Lucent CM security hardening

Lucent CM security hardening
		GO

This topic describes the steps to increase security on the Lucent CM system.

You can increase security levels in the Lucent CM by making the following changes to address vulnerabilities.

Restrict SSH to SSH version 2 only.

Use a stronger encryption algorithm for SSH.

Close ports that are not required.

Important! After you made a change, you must reboot the operating system for the change to take effect.

You can also make multiple changes and reboot once, after you completed making the last change.

You can perform the procedure on one of the following moments:

During initial installation of the Lucent CM system

On an existing running Lucent CM system

Important! The procedures must be performed on all Lucent CM nodes.

Perform the following steps:

Go to the directory where the ssh_config file is located.

Type the following command and press Enter:

cd /etc/ssh

Open the ssh_config file.

Replace line:

#   Protocol 2,1

By line:

#   Protocol 2

End of steps

Perform the following steps to change to a stronger encryption algorithm:

Go to the directory where the ssh_config file is located.

Type the following command and press Enter:

cd /etc/ssh

Open the ssh_config file.

Replace line:

#   Cipher 3des

By line:

#   Cipher blowfish-cbc

End of steps

Perform the following steps to close ports on the Lucent CM nodes:

1	Login to the Lucent CM node as root.
2	Close port 6000: Go to the directory where the startx file is located. Type the following command and press Enter: `cd /usr/X11R6/bin` Open the startx file. Replace line: `defaultserverargs=""` by line: `defaultserverargs="-nolisten tcp"` Replace line: `serverargs=""` by line: `serverargs="-nolisten tcp"` Go to the directory where the Xservers file is located. Type the following command and press Enter: `cd /etc/X11/xdm` Open the Xservers file. Replace line: `":0 local /usr/X11R6/bin/X"` by line: `":0 local /usr/X11R6/bin/X -nolisten tcp"`
3	Close port 631: Type the following command and press Enter: `setup` Select System servcies Stop the following automatically started services: cups cups-lpd
4	Close port 445: Type the following command and press Enter: `setup` Select System servcies Stop the following automatically started services: SMB
5	Close port 111: Type the following command and press Enter: `setup` Select System servcies Stop the following automatically started services: portmap End of steps

Perform the following steps to reboot the operating system for the change to take effect:

Type the following command and press Enter:

reboot

End of steps

		GO
© Lucent Technologies