ANSSI-BP-028 (minimal)

$ sudo yum install dnf-automatic

gpgcheck=1

gpgcheck=0

$ sudo subscription-manager register

$ sudo rpm --import /media/cdrom/RPM-GPG-KEY

sudo rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release

$ sudo yum update

$ sudo systemctl enable dnf-automatic.timer

$ sudo chage -M 180 -m 7 -W 7 USER

$ sudo chmod +t DIR

$ findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,)

$ sudo find MOUNTPOINT -xdev -nogroup 2>/dev/null

$ findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,)

$ sudo find MOUNTPOINT -xdev -nouser 2>/dev/null

$ sudo yum erase dhcp-server

$ sudo yum erase xinetd

$ sudo yum erase ypserv

$ sudo yum erase rsh-server

 $ sudo yum erase talk-server

$ sudo yum erase talk

$ sudo yum erase telnet-server

 $ sudo yum erase tftp-server