I'm trying to write a guide with some essentials that one should do after his/her server has finished "building", important things like setting up a secondary user that's non-root, locales, perhaps even disabling a password login and using keys instead. If you do decide to participate mind providing code examples in addition to a small description?
apt-get update && apt-get upgrade
to update package lists and install the latest security updates for packages, and also installingaptitude
and relying on it since it handles dependencies better.apt-get install locales
if you don't already have it installed. typelocale
and if you see any warnings at the top, dodpkg-reconfigure locales
, select your locale ( mine is en_US.UTF-8 UTF-8 ), generate and that should be taken care of, to avoid any locale issues when installing / upgrading packages.1) Enable spoofing protect and syncookies:
2) For server will be enough 3 consoles. Edit /etc/inittab:
3) Secure OpenSSH
4) Install utils:
apt-get install aptitude
to grab the front end apt wrapper which handles dependencies far better. After doing so ( or if you already have it ), install some "essential" packages withaptitude install ~pstandard
which grabs packages such asperl
anddnsutils
.