DONT RUN THIS!!!

Auditing Linux

Ubuntu Security FROM CYBERPATRIOT

Updating Ubuntu

Ubuntu 14.04

Install/Update/Delete Applications

List Applications

Remove Application

Update Application

Undo

Useful Stuff

Finding all files (including hidden) in all Documents folders

Password Settings

Secure SSH

SELinux

Ubuntu 16.04

Find some information

To find out all services that have been run at startup:

systemctl list-units --type service

this will show all services that has been loaded at boot and are active now. If you want to get a list of all services no matter they are active or not:

systemctl list-units --type service --all

Another thing you can do is to run:

systemctl list-dependencies --type service

then hit / and search for mongodb see what service/target depends on it and runs it.

Also you can run :

locate mongodb.service

Which produces something like:

/lib/systemd/system/multi-user.target.wants/mongodb.service

then you will know that it's being started as a part of multi-user target, alternative to this is:

$ systemctl cat mongodb.service | grep -i wantedby
WantedBy=multi-user.target

Disable it

To find out that if it's active (Will be run at startup/boot-time):

systemctl is-active mongodb

It's either active or inactive; In your case it should be active.

To stop it from being started at boot time we should disable it:

sudo systemctl disable mongodb

And to make sure nothing else (No other service) can start it, we mask it:

systemctl mask mongodb

so it will be linked to /dev/null and can't be started automatically or manually anymore.

Services By Default

• Read ALL of the official training modules. I know you said you read this in your answer, but you did not list PAM as something you did, so look into that.
• Learn how to list open ports and find the programs running at those open ports. The firewall really helps with this, look at this answer.
• Learn how to disable unnecessary services.
• Learn how to look for malicious files, including hidden files.
• Learn how to look at and get rid of CRON jobs. (The first answer that was linked above also talks about this.)
• Learn how to secure services like SSH, Apache2, and VSFTPD by going through their config files and setting the "safe"/"preferred" options.

For securing OpenSSH, I found these tutorials:

• https://www.cyberciti.biz/tips/linux-unix-bsd-openssh-server-best-practices.html
• https://help.ubuntu.com/community/SSH/OpenSSH/Configuring

For securing Apache, specifically PHP, I found these tutorials:

• https://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html
• http://www.madirish.net/199

You can grind through the previously installed packagers (from before you got the image) in The Ubuntu Software Center > History and combine that with packages.ubuntu.com to see what everything is.