Implementación de hardening en sistemas operativos : Implementación de hardening en fedora con cis.

Abstract

The current degree research focused on the design and strengthening of a secure environment, applying hardening in Fedora Server 39 with the CIS guidelines, focusing on the configuration of a mail server. The first section includes the description of the project and the objectives to be achieved. Subsequently, there is the methodology with the steps to follow to obtain the general objective. The second section consisted of the analysis and evidence of vulnerabilities. The third section consisted of the installation of a Postfix mail server together with Dovecot, mailx, and the Openscap scanning tool, which allowed us to reveal a first report of vulnerabilities. It was based on the process of evaluating and remediating the vulnerabilities presented by the operating system whose guidelines are established in their entirety by CIS. The remediation process was then established, hardening the Fedora Server 39 server operating system. The reports were then generated using the Openscap tool, which exhibited exhaustive control of all the vulnerabilities inherent to the system. This entire process was meticulously documented, providing a comprehensive view of the corrective measures applied at each stage of the project. The fourth section contains the conclusions and recommendations generated in this degree project.