search

sydhds / hardenbuntu

Recommendations and best practices for hardening an Ubuntu Linux system.
0 stars 0 forks source link

Explore ANSSI recommandations #6

Open sydhds opened 1 year ago

sydhds commented 1 year ago

ANSSI pdf for linux configuration - in french

sydhds commented 1 year ago

Recommandations:

R1: N/A R2: BIOS/UEFI config R3: Use UEFI R4: N/A R5: Grub boot password R6: Unified Kernel System (Kernel + Initramfs + Kernel cmdline options) signed R7: Enable IOMMU R8: Kernal cmdline options for memory R9: Kernel compilation config R10: Disable Kernel module loading R11: Enable Yama LSM R12: Network sysctl.conf R13: Disable IPV6 R14: [Fs sysctl.conf] R15: Kernel recompilation