Lazo Lab Sign up

Defensive Security (Blue Team) / Hardening

Lesson 11 of 32

Hardening a Linux server

Update everything, use SSH keys, disable root login, enable the firewall, remove unused services and turn on automatic security updates.

Key points

  • PermitRootLogin no
  • PasswordAuthentication no
  • unattended-upgrades for auto patches
sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades
Watch a video on thisOpens YouTube search results for “Hardening a Linux server” in a new tab

Quiz · +10 XP

Which SSH setting stops root logging in directly?

Log in to save progress and earn XP.