Written by Bryan Harris the 5 May 09 at 17:18.

Various easy things to do:
- Check to see if the firewall is running: sudo ufw status
- Maybe check for iptables directly?
- Look for processes listening: lsof -i|grep -i listen
- Look for SUID root applications which shouldn't be and fix them.
- Look for default passwords or weak passwords, especially on anything that could become web facing.
- Check to see if the user is running as root explain how to fix it.
- Run something like chkrootkit and grep for problems. (sanitize for new users)
- Run rkhunter and look for problems. (sanitize for new users)
- Run clamav and look from problems
- etc, etc, etc

I think I could hack this together in a few hours for a prototype, but want some feedback.

Various easy things to do: - Check to see if the firewall is running: sudo ufw status - Maybe check for iptables directly? - Look for processes listening: lsof -i|grep -i listen - Look for SUID root applications which shouldn't be and fix them. - Look for default passwords or weak passwords, especially on anything that could become web facing. - Check to see if the user is running as root explain how to fix it. - Run something like chkrootkit and grep for problems. (sanitize for new users) - Run rkhunter and look for problems. (sanitize for new users) - Run clamav and look from problems - etc, etc, etc I think I could hack this together in a few hours for a prototype, but want some feedback.