs do not log in root, with ordinary users can login.
- Ordinary user authorization permission to minimize, that is, only to the user must manage the system commands, can not do anything.
- Linux system files and directories to minimize the permissions settings, prohibit arbitrary creation, change, delete files.
The security minimization principle of Linux system
