Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Linux hardening with Lynis with Brian Byrne
Search
Brian Linuxing
July 17, 2020
Technology
0
76
Linux hardening with Lynis with Brian Byrne
Presentation to Virtual PajamaCon, July 2020 on Linux hardening with Lynis.
Brian Linuxing
July 17, 2020
Tweet
Share
More Decks by Brian Linuxing
See All by Brian Linuxing
A compressed history of operating systems since the abacus
brianlinuxing
0
22
Linux 100 - Why Linux? What makes it so special? by Brian Byrne
brianlinuxing
0
48
Installing Linux from the beginning with Brian Byrne, Virtual MASCOT Conference 2020.
brianlinuxing
0
100
Linuxing In London - August 2020 - Mattermost
brianlinuxing
0
53
What every teacher should know about operating systems (from the Abacus to the modern server) with Brian Byrne,
brianlinuxing
0
80
Linux: what use is a confined user shell? With Alan Griffiths.
brianlinuxing
0
56
Welcome to, what use is a confined user shell? With Alan Griffiths
brianlinuxing
0
25
Welcome to a lap around JetBrains Space with Maarten Balliauw
brianlinuxing
0
31
Virtual event - Kubernetes 101 with Elton Stoneman - 7th May 2020
brianlinuxing
0
54
Other Decks in Technology
See All in Technology
少数チームで挑む: SwiftUI, TCA, KMPを用いた 新規動画配信アプリ 「ABEMA Live」の開発について
tomu28
0
530
[PlatformCon 24] Platform Orchestrators: The Missing Middle of Internal Developer Platforms?
danielbryantuk
1
180
AWS パートナー企業でテクニカルサポートに従事して2年経ったので思うところをまとめてみた
kazzpapa3
3
1.3k
エンタープライズ環境下での Active Directory の運用 TIPS
tamaiyutaro
1
1.5k
Hands-on / Kaname Frusawa / Cloud Compare Users Meetup 2024 at University of Tokyo on April 17
paraworld
2
470
オブザーバビリティの Primary Signals
onk
PRO
0
540
"好き"との生活/Regularly update profile with GitHub Actions
judeeeee
0
150
Google Cloud の AI を支える裏側のインフラを垣間見る!
maroon1st
0
170
Tableau事例紹介 / Tableau Case Study of Eureka
kazuya_araki_tokyo
1
170
Postman v10リリース後を振り返る
nagix
0
130
自動生成を活用した、運用保守コストを抑える Error/Alert/Runbook の一元集約管理 / Centralized management of Error/Alert/Runbook to minimize operational costs using automated code generation
biwashi
9
2.1k
2024/4/26 コンピュータ歴史博物館解説告知
toshi_atsumi
0
200
Featured
See All Featured
The Pragmatic Product Professional
lauravandoore
24
5.8k
Into the Great Unknown - MozCon
thekraken
10
980
Designing the Hi-DPI Web
ddemaree
276
33k
RailsConf 2023
tenderlove
2
530
Fireside Chat
paigeccino
20
2.6k
Design by the Numbers
sachag
274
18k
GitHub's CSS Performance
jonrohan
1023
450k
Happy Clients
brianwarren
91
6.4k
Keith and Marios Guide to Fast Websites
keithpitt
408
22k
It's Worth the Effort
3n
180
27k
Pencils Down: Stop Designing & Start Developing
hursman
117
11k
Fashionably flexible responsive web design (full day workshop)
malarkey
397
65k
Transcript
Linux hardening with Lynis with Brian Byrne Virtual PajamaCon July
2020 © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
1
The thank yous A big thanks to everyone at PajamaCon
for inviting me. Credit to Tuxedo Computers for supporting our free Linux community ! https://www.tuxedocomputers.com/ These slides are on Speaker Deck https://speakerdeck.com/brianlinuxing © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
2
Brian Byrne discovered computing around the time Intel released the
4004 chip, in 1971. After 1979 he professionally worked across most sectors, education, commercial and finance, in some seriously technical, managerial and hands-on roles. Brian founded Linuxing In London in 2016, co-organises Covent Garden Pi Jam and all London Raspberry Pi Jam (mini-science festivals for kids), plus a lot more. NB: Brian speaks in paragraphs. He is a freelance IT manager, a thinker and do-er for hire. Want your IT systems organised properly? Pay him, he’ll do it for you! © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
3
Brian’s Operating Systems I’ve used, installed, fixed and played with
over 24 operating systems in 40 years, including but not limited to: TOPS-10, RT-11, RSX, VAX/VMS, CP/M, MS-DOS, AmigaOS, RSTE/E, Classic Mac OS (Lisa), Sinclair_QDOS, Ultrix, OSF/1, SCO Unix, OpenVMS, OS/2, VM/CMS, NetWare 2->3, Windows 1-> Windows 3.1, Windows 95->98 SE, Windows NT 1.0 ->4, Windows 2000, Windows XP, Windows Vista, Windows 7->8.1, Windows 10 and a lot more. Linux was my 15th or 16th operating system! © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
4
A word about Linux Everything is Linux. Android phones, the
lot. Linux is used on 100% of the world’s supercomputers. Everyone runs Linux: AWS, Netflix, Google, Facebook, even Microsoft Distrowatch lists 274 live Linux distributions, as of July 2020. Linux is free. 274 types to try out! Plenty of choice, masses of options. © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
5
Brief agenda Outline the topic, think about relate issues and
what obstacles could exist and how to preempt them. Technical demos on Ubuntu 20.04 and a Jetson Xavier NX running 18.04 © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
6
IBM Roadrunner ~2009 at Los Alamos National Laboratory, it ran
Red Hat © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
7
Hypothetical cluster setup © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
8
Your predicament © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
9
An ally: Lynis © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
10
But why? Isn’t Linux secure? Yes, by virtue of the
separation of privileges, by design. Users can’t (generally) damage a Linux system, but misconfiguration is a big problem. © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
11
Technical demos Two technical demos, on an Ubuntu 20.04 system
and another on an Nvidia Jetson Xavier NX, which effectively runs 18.04. The only requirement is git. © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
12 Login to a standard Linux account 1. git clone https://github.com/CISOfy/lynis 2. cd lynis 3. ./lynis -V 4. ./lynis audit system
Post audit Collate the reports. Look for serious problems. Get
management buy-in. Sell changes to techies. Talk with technical teams and management, prioritise fixes. Implement stage by stage, small wins first. Look out for gotchas. Plan post change audits. Don’t just look at the technical issues, think about humans and stress! © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
13
Talk links Lynis home https://cisofy.com/lynis/ Lynis on github https://github.com/CISOfy/lynis Lynis
on Wikpedia https://en.wikipedia.org/wiki/Lynis OWASP projects https://owasp.org/projects/ OWASP London https://www.meetup.com/OWASP-London/ © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
14
The End Thank you for participating. Enjoyed the event, slides,
etc? Then please leave a nice comment on Twitter. [NB: All images are copyright of their respective owners.] © Brian Byrne, 2020. Twitter:@BrianLinuxing Email:
[email protected]
15