From Dgiref
Optimizing the configuration:
Use minimal operating system installation without firewall.
To verify installed packages use the command
-
rpm -qa | grep package_name
Install the following additional packages:
-
yum -y install wget yum rpm make gcc gcc-c++ tar sed zlib openssl
After the installation is complete, turn off any unnecessary services (like gpm, sendmail, cups, haldaemon, messagebus, pcmcia, anacron, atd) with the following command:
Configure the following settings for the server:
|
download administrator's script: note.sh |
#!/bin/sh
# Cleanup services
lv=12345
srvInstall="wget yum rpm make gcc gcc-c++ tar sed zlib openssl"
srvRemove="smartmontools pcsc-lite bluez-utils cups gpm"
srvOff="anacron atd auditd avahi-daemon cpuspeed cups gpm haldaemon ip6tables iptables \
iscsi iscsid iscsid kudzu lm_sensors mcstrans mdmonitor messagebus pcscd readahead_early \
resto recond rpcgssd rpcidmapd xfs yum-updatesd gpfs lvm2-monitor nfslock portmap firstboot \
jexec restorecond sendmail setroubleshoot"
srvStop="acpid apmd bluetooth cpuspeed gpm microcode_ctl pcscd smartd irqbalance mdmonitor"
function cleanup { # $1 - list of services
# $2 - action
# $3 - param
for service in $1; do
case $2 in
srvOff)
chkconfig --level $3 $service off;
chkconfig --list $service;
echo "Off the "$1
;;
srvStop)
chkconfig $svc off;
service $svc stop;
echo "Stop the "$1
;;
*)
echo "Nothing to do"
;;
esac
done
}
cleanup $srvOff srvOff $lv
cleanup $srvStop srvStop
echo "Remove the "$srvRemove
yum -y remove $srvRemove
echo "Install the "$srvInstall
yum -y install $srvInstall
# security updates
yum update