Skip to content

Instantly share code, notes, and snippets.

@AnnoyingTechnology

AnnoyingTechnology/debian-security-tools.sh

Last active July 6, 2024 12:31
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save AnnoyingTechnology/34a415f6931aca97cc2c38dd144c6f66 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save AnnoyingTechnology/34a415f6931aca97cc2c38dd144c6f66 to your computer and use it in GitHub Desktop.
Download ZIP
Install debian basic security utilities. You still need to configure some of those, and a lot of other things have to be manually tweaked across a system to keep it secure.
Raw
debian-security-tools.sh
apt update
apt install \
# rootkit scanner
rkhunter \
# another rootkit scanner
chkrootkit \
# checksums of system files for sanity checks
debsums \
# check for bugs before updates
apt-listbugs \
# open ports on demand
knockd \
# ban bruforce attacks
fail2ban \
# detect and block portscans
portsentry \
# checks if system needs a restart after updates
needrestart \
# applies reliable security upgrades on its own
unattended-upgrades \
# audits a system for best security practices
lynis \
@AnnoyingTechnology
Copy link
Copy Markdown
Author

AnnoyingTechnology commented May 30, 2018 •
edited
Loading

Ideas :

  • add questions to define iptables "firewall" rules.
  • add a question to define sysadmin email
  • create proper crontasks that report to said email
  • update unattended-upgrades config file with said email
  • add a question to choose a port sequence to unhide ssh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment