Securing a Ubuntu based system.

meglome

We have a controller unit for our product which is an Ubuntu 14.04 LTS based system that runs an nginx web server to talk to the client systems. It all runs using php and java via a kiosk web browser on the system. There are two users, admin which has the php and java files etc and the customer user which loads up with the web browser (plus the www user).

What we're trying to do is secure this system so that it's as difficult as humanly possible to get access to the files or copy these files.

We'd also be interested in how best to manage the packages on each system remotely.

Happy to pay someone to help who has the expertise.

deconduo

meglome wrote: »

We have a controller unit for our product which is an Ubuntu 14.04 LTS based system that runs an nginx web server to talk to the client systems. It all runs using php and java via a kiosk web browser on the system. There are two users, admin which has the php and java files etc and the customer user which loads up with the web browser (plus the www user).

What we're trying to do is secure this system so that it's as difficult as humanly possible to get access to the files or copy these files.

We'd also be interested in how best to manage the packages on each system remotely.

Happy to pay someone to help who has the expertise.

A good start would be to look at the CIS guidelines:

https://benchmarks.cisecurity.org/tools2/linux/CIS_Ubuntu_14.04_LTS_Server_Benchmark_v1.0.0.pdf

meglome

deconduo wrote: »

A good start would be to look at the CIS guidelines:

https://benchmarks.cisecurity.org/tools2/linux/CIS_Ubuntu_14.04_LTS_Server_Benchmark_v1.0.0.pdf

That's helpful thanks.