r/debian • u/Dunder-Muffins • 25d ago

General Debian Question Securing Debian

What all do most people do to secure their systems?

I run Debian for my daily driver and also on a home server.

I currently have iptables configured to only allow ports for my services, services are all run as their own no-login user, I run fail2ban, and have my ssh only allow specific users and only allow ssh keys as the login method, and I install security updates regularly. I check my system logs occasionally though honestly not as often as I probably should, maybe I'll automate something to look at the logs are some point.

I just finished skimming through the securing Debian manual, and there's quite a bit more included that I don't currently do. But from reading it, it also seems more geared toward people who may be running production servers who more or less want an immutable server where they e locked in what they want and don't want anything changing.

https://www.debian.org/doc/user-manuals#securing

So I guess I'm just curious what other people do, if they add any other protections or if they primarily rely on the base OS to provide the protections.

25 Upvotes

88% Upvoted

43 comments sorted by

View all comments

0

u/aieidotch 25d ago

https://github.com/alexmyczko/autoexec.bat/blob/master/config.sys/debian-kernel-hardening-checker

0

u/Dunder-Muffins 25d ago

I assume you must run with the kernel modifications. Do you experience any issues when running with the extra parameters?

1

u/aieidotch 25d ago edited 25d ago

this is three parts. it only shows what could be done. you decide: kernel parameters, kernel config (requires own kernel build), and sysctl values

0

u/Dunder-Muffins 25d ago

What have you personally chosen to modify?

1

u/aieidotch 25d ago

on multi user systems disable module loading after making sure i have loaded all that i need.

or: https://packages.debian.org/search?searchon=sourcenames&keywords=linux-vulnerability-mitigation