Security Strategies in Linux Platforms and Applications, 3rd Edition

Best Practices: Networked Filesystems and Remote Access

While it’s best to minimize the number of networked services on any one system, that may not be enough for a secure system. Ideally, all you need on a server is one networked service and an SSH server to administer that service remotely.

The vsftp service can be secured in a number of ways with respect to special directories, privilege management, timeouts, user lists, and more. While most vsftp options are configured in the vsftpd.conf file, users can be limited in the ftpusers and user_list files. When enabled, PAMs can further enhance vsftp security.

With Samba, a Linux system can take a role as a more secure Windows server. It can be configured as a PDC, as a standalone server, and ...