domains / families / security / linux-hardening

linux-hardening

combined

Apply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements. Apply CIS benchmarks and secure Linux servers.

When to use

• Hardening production servers
• Meeting compliance requirements
• Implementing security baselines
• Configuring secure SSH access

When not to use

• Apply guidance only within authorized scope; test destructive steps in non-production first.
• Docs-only import: upstream scripts and templates not bundled.

Skill page

Conflict

The second copy is a safety-hardened adaptation of the first. It preserves the same core hardening steps (SSH, users, firewall, kernel, permissions, audit) but adds material constraints the first lacks: a Target and recovery section, explicit warnings against applying default-deny firewall rules before verifying management access, safer sudoers editing via visudo fragments, -xdev on find commands, and a Limitations section. The first copy contains a specific AllowUsers list and a direct sysctl -p command that the second generalizes or qualifies. Because the second copy adds real operational safety steps and the first contains a concrete configuration example, crowning one would hide either the safety constraints or the concrete defaults.