Shulou(Shulou.com)06/01 Report--

In this issue, the editor will bring you about how to optimize the basic configuration of Linux. The article is rich in content and analyzes and describes for you from a professional point of view. I hope you can get something after reading this article.

Basic optimized configuration of Linux operating system

After installing the Linux system, we need to make some optimizations to make the operating system more secure, as well as some necessary preparations (for the future production environment).

1: add operation users to the system

After the installation of the system, try to avoid using ROOT users to log in to operate and reduce unnecessary risks, so it is necessary to add operating users according to daily maintenance requirements.

2: install the necessary software packages for the system

After the installation of the system is completed, it is necessary to check whether all the software needed in the actual environment has been installed in the future.

This command is to view the list of package groups

Check to see if some software is installed

If it is not installed, you can use yum install httpd-y

3: close SElinux

SElinux shutdown is the / etc/SElinux/config whose configuration file needs to be modified.

Modify SELINUX=enforcing to SELINUX=disalbed

4: use sudo for rights management

In actual production, it must be necessary to carry out relevant authority control management, in order to reduce unnecessary errors.

Use the sudo command to configure command permissions for related users

Terminal specific commands that can be logged in by user name (using absolute path)

Yumw ALL= (ALL) / usr/sbin/useradd

The specific path to the command can be used

5: modify the default configuration of the SSH service

In general, after the system installation is completed in the production environment, the operation and maintenance staff will use the client tools to log in to the system for related operations to facilitate the management and maintenance of the server. In order to increase security, it is necessary to modify the default configuration of SSH.

SSH Service profile / etc/ssh/sshd_config

Back up the configuration file before modifying the configuration

Then modify the default configuration and restart the related services after modification.

/ etc/init.d/sshd restart

The above is how the optimized configuration of the Linux foundation shared by the editor is. If you happen to have similar doubts, you might as well refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.