Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
hardening_enterprise_filefabric [2019_01_23 11:43] kamranhardening_enterprise_filefabric [2019_01_23 14:05] kamran
Line 48: Line 48:
  
  
 +As the root user edit the following file with the vi or nano editors:
 +<code>
 +vi /etc/ssh/sshd_config
 +</code>
  
-<TODO ADD instructions>+Find and replace the following line: 
 +<code> 
 +Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc 
 +</code> 
 + 
 +with 
 + 
 +<code> 
 +Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr 
 +</code>
  
 ===== Disable CloudFTP ===== ===== Disable CloudFTP =====
Line 61: Line 74:
 systemctl disable cloudftp systemctl disable cloudftp
 </code> </code>
 +
 +=====  Remove Apache HTTPD server Configuration ===== 
 +The icons directory is listed , this is not a security risk but some scanning tools can mark it as security risk. 
 +
 +As root remove the following file
 +
 +<code>
 +rm /etc/httpd/conf.d/autoindex.conf
 +systemctl restart httpd
 +</code>
 +