The master may want to learn the necessary optimization summary of the foundation.
1. Close selinux
two。 Prohibit ssh from using root connection, change ssh port, and forbid login with empty password
3. Managing General user Authorization with sudo Control: privilege minimization
4. Configure Boot self-boot sshd network rsyslog crond sysstat
5. Configure yum Feed
6.ntp time synchronization
7. Enlarge the file descriptor
8. Kernel tuning
9. Lock the key file / etc/passwd / etc/shadow / etc/group / etc/gshadow / etc/inittab
10. Minimize installation system
11. Change character set: zh_CN.UTF-8 (/ etc/sysconfig/i18n) environment variable: LANG
12 it is clear that the system has no users
13 clear version information, etc/issue
14grub menu encryption
15 prohibit ping from hiding targets
16 dozen patches: yum update-y: only newly installed systems need to be updated
17histrory
