[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #13703 [Tor]: Adding doc/HARDENING
#13703: Adding doc/HARDENING
----------------------------------------------+----------------------------
Reporter: mmcc | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: Tor | Version: Tor:
Keywords: hardening, security, opsec, docs | unspecified
Parent ID: | Actual Points:
| Points:
----------------------------------------------+----------------------------
The two text files currently in the doc directory are doc/HACKING and
doc/TUNING. The latter is the only one that deals with relay operation,
and its subject is oddly specific: increasing the maximum number of file
descriptors. If we're going to put critical documentation in the codebase,
I think it would also be worthwhile to have a basic hardening guide. It
could include suggestions like:
* allowing only public key non-root SSH login
* using a firewall
* keeping your system up-to-date
* not running any other programs (especially networked ones)
* considering hardened or security-focused OS choices
Nick suggested that most of the actual information be contained in
referenced links, which I agree with. There's no good reason to duplicate
effort when there are, for example, so many good SSH hardening guides.
Let me know what you think, or if you have any contributions. If this is
generally considered a good idea, I can start writing a draft.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13703>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs