Question about making secure server

jpc82 · Guru Joined: 09 Mar 2003 Posts: 326

I'm planing on rebuilding my file server this summer and I was wondering if anyone had good resources to making a secure server.

This box will be used for an internal Samba server, SSH server, and maybe a webserver which will work with mysql.

The only ports that will be open from the net to this PC will be 22, and 80 (if I put a web server up)

What I want to have is first of all a sercure kernel, chrooted ssh logins for non root users.

I know this may be over kill for such a small time thing, but I want to use this as a learning experiance also, since I don't really know anything about this at the moment.

nalin · Posted: Sat Apr 10, 2004 7:03 pm Post subject:

check out the gentoo security guide, from a learning perspective I found it comparable to the installation documentation. Actually this comparison is a pretty good one - it guides you through hardening your box, but tells you what each step is for.

jpc82 · Guru Joined: 09 Mar 2003 Posts: 326

Wow, thats a great link, I'm reading it right now.

Have a question from it.

It says to mount /tmp with nosuid, and noexec. Is there anyway to do this with /tmp as part of / or will it have to be a seperate partition.

Also, does anyone have a good resource for chroot jailing a user?

Oopsz · Guru Joined: 08 Oct 2002 Posts: 340

well, try using tmpfs for /tmp, no need to have a seperate partition
_________________
Pop-before-SMTP with the Gentoo Virtual Mailhosting Guide