Server cesurity
From Ilianko
Contents
set locales
dpkg-reconfigure locales
Деактивиране на root
може да се ползва sudo или да махнем ssh root login
vi /etc/ssh/sshd_config
#LoginGraceTime 2m #PermitRootLogin no #StrictModes yes #MaxAuthTries 6
Make the line look like this to disable logging in through ssh as root.
PermitRootLogin no
Now you’ll need to restart the sshd service:
/etc/init.d/sshd restart
pozwolqvane na xxx
AllowUsers username
Вход с ключ
LAMP
apt-get install mysql-server
heirloom-mailx libaio1 libclass-isa-perl libdbd-mysql-perl libdbi-perl libhtml-template-perl libmysqlclient18 libnet-daemon-perl libplrpc-perl libswitch-perl mysql-client-5.5 mysql-common mysql-server mysql-server-5.5 mysql-server-core-5.5 perl perl-modules psmisc
apt-get install apache2
apache2 apache2-mpm-worker apache2-utils apache2.2-bin apache2.2-common file
libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libcap2 libmagic1 mime-support openssl ssl-cert
apt-get install php5
apache2-mpm-prefork libapache2-mod-php5 libonig2 libqdbm14 libxml2 php5 php5-cli php5-common sgml-base xml-core
apt-get install phpmyadmin
dbconfig-common fontconfig-config libfontconfig1 libgd2-xpm libjpeg8 libltdl7 libmcrypt4 php5-gd php5-mcrypt php5-mysql phpmyadmin ttf-dejavu-core
check version
apt-cache policy openssl ......
LAMP
apt-get update apt-get install apache2 apt-get install mysql-server libapache2-mod-auth-mysql php5-mysql apt-get install php5 libapache2-mod-php5 php5-mcrypt
fail2ban