The term OS hardening itself is misleading/vague to me as i am reading to understand it online here. It seems to me that its something related to making linux/unix box more secure.
Add a comment
|
3 Answers
To quote wikipedia:
In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability. A system has a larger vulnerability surface the more that it does; in principle a single-function system is more secure than a multipurpose one. Reducing available vectors of attack typically includes the removal of unnecessary software, unnecessary usernames or logins and the disabling or removal of unnecessary services.
There are usually guides by the OS vendor. Look for example at the Debian guide: http://www.debian.org/doc/manuals/securing-debian-howto/
-
Maybe you should include an explanation of what it is to "reducing its [a system's] surface of vulnerability"?– N.N.Feb 12, 2013 at 12:02
-
@N.N. Yes, I extended the wikipedia-quota as I couldn't explain it better.– tloFeb 12, 2013 at 12:28
-
In my opinion, hardening means not only removing unnecessary stuff and configuration changes, but also using software versions which have additional security checks that are included automatically by special compiler flags or by extra patches (like e.g. grsecurity for the Linux kernel).– jofelFeb 12, 2013 at 12:50
Hardening is a process of securely configuring weak(vulnerability) point of a system like there may be unused port, services or useless software running that may create weak point in your system. these weak point may be used by other's to enter in your system.
For example in Linux systems there is a file called /etc/hosts is used to allow/disallow users as per policy. So you may need to change the permissions of this file chmod 700 /etc/hosts.allow or chmod 000 /etc/hosts.allow
For OS(Linux, Unix) hardening go to http://www.itsecurity.com/features/ubuntu-secure-install-resource/ http://www.security.berkeley.edu
You can use tool like PSysHard Hardening Framew0rk
Hardening is the process of making a system more secure.
For example, setting file system permissions or turning off services that leave the system vulnerable.
