Top Security tips for Linux

Out of the box, a Linux desktop is far more secure than most others. But this level of security doesn’t necessarily involve typical security-focused software or techniques. Sometimes, the easiest means to security are those measures that are the easiest to forget. Let’s take a look at 10 things you can do to secure a Linux desktop.Note that we’re talking about the desktop, not a server. Linux server security is another beast all together — one that would confuse the average desktop user.

10 ways to secure your Linux desktop

#1: Locking the screen and logging out is important

#2: Hiding files and folders is a quick fix

#3: A good password is a must

#4: Installing file-sharing applications is a slippery slope

#5: Updating your machine regularly is a smart thing

#6: Installing virus protection is actually useful in Linux

#7: SELinux is there for a reason

#8: Creating /home in a separate partition is safer

#9: Using a nonstandard desktop is worth its weight in gold

#10: Stopping services is best

via techrepublic

10 Basic Linux Security Tips to Implement

Avoid doing your regular jobs when you are logged in as root.

If possible, always try to use encrypted connections to work on a remote machine.

Avoid using authentic method based on ip address alone.

Try to keep the most important network-related packages up-to-date and subscribe to the corresponding mailing lists to recieve announcements on new versions of programs such as bind, postfix, and ssh.

Disable any network services you do not absolutely require for your server to wok properly.

RPM packages from SUSE are digitally signed.

Check your backups of user and system files regularly.

Check your log files. Whenever possible, write a small script to search for suspicious entries.

Use firewall to enhance the security provided by tcpd (tcp wrapper)

Design your security measure to be redundant.

via linuxhaxor

More Linux Security Tips

BIOS Security
Always set a password on BIOS to disallow booting from floppy by changing the BIOS settings. This will block undesired people from trying to boot your Linux system with a special boot disk and will protect you from people trying to change BIOS feature like allowing boot from floppy drive or booting the server without password prompt.

full story via faqs