ARYA SAPUTRA

LINUX SERVER HARDENING CHECKLIST

Activity Supervisor Completion date

Use Secure Shell Protocol
Create a sudo user
Setup a basic Firewall
Disable Unwanted Linux Services
Install and Configure fail2ban Firewall
Enable SELinux
Keep Kernel and packages update
Disable USB and Thunderbolt Devices
Enforces strong Password policies
Restricting use of Previous Passwords
Purge Unnecessary Packages to minimize vulnerabilities
Set Up Password Aging
Disable Unwanted SUID and SGID Binaries
Logging and Auditing
Perform regular backups
Restricting use of Previous Passwords
Monitor Listening Network Ports
Separate Disk Partitions For Linux System