Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1101262" data-attributes="member: 96560">There is also Ubuntu Security Guide ( usg ) . It configures Ubuntu automatically to satisfy some security best practices. But it does not work for Ubuntu 24 yet. So if you are using Ubuntu 22 or earlier you can try that. <a href="https://ubuntu.com/security/certifications/docs/usg" target="_blank">The Ubuntu Security Guide | Ubuntu</a> . It allows you to take one step towards&nbsp; being compliant to computer security regulations that apply towards your industry. Different industries have different regulations. For example there is the HIPAA for health care industry, and the PCI DSS that applies to anybody who accepts credit card payments. If you suffer a breach and did not do your due diligence you could lose the right to accept credit card payments which would be a big deal to merchants large or small.USG gives you a choice of implementing DISA (Defense Information System Agency) or the CIS (Center for Internet Security) configuration. They setup hundreds of hardening settings.I chose the DISA, You first do an audit comparing would be settings to the existing settings. This shows you which settings would be configured in addition to what you have now. Then you can tailor the settings that you don&#039;t need or want. You open the html audit report which gives you the setting names, and you edit the &#039;tailor.xml&#039; to turn off items. Then you apply your tailored configuration.</blockquote>

[QUOTE="Victor M, post: 1101262, member: 96560"] There is also Ubuntu Security Guide ( usg ) . It configures Ubuntu automatically to satisfy some security best practices. But it does not work for Ubuntu 24 yet. So if you are using Ubuntu 22 or earlier you can try that. [URL='https://ubuntu.com/security/certifications/docs/usg']The Ubuntu Security Guide | Ubuntu[/URL] . It allows you to take one step towards being compliant to computer security regulations that apply towards your industry. Different industries have different regulations. For example there is the HIPAA for health care industry, and the PCI DSS that applies to anybody who accepts credit card payments. If you suffer a breach and did not do your due diligence you could lose the right to accept credit card payments which would be a big deal to merchants large or small. USG gives you a choice of implementing DISA (Defense Information System Agency) or the CIS (Center for Internet Security) configuration. They setup hundreds of hardening settings. I chose the DISA, You first do an audit comparing would be settings to the existing settings. This shows you which settings would be configured in addition to what you have now. Then you can tailor the settings that you don't need or want. You open the html audit report which gives you the setting names, and you edit the 'tailor.xml' to turn off items. Then you apply your tailored configuration. [/QUOTE]

Verification