Project

General

Profile

Actions

Task #163

open

General SSH hardening

Added by Nawan 1 day ago. Updated about 17 hours ago.

Status:
In Progress
Priority:
High
Assignee:
Category:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

Here is some ideas for hardening SSH:

  • Disable X11 Forwarding
  • Disable PermitRootLogin. Always sudo
  • Disable PasswordAuthentication
  • Disable weak ciphers
  • Limit user/group who can use SSH

This is not an exhaustive list, and more items may be added later.

Actions

Also available in: Atom PDF