-
Permissions on
/etc/shadow
should allow onlyroot
read and write access. -
Permissions on
/etc/gshadow
should allow onlyroot
read and write access. -
Permissions on
/etc/group
should allowroot
read and write access, and allow everyone else read access only. -
Permissions on
/etc/passwd
should allowroot
read and write access, and allow everyone else read access only.
-
Add user accounts for
sam
,joe
,amy
,sara
, andadmin
. -
Ensure that only the
admin
has general sudo access.
-
Add an
engineers
group to the system. -
Add users
sam
,joe
,amy
, andsara
to the managed group. -
Create a shared folder for this group at
/home/engineers
. -
Change ownership on the new engineers' shared folder to the
engineers
group.
-
Provide a report from the Lynis output on what can be done to harden the system.
- Command to install chkrootkit:
- Command to see documentation and instructions:
- Command to run expert mode: