Securing Unix services
Services are applications that run in the background to perform or support essential Operating System (OS) tasks. There are also services associated with apps or services such as Apache, Structured Query Language (SQL), Hypertext Preprocessor (PHP), Remote Procedure Call (RPC), and so on.
A lot of services are loaded and enabled by default. However, every service enabled and running represents a potential vulnerability that needs to be considered and managed.
Therefore, to reduce those risks, let's review some of the best practices related to Unix services (plus some additional server setup considerations).
Defining the purpose of the server
A Linux server should be dedicated for a single purpose. For example, a print server, FTP, web server, and so on. This simple task will make hardening efforts easier.
In the past, having dedicated servers was costly and difficult to procure. However, with cloud technologies, having dedicated servers for...