Securing an Ubuntu Server
I tend to find that minimalist OS's, such as plain Debian installed with no frills or OpenBSD tend to be better candidates for security sensitive machines.<p>Some of the utilities mentioned like Tiger haven't been updated in years.<p>No mention of chroot/jails/zones/etc, which can go a long way to nullifying intrusions when they happen, or integrity tools built into the system (using package managers to check for changed binaries, or checksum tools like like tripwire/AIDE/radmind)<p>While it does have some good points, it also strikes me as "cargo cult system administration", specifically "Following a security recipe": <a href="http://blog.lastinfirstout.net/2009/11/cargo-cult-system-administration.html" rel="nofollow">http://blog.lastinfirstout.net/2009/11/cargo-cult-system-adm...</a>