Part 3 Host Device Security Configuration At the end of the report, Lynis provid

Question

Part 3 Host Device Security Configuration At the end of the report, Lynis provides example security settings. For the following suggestions, explain what settings should be changed or applied in order to secure the host properly and why these configurations are necessary. User Authentication: Minimum Password Age User Authentication: Maximum Password Age USB Devices: Checking USBGuard SSH Support: MaxAuthTries SSH Support: MaxSessions » » SSH Suppoert: PermitRootLogin » Banner and Identification: Issue.net Contents

Explanation / Answer

Hi,

Read the suggestions Lynis provides you after the security audit.

Please find the answers in-line:

User Authentication: Minimum Password Age
User Authentication: Maximum Password Age

#
Password aging means a password can only be used for a specific duration of time before the user has to change it again. This rule enforces them to change it on a regular basis. Regular changes to the password , limits the risk of cracking passwords or being obtained by unauthorized people.

USB Devices: Checking USBGuard

#
USBGuard is a software framework for implementing USB device authorization policies,and USB use policies i.e how a USB device may interact with the system. USBGaurd protects the sustem from USB related attacks. USBGuard is designed to protect your computer against rogue USB devices. It is better to install it to harden the system.

Consider hardening the SSH Configuration:

SSH Support:MaxAuthTries

Example : MaxAuthTries (6 --> 2)
In strict sense reduce the max auth re tries.

SSH Support: MaxSessions

Example:
MaxSessions (10 --> 2)

Shown a suggestion to reduce the number. Lower sessions is good for system performance.

SSH Support: PermitRootLogin

PermitRootLogin Yes -> No

Banner and Identification: Issue.net Contents.

Add a legal banner to /etc/issue, to warn unauthorized users.
Make users aware that systems are monitored by legal requirements or law.

Related Questions

Navigate

• Browse (All)
• Browse P
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.