Securing an Ubuntu Server
I tend to find that minimalist OS's, such as plain Debian installed with no frills or OpenBSD tend to be better candidates for security sensitive machines.Some of the utilities mentioned like Tiger haven't been updated in years.No mention of chroot/jails/zones/etc, which can go a long way to nullifying intrusions when they happen, or integrity tools built into the system (using package managers to check for changed binaries, or checksum tools like like tripwire/AIDE/radmind)While it does have some good points, it also strikes me as "cargo cult system administration", specifically "Following a security recipe": http://blog.lastinfirstout.net/2009/11/cargo-cult-system-adm...