Atao, meaning "the path" or "the way", is a system of guidelines or rules meant to achieve a desired end. Like any tao, security requires a structured, systematic approach. It also should be holistic, encompassing every part of a system's life span from planning to retirement. The tao in this article consists of five simple phases that every Linux system should pass through to establish a secure baseline. The phases are not a be-all, end-all formula for security. They merely provide a foundation on which to build deeper levels of security later. As I go through each phase, I will deploy two sample systems, a Red Hat Fedora desktop and a Debian server system, to show how security is implemented. I chose Fedora because it is arguably the most popular distribution out there. It works well for any purpose, has many desktop enhancements and is one of the easiest distributions for non-command-line Linux users to pick up. I chose Debian as our server platform because it is lightweight, has a long history of reliability, a great support community and extensive documentation. Both are excellent platforms and have their own unique security measures built in. If you have a different distribution preference, the phases presented here can be applied to any system.
展开▼
机译：Atao的意思是“道路”或“道路”，是旨在达到预期目的的准则或规则系统。像任何道家一样，安全性需要结构化，系统化的方法。它也应该是整体的，涵盖系统从规划到报废的整个生命周期。本文中的“陶”由五个简单阶段组成，每个Linux系统都应通过五个简单阶段来建立安全基准。对于安全性而言，阶段并不是万事通。它们只是为以后建立更深层次的安全性提供了基础。在每个阶段，我将部署两个示例系统，一个Red Hat Fedora桌面系统和一个Debian服务器系统，以展示如何实现安全性。我选择Fedora是因为它可以说是最受欢迎的发行版。它适用于任何目的，具有许多桌面增强功能，是非命令行Linux用户最容易使用的发行版之一。我选择Debian作为我们的服务器平台是因为它轻巧，具有悠久的可靠性历史，良好的支持社区和广泛的文档资料。两者都是出色的平台，并且内置了自己独特的安全措施。如果您有不同的发行偏好，则此处介绍的阶段可以应用于任何系统。
展开▼
