MOCs

Notes

  • Backup vsftpd.conf somewhere
    • Make it immutable? Check this guide
    • Wait until chattr is renamed /usr/bin/chattr/usr/bin/___
  • Backup sshd.conf somewhere
  • Set idle SSH timeout? Modify sshd_config for ClientAliveInterval and ClientAliveCountMax
  • Verify SSH scoring users and edit /etc/ssh/sshd_config with AllowUsers
  • Change Creds for Root
  • Read over /etc/passwd | Disable users
  • Check /etc/skel
  • Disable root SSH login and create our own privileged user (try to make three)
  • Check the running services and disable/stop any suspicious
  • Check open ports and disable/close any suspicious ports
    • FTP = TCP 21/22 are good