Linux System Hardening with Lynis
Hardened a SANS SIFT Ubuntu 20.04 workstation to reduce unnecessary exposure and document how each change affected the system's security posture.
- Audited the workstation with Lynis and documented before-and-after scans
- Configured UFW, hardened OpenSSH, enforced a PAM password policy, and enabled unattended security updates
- Disabled unused filesystem modules and mapped the changes to the CIA triad
- Linux
- Ubuntu
- Lynis
- UFW
- OpenSSH
- PAM
Documentation in progress