Security Questions

Hi

I am new on OpenSuse, have heteroclit linux knowledges.

Try to take care of the security aspects to use it at work.

At the moment I am working with Debian and want to switch to Opensuse Leap.

That is what I want to do:

  1. Cancel root account and have an admin and a user account with dedicated rights.

  2. Configure my firewall : could some body give me a link for a good explanation of Opensuse Firewall settings? (I am using Cockpit)

  3. I used tu install auditd, chrootkit, and was trying to manage suricata on Debian. Do I need to do it with opensuse?

  4. At the moment I make Rsync copies of my data to a external hard disk and we will soon have a dedicated server for that. (That is a pitty since the worst security issue for me would be to loose my data, think I will buy a second HDD to be quiet).

  5. How to manage SELinux?

  6. If use full disk encryption at the installation, how can I give to my IT service a rescue key (in case I lose my password)

I realize that is a lot of questions.

Any help appreciated.

Have a good Evening

Cockpit does include a basic firewall module, but openSUSE itself uses Firewalld as its firewall backend. Cockpit’s plugin is fine for simple tasks (opening a port, enabling/disabling the firewall, etc.), but anything more advanced is normally done using firewalld’s own tools: firewall-cmd (CLI) and firewall-config (GUI).

If you’re not already familiar with Firewalld, I suggest reading the official documentation first:

Unfortunately, the cockpit documentation is still rather limited (and without screenshots that might have been useful), but I’m sure that anyone who has a basic understanding of Firewalld will be able to navigate it without too much trouble:

https://cockpit-project.org/guide/latest/feature-firewall

You cannot. You can lock root account so it will be impossible to directly log into it. That happens by default if you decide to create a user during the installation.

Define what “dedicated rights” means.

Yes. And each question needs its own topic.

As for question number 5 there is some documentation on SELinux here:
SELinux

Thanks to you all. :+1: