Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any complete Ubuntu server hardening document which will suffice ISO 27001 or PCI DSS or any other security standard.

share|improve this question
Is what you are looking for, or do you need something more advanced? – htorque Jan 9 '12 at 13:05
A little more research in the question would be appreciated. – viyyer Jan 9 '12 at 14:56
"server security" is a broad topic, is sort of depends on which server. Whole books have been written about apache security, mod_security, apparmor, etc. It is overwhelming at first, but you need to start and keep on reading. – bodhi.zazen Jan 9 '12 at 17:05
Thanks for the response. I m looking for production server security hardening which will suffice ISO 27001 or PCI DSS or any other security standard. – Tapas Jan 10 '12 at 6:39
@Tapas Please edit your question to provide a better scope. Saying "how do I secure my server" is too vague to be answerable. Use the Edit button to include actionable items, links and references to any ideas you're looking to implement, etc – Marco Ceppi Jan 10 '12 at 20:04

I don't know of any official ubuntu server hardening document, but hopefully the following will give you a good starting point:

NIST (National Institute of Standards and Technology) publishes guidelines on how to secure *nix systems. This is what the big boys use as a starting point (DOD, Army, Etc.).

Also check out this SANS institute paper. This list is also a good rule of thumb.

You can use tools like Nessus, OpenVAS, and other vulnerability scanners to give you an idea of what ports and services need to be shut down, as well.

The National Vulernability Database is a good site to cross reference your software configuration against, as well.

If you are trying for compliance with ISO 27001, Then ISO should have documentation and checklist for this sort of thing (although it's a B*tch to look through).

Sorry if this is too general, I hope it helps.

share|improve this answer

The above answer is a great one, but my only personal preference is the CIS Debian Hardening Guide that can be found at:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.