In the following post we will try to give some tips for protecting Linux workstations. You will find tips for people running individual Linux Workstations (for example, home users or small business users).
Initially:
Don't assume that any Linux installation is safe from viruses and spyware.
Many of the security risks on Linux are common on Windows and Mac computers.
Most modern Linux distributions provide some basic security features (automatic software/service updates, event logging, access control, and firewall functions), which are often enabled by default. Those installing a Linux workstation should have a basic understanding of the operating system and, if necessary, seek further guidance (such as from the official Linux distribution website, official online Linux forums, or mailing lists for the specific Linux distribution being used).
The risks
Behavioral risks
Many risks, such as fraud, phishing, spam, and identity theft, apply to Linux users as well as users of other operating systems.
Poor user choices, such as weak or no passwords, failure to monitor event logs, and misconfigurations in Linux software.
Technological Risks
Risks to Linux Workstations can be increased by running unnecessary services and open network ports.
Failure to update Linux software and services quickly or at all, especially with published vulnerabilities.
Running inherently insecure services, such as using a system designed for use on a local network over the internet.
Exploitation risks
Social engineering, information theft.
Spam, trojans, botnets, backdoors, viruses, rootkits.
Denial of service attacks.
Unauthorized privilege escalation.
Protecting your information and workstation
Getting started
1. Download your Linux operating system software (including binaries, installation files, and patches) from trusted sources, such as an official Linux distribution CD/DVD or the legitimate Linux distribution website. It is a good idea to download the installation CD/DVD from a torrent, as this way there are many distributors, which will protect you more than a hacked official website sharing infected content. Validate the ISO with a checksum.
2. Configure Linux file systems with multiple partitions (using fdisk (or similar). Create separate root, swap, binary, and user file space partitions.
3. Check the authenticity of all Linux operating system software before installing, by validating their digital signatures and/or checksum values.
4. Avoid logging in as a privileged user, such as root. Log in with a non-privileged user account and use the su command to perform administrative tasks.
5. Disable autorun (or equivalent) to prevent media from automatically running.
6. Configure user accounts to lock the session after a predefined period of inactivity (for example, 15 minutes).
7. Keep your Linux up to date by regularly checking for operating system and application updates and patches.
Setting up services and users
1. Disable or limit all unnecessary services and unnecessary startup scripts such as Bluetooth, USB, wireless networking, and infrared.
2. Avoid using insecure administration programs such as rlogin, telnet, tftp, ftp, rsh, and rexec, and use secure remote login, file transfer, and shell programs such as sftp, scp, and ssh.
3. Remove unnecessary user accounts (for example, guests) and groups that you don't use, and make sure that all user accounts use a password before they are granted access to the Linux workstation.
4. Use strong passwords for all user accounts on your Linux workstation (minimum eight characters, a mix of uppercase, lowercase, alphanumeric, and special characters).
5. Securing Linux workstations requires a number of activities, many of which apply to all computers regardless of the operating system used. For example, protecting the boot sequence, setting file permissions, logging events, creating backups, and monitoring suspicious files or activity.
6. Individuals who need more detailed advice on securing Linux workstations (firewall, virus protection, disk and file encryption, email protection, Web browser configuration, and backup software) should consult specialist advisors from individuals or organizations specializing in Linux security.
