wiki/wiki/linux/system-hardening.md

System Hardening

System security is an important aspect of configuration. It will make it harder for attackers to get a hold of your system and private data.

Analysis Tools

• lynis: run lynis audit system to get a list of security flaws of your system
• arch-audit is a tool to find vulnerabilities known to the Arch Security Team.
• aur-malware-check is a tool to check if the system uses packages from the AUR.

Specific Steps to Harden a System

The following points are steps that harden a system.

• For OpenSSH enable hybrid post-quantum key exchange algorithms as described in the corresponding entry. Using hybrid post-quantum-safe key exchange methods reduces the risk of so called "store-now, decrypt-later" attacks.