The Centos Secured LAMP Project
Step 1: First of all we need to import some RPM Keys:
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY*
yum -C grouplist
yum -C groupremove "GroupName"
chkconfig --level 123456 haldaemon off
chkconfig --level 123456 lvm2-monitor off
chkconfig --level 123456 messagebus off
chkconfig --level 123456 netfs off
chkconfig --level 123456 atd off
chkconfig --level 123456 psacct off
chkconfig --level 123456 rdisc off
chkconfig --level 123456 ip6tables off
chkconfig --level 123456 smartd off
chkconfig --level 123456 pcscd off
chkconfig --level 123456 readahead off
chkconfig --level 123456 readahead_early off
chkconfig --level 123456 rawdevices off
chkconfig --level 123456 anacron off
chkconfig --list | grep :on
anacron, crond, iptables, irqbalance, kudzu, mcstrans, network, readahead_early, restorecond, sshd, syslog, sysstat, yum-updatesd
yum -y upgrade
yum -y install wget bzip2 unzip zip fileutils gcc gcc-c++ ncurses-devel pam-devel libxml2-devel
libxslt-devel m4 flex byacc wget which
yum -y install pcre pcre-devel binutils autoconf automake libtool zlib lsof man man-pages mlocate quota rsync sysstat vixie-cron bzip2-devel
(32Bit) rpm -Uhv http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
(64Bit) rpm -Uhv http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS//rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm
nano -w /etc/modprobe.d/disableipv6.conf
Add line: alias net-pf-10 off
Add line: alias ipv6 off
Save
nano -w /etc/sysconfig/network
Change NETWORKING_IPV6=yes to NETWORKING_IPV6=no
yum -y install ntp
chkconfig --levels 235 ntpd on
ntpdate 0.pool.ntp.org
/etc/init.d/ntpd start
nano -w /etc/sysconfig/network
HOSTNAME=srv01.maxisecure.com
umask 077
shutdown -r now
There are 1 items tagged with binutils. You can view all our tags in the Tag Cloud