Project

General

Profile

Actions

Task #163

open

General SSH hardening

Added by Nawan 1 day ago. Updated about 16 hours ago.

Status:
In Progress
Priority:
High
Assignee:
Category:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Here is some ideas for hardening SSH:

  • Disable X11 Forwarding
  • Disable PermitRootLogin. Always sudo
  • Disable PasswordAuthentication
  • Disable weak ciphers
  • Limit user/group who can use SSH

This is not an exhaustive list, and more items may be added later.

Actions #1

Updated by Nawan about 17 hours ago

  • Priority changed from Normal to High
Actions #2

Updated by Nawan about 16 hours ago

  • Description updated (diff)

Done! However, I'm leaving it open for additions.

Actions #3

Updated by Nawan about 16 hours ago

  • Description updated (diff)
Actions #4

Updated by Nawan about 16 hours ago

  • Description updated (diff)
  • Status changed from New to In Progress
Actions

Also available in: Atom PDF