thoo-ma / born2beroot Goto Github PK

OS: Debian 11 (Bullseye)
__________________________________________________________

INSTALLED APT PACKAGES

- ufw
- sysstat (mpstat) --> monitoring CPU usage
- libpam-pwquality libpwquality-tools --> pam module
- sudo (man sudoers)
- net-tools (netstat) --> cf. screenshot `netstat.png`
- apparmor-utils (aa-genprof)
__________________________________________________________

USEFUL COMMANDS

passwords
- pwscore
- chage

users & groups
- id
- groups
- getent groups
- adduser (vs useradd !!!)
- deluser (vs userdel !!!)

cron
- crontab -l
- service cron [start|stop|restart]
- systemctl enable cron

ufw
- ufw status
- ufw status verbose
- ufw status numbered

ssh
- ssh-copy-id -i ~/.ssh/id_rsa.pub user@host

apparmor
- aa-status
- aa-genprof script.sh

To do during peer evaluation
- adduser
- addgroup evalated
- usermod -aG sudo user42 bob
- gpasswd --delete user group
__________________________________________________________

USEFUL FOLDERS

Users
- /etc/hostname --> rename hostname (need reboot)
- /etc/sudoers --> sudo policy

PAM
- /etc/pam.d/common-password --> password policy
- /etc/login.defs

cron
- /var/spool/cron/crontabs/ --> cron jobs

ssh
- /etc/ssh/sshd_config --> PermitRootLogin no, UsePAM yes

system
- /proc/meminfo --> memory infos
- /proc/stat --> CPU infos
__________________________________________________________

Login as root via ssh not allowed for two reasons:
- `PermitRootLogin no`
- `PasswordAuthentication no` and not `authorized_keys` into /root/.ssh
--> in /etc/ssh/sshd_config
__________________________________________________________