Linux system security maintenance knowledge

Plan the partition of the Linux operating system in advance

The partition planning of the Linux operating system is different from the partitioning plan of the Microsoft operating system. The latter partition planning has little impact on its performance. However, the partitioning plan of the Linux operating system is different, which has a great impact on the performance of the server. In fact, I like to compare the partition of the Linux operating system to the tablespace planning in the Oracle database. The two of them have the same effect. The quality of the plan will directly affect the performance of its operation. And only need to make some adjustments during deployment, the impact on subsequent performance is very significant.

If I use the Linux operating system as a server, I will consider placing some special directories on different partitions, which will improve the performance and security of subsequent servers. For example, you can place the /tmp directory and the /home directory on different partitions; for example, you can place the /var and /usr directories on different partitions.

If hardware conditions permit, it is best to place the /var directory on a separate partition. Because these directories have their special uses and are used more frequently. If they are placed separately, the reading efficiency of the data can be improved, and the space contention between each other can be reduced.

In addition, the exchange partition needs special attention. The swap partition under the Linux operating system is like virtual memory under the Windows operating system. However, there are significant differences between the two under subsequent adjustments. For example, in the Windows operating system, if the virtual memory is not enough, you can adjust it in the system properties and advanced tabs. And even if this virtual memory is subsequently adjusted, the subsequent increased space has the same performance as the original space.

In the Linux operating system, if you find that the lack of virtual space affects the performance of the application, it will even affect the installation of the application. At this point, if you want to adjust, the process of adjustment is much more troublesome than the Windows operating system. If you need to reinstall the operating system or re-partition a hard disk from the hard disk to use as a swap partition.

However, if you divide a piece of space on the hard disk into virtual memory afterwards, the subsequent addition of the space will not be as efficient as the space specified during the installation process. For this reason, unless this Linux server is already in use, I would recommend expanding the number of swap partitions by reinstalling. Therefore, it is best to plan the work between the installation and deployment of Linux servers, preferably related partitions. The main thing to consider is to store those directories on different paths, how much swap partition space to set, and so on.

Normally, an experienced system administrator can plan this partition appropriately based on the application services to be deployed later. This is also a big difference between senior system engineers and rookie system administrators. Because the primary system administrator may only use the default configuration in the operating system. It is also possible to use this default configuration directly, but the performance of subsequent servers will be affected. After the partition is set, it is difficult to adjust later. Even if the adjustment is made, its performance is not as good as expected. Therefore, it is necessary to make a zoning plan in advance.

Turn off unneeded services on Linux systems

As with Windows systems, many services are started after the installation. Some of these services are required by the operating system or application. But some do not need to be activated. If it is started, it will bring certain security risks to the operating system. To do this, the system administrator needs to view the services it runs after deploying the Linux operating system. Then turn off some unwanted services as needed. To this end, system administrators must have the ability to determine which services are required and which services can be turned off. At this point, the system administrator can refer to the description of some applications and combine their own work experience to make judgments.

The content of Linux system security maintenance knowledge is introduced to everyone, I hope everyone has mastered it.