ELS – Easy Linux Security

ELS stands for Easy Linux Security. ELS was created by the Server Monkeys Founder, Richard Gannon. ELS takes many of the tasks performed by our Administrators and puts it into an easy to use program for anyone to use. It is released under the GNU/GPL so it is free to use.

This program is always being improved with new features and bugfixes, so be sure to keep it up to date. If you found a bug or would like an improvement, please let us know! This program was made and is maintained in Rich’s free time (which isn’t often anymore). If you really like this program, donations are more than welcome! The only donation isn’t a monetary donation. If you have experience with coding in Linux Shell or other languages, anything you can add to improve this program is very welcome.

Supported Operating Systems

• Red Hat Linux 9
• Red Hat Enterprise Linux 3, 4
• Fedora Core 1, 2, 3, 4
• CentOS 3, 4

What ELS Does

• Install RKHunter
• Install RKHunter Cronjob which emails a user-set email address nightly
• Install/update APF
• Add SM/TP monitoring IPs (view information on these in Orbit)
• Install/update BFD
• Install CHKROOTKIT
• Install CHKROOTKIT Cronjob which emails a user-set email address nightly
• Disable Telnet
• Force SSH Protocol 2
• Secure /tmp
• Secure /var/tmp
• Secure /dev/shm
• Install/update Zend Optimizer
• Install/update eAccelerator
• MySQL 4.0 and 4.1 Configuration Optimization (cPanel only)
• Upgrade MySQL to 4.1 (cPanel only)
• Tweak WHM Settings for security and stability
• Configure RNDC if not already done (cPanel only)
• Change SSH port (also configure APF as necessary)
• Add wheel user and disable direct root login over SSH
• Optimize MySQL tables
• Install/update Libsafe
• Install/update ImageMagick (from latest source)
• Uninstall LAuS
• Harden sysctl.conf
• Install Chirpy’s Free Exim Dictionary Attack ACL
• And more!

To install ELS, simply run the following command as root:
wget --output-document=installer.sh http://servermonkeys.com/projects/els/installer.sh; chmod +x installer.sh; sh installer.sh