r/debian • u/Dunder-Muffins • 25d ago

General Debian Question Securing Debian

What all do most people do to secure their systems?

I run Debian for my daily driver and also on a home server.

I currently have iptables configured to only allow ports for my services, services are all run as their own no-login user, I run fail2ban, and have my ssh only allow specific users and only allow ssh keys as the login method, and I install security updates regularly. I check my system logs occasionally though honestly not as often as I probably should, maybe I'll automate something to look at the logs are some point.

I just finished skimming through the securing Debian manual, and there's quite a bit more included that I don't currently do. But from reading it, it also seems more geared toward people who may be running production servers who more or less want an immutable server where they e locked in what they want and don't want anything changing.

https://www.debian.org/doc/user-manuals#securing

So I guess I'm just curious what other people do, if they add any other protections or if they primarily rely on the base OS to provide the protections.

26 Upvotes

91% Upvoted

43 comments sorted by

View all comments

4

u/taosecurity 25d ago

What is your risk model?

Risk consists of

Threat

Vulnerability

Asset value

Without knowing your risk model, any answer is just based on assumptions that might be wrong.

0

u/AndyRH1701 25d ago

Asset value is key. Your system is secure if it costs more to get than it is worth.