Open

Best security practices in Linux

What security quality practices could you strongly suggest in preserving a Linux server?

(i.E. Deliver up a firewall, disable pointless offerings, watch out for suid executables, and so on.)

Also: is there a definitive reference on SELinux?

Edit: yes, I'm making plans to position the system on the internet, with at the least OpenVPN, ssh, and apache (in the intervening time, without dynamic content material), and to provide shell get admission to to a few human beings.