安全加固常用命令（Centos验证）_centos7安全加固

需积分: 17 207 浏览量更新于2023-05-22 评论收藏 32KB DOCX 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

资源详情

资源评论

资源推荐

目录
修改策略：关闭 
修改策略：关闭防火墙
修改策略：关闭 
修改策略：关闭 
修改策略：关闭重启  组合键
修改策略：禁 
修改策略：禁止  伪装
 修改策略：禁用常用密码
修改策略：添加普通用户并进行  授权管理
修改策略：内核参数优化
修改策略：增强口令配置复杂度 
修改策略：备份配置文件!
修改策略：口令最长生存期策略!
修改策略：无操作自动退出!
修改策略：关键目录认证授权!
修改策略：用户缺省权限控制!
修改策略：设置 "# 记录条数$
修改策略：% 登录限制配置$
修改策略：% 配置使用协议  版本$
修改策略：% 禁止  远程登录$
修改策略：% 登录失败锁定$
修改策略：% 配置空闲登出的超时间隔&
修改策略：% 禁用"文件&
修改策略：% 禁用基于主机的认证&
修改策略：% 禁用登录提示信息&
修改策略：建立恰当的警告 '()*
修改策略：% 记录日志)*
修改策略：锁定关键文件使其不能被修改)*
修改策略：关键命令权限限制)*

修改策略：限制 + 给授权的用户))
修改策略：限制 ,' 文件限制访问权限())
修改策略：设置守护进程掩码))
修改策略：限制  登录到系统控制台))
修改策略：给  用户改名字)
修改策略：检查管理员账户个数)
修改策略：验证账户空口令)
修改策略：锁定用户使其不能修改密码)
修改策略：删除或禁用不必要的用户和用户组)
修改策略：清空防火墙并设置规则)
修改策略：关闭不必要的系统服务)
修改策略：远程日志审计)
待讨论
默认配置正确 or 待讨论
修改策略：关闭 SELinux
修改原因：基于最小权限原则，影响很多常用服务的使用。
处理方法：
把+++-. 文件的 /0 项设置为 '。
1!+2.+'+.3++#-.+
修改策略：关闭防火墙
修改原因：很多时候我们希望访问服务器，如果某些访问被防火墙拦截的话就会访问不到
这个时候需要关闭防火墙来实现
处理方法：
'4
+++'55++
修改策略：关闭 core dump
修改原因：允许  会耗费大量的磁盘空间
处理方法：
66789:55++#+2
;<*
;"*
789: