View Single Post
  #47  
Old April 27th, 2012, 06:24 PM
Hungry Man's Avatar
Hungry Man Hungry Man is offline
Incredibly Massive Poster
 
Join Date: May 2011
Posts: 8,486
Default Re: Your Linux Desktop Security Setup

Network
DDWRT Router running recommended build - Remote Access disabled
DDWRT firewall turned on
OpenDNS with DNSCrypt

Realtime Protection
No AV running.
All ports closed - no need for a firewall.

System Hardening -- Ubuntu 12.04 Kernel 3.3.X Optimized for i5 CPUs
Pax + Grsecurity, custom kernel with custom settings.
As few programs installed as possible.
BIOS Password
Apparmor Enabled - Profiles for all programs
RBAC Enabled - System Wide, locked down user + root


Browser -- Chrome Dev
Seccomp Sandbox + Default Sandbox + AppArmor
Block 3rd Party Cookies
Built in malware protection
Default PDF reader -- no adobe necessary
Adblock Plus with DNT
HTTPS Everywhere

A "private" profile with more aggressive privacy/ data settings.

Chrome Privacy Profile
No cookies/ no data sent to Google
Block form validation
ScriptNo with strict settings

Chrome's cache is on a RAMDisk with low deny execute chmod.
__________________

Last edited by Hungry Man : April 30th, 2012 at 11:44 PM.