[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

 
 
 
Paid content will be excluded from the download.

Filter
Matches : 30475 Download | Alert*

Direct root Logins Not Allowed To further limit access to the 'root' account, administrators can disable root logins at the console by editing the '/etc/securetty' file. This file lists all devices the root user is allowed to login to. If the file does not exist at all, the root user can login through any communication device on the system, whether via the console or via a raw network interface. ...

Set Last Logon/Access Notification To configure the system to notify users of last logon/access using 'pam_lastlog', add the following line immediately after 'session required pam_limits.so': 'session required pam_lastlog.so showfailed'

Auditing of 'Detailed Tracking: Process Termination' events on success should be enabled or disabled as appropriate.

Disable Interactive Boot To disable the ability for users to perform interactive startups, edit the file '/etc/sysconfig/init'. Add or correct the line: 'PROMPT=no' The 'PROMPT' option allows the console user to perform an interactive system startup, in which it is possible to select the set of services which are started on boot.

Enable Smart Card Login To enable smart card authentication, consult the documentation at:

Disable Zeroconf Networking Zeroconf networking allows the system to assign itself an IP address and engage in IP communication without a statically-assigned address or even a DHCP server. Automatic address assignment via Zeroconf (or DHCP) is not recommended. To disable Zeroconf automatic route assignment in the 169.254.0.0 subnet, add or correct the following line in '/etc/sysconfig/network': ' ...

To set the runtime status of the 'net.ipv4.conf.all.accept_source_route' kernel parameter, run the following command:

The built-in Guest account should be correctly named.

Disable Bluetooth Service The 'bluetooth' service can be disabled with the following command: '$ sudo systemctl disable bluetooth' '$ sudo service bluetooth stop'

Disable IPv6 Networking Support Automatic Loading To disable support for ('ipv6') add the following line to '/etc/sysctl.d/ipv6.conf' (or another file in '/etc/sysctl.d'): 'net.ipv6.conf.all.disable_ipv6 = 1' This disables IPv6 on all network interfaces as other services and system functionality require the IPv6 stack loaded to work.


Pages:      Start    3017    3018    3019    3020    3021    3022    3023    3024    3025    3026    3027    3028    3029    3030    ..   3047

© SecPod Technologies