diff options
| author | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-12-09 13:58:13 -0600 |
|---|---|---|
| committer | A. Wilcox <AWilcox@Wilcox-Tech.com> | 2018-12-09 13:58:13 -0600 |
| commit | 07025f8e0741ce7bff0ee09159ebf142f676ef51 (patch) | |
| tree | 854d720a5023aae580a9658c9c01a22a79f1867a | |
| parent | cd95dda873e81a0ff7924f590a00c2d8965c8aa3 (diff) | |
| download | docs-07025f8e0741ce7bff0ee09159ebf142f676ef51.tar.gz docs-07025f8e0741ce7bff0ee09159ebf142f676ef51.tar.bz2 docs-07025f8e0741ce7bff0ee09159ebf142f676ef51.tar.xz docs-07025f8e0741ce7bff0ee09159ebf142f676ef51.zip | |
Admin: ch06: fill in more
| -rw-r--r-- | src/admin/6_security.xml | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/admin/6_security.xml b/src/admin/6_security.xml index 0cc2649..18c16bd 100644 --- a/src/admin/6_security.xml +++ b/src/admin/6_security.xml @@ -3,6 +3,11 @@ <title>Security</title> <highlights><para>In this chapter, we will review best practices for keeping your Adélie Linux systems secure.</para></highlights> <section> + <title>Introduction to computer security</title> + <para>No one book can teach you everything about computer security. Computer security is not simply an item on a list that must be done once and then it is "completed". Computers are very powerful tools, and just as they can be used to teach, create, and produce, they can also be used for more nefarious purposes. By taking a proactive approach to computer security, and treating it as a process, you will be much more successful in keeping the security, confidentiality, and integrity of your data intact.</para> + <para>The suggestions in this handbook are a starting point to help you develop an actionable plan to keep your computer secure. They are by no means exhaustive. Remember to always keep learning; knowledge is power.</para> + </section> + <section> <title>APK</title> <itemizedlist> <listitem><para>Only use repositories and mirrors with HTTPS.</para></listitem> @@ -10,4 +15,11 @@ <listitem><para>Ensure any custom or third-party repositories have high-grade signature keys and that you trust the developers.</para></listitem> </itemizedlist> </section> + <section> + <title>Services</title> + <itemizedlist> + <listitem><para>If a service is only being used in your internal network, make sure it is configured to only accept connections from that network. This reduces the chance that an external attacker from the Internet can connect to it.</para></listitem> + <listitem><para>Keep track of best practices for the services you run. The service's documentation is likely to contain good advice for security.</para></listitem> + </itemizedlist> + </section> </chapter> |