Lynis hardening on qubes?

General Discussion
21

as a option

22

yes… that would be great!

23

what’s about setting umask, to get stricter rights?

And whats about DCCP, SCTP, RDS, TIPC net protocols? They seem to be not disabled.

24

i think no

not sure about the important of protocols, but it seem not used much so you can disable it

25

and why no for umask 027, does it have to do with qubes structure?

by the way, why does lynis shows that I have an apache webserver? no apache service is running

26

ah, i bad at reading file permission like that, it is -rw-r-----
if so, don’t do that

idk, that weird

27 
[+] Software: webserver
------------------------------------
  - Checking Apache (binary /usr/sbin/httpd)                  [ FOUND ]
      Info: Configuration file found (/etc/httpd/conf/httpd.conf)
      Info: No virtual hosts found
    * Loadable modules                                        [ FOUND (106) ]
        - Found 106 loadable modules
          mod_evasive: anti-DoS/brute force                   [ NOT FOUND ]
          mod_reqtimeout/mod_qos                              [ FOUND ]
          ModSecurity: web application firewall               [ NOT FOUND ]
  - Checking nginx                                            [ NOT FOUND ]

I suppose it comes with standard installation of fedora 33, but how can i get rid of that?

027 is rwx for user / rx for group / nothing for others

1 Like
28

try google ‘apache uninstall fedora’ (it quite complex)

no no no, this is bad. only use this if it home folder of that user

29

hmm… ok, thanks!

#Edit: I got it to 70 points… nice