Forum › Forums › New users › New Users and General Questions › Safest advanced encryption settings and general hardening measures
- This topic has 3 replies, 2 voices, and was last updated Jun 28-9:49 pm by olsztyn.
-
AuthorPosts
-
June 27, 2021 at 10:39 pm #62428
Anonymous
Hello,
was trying AntiX 19.4 liveUSB and gladly noticed the advanced encryption settings.
I understand that a solid background of cryptography might be needed to fully appreciate them and that fooling with them might slower the system or end with a less strong encryption.
However, even acknowledging that it’s more often than not the threat/deception link being the weakest link, I’d like to know which settings would be technically the safest and how much drop of performance one might expect compared to standard options.Also, are there any other hardening measures that one might want to set after installation?
Could one installing a few packages and then set Home Persistence (to keep those packages and prevent further future system changes), as opposed to setting Root Persistence?Thank you
June 28, 2021 at 1:07 pm #62446Memberolsztyn
::However, even acknowledging that it’s more often than not the threat/deception link being the weakest link, I’d like to know which settings would be technically the safest and how much drop of performance one might expect compared to standard options.
Also, are there any other hardening measures that one might want to set after installation?
I am just a user interested in this topic and hoping antiX experts would address questions in your post, so just want to mention my modest (very limited) steps I have used towards hardening of my antiX Live instances:
– Running most Live instances encrypted, although with default settings of encryption.
– My antiX Live instance (all of them) are with no persistence, burned after setting up all software, configuration and customizations. If change is needed I just remaster after change.
– When setting up the initial version about a year ago admin authority lasted systemwide for 15 min after initial entering sudo password. I changed so it requires sudo password each time a privileged operation is executed.
– Another step I have not figured out yet would be using hardened kernels.These are just a few things I have resorted to in my attempt to harden antiX. Another option discussed in this forum previously was read-only configuration, but I have not done this.
Regards.
Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_ParametersJune 28, 2021 at 2:42 pm #62453Anonymous
::I see, thanks for your reply.
– My antiX Live instance (all of them) are with no persistence, burned after setting up all software, configuration and customizations.
How would you burn after setting up all software? Thank you
June 28, 2021 at 9:49 pm #62474Memberolsztyn
::How would you burn after setting up all software? Thank you
By ‘burning’ I meant remastering USB stick or USB hard drive, to make changes of software, configuration and customizations permanent. This antiX provides excellent Live tools and Remaster is one of these. With such excellent remaster I do not bother with persistence.
Regards.Live antiX Boot Options (Previously posted by Xecure):
https://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters -
AuthorPosts
- You must be logged in to reply to this topic.