Chapter 15 – Securing Your Server

1. This stands for Common Vulnerabilities and Exposures, and is a database containing lists of known exploits and vulnerabilities for a given platform, along with scope of the issue and mitigation steps (if known)
2. Livepatch
3. jail.conf, jail.local
4. Disable password authentication, disable root login, place it behind a firewall, change the default port, set up an allowed users or groups list
5. The principle of least privilege refers to giving users only the permissions to resources they absolutely need for their job, thus limiting the scope if they make a mistake

6. netstat -tulpn
7. cryptsetup
8. Custom graphs, hardware information, reports, or any other feature not mentioned