Securing Pi

[cyberfantome]

I looked around a bit and didn't see a forum thread dedicated to this so if there is one, please excuse my Noobness. What things should a brand new Pi user do to secure his/her Pi ex. change Pi's password, disable root access to SSH, etc. I even read people suggesting to disable sudu in other linux threads. Thanks in advance.

[Tarcas]

For basic setup:
Create a new user account and disable the Pi account.
Optionally, set a password on the root account.
Set up sudo so that it requires a password.
Don't install any services that you don't need. If you do need services installed, lock those down individually.

Really, it's just like any other Linux machine. A google search for securing linux, or locking down linux will give you more tips. If you want to be specific, Debian Linux is very similar to Raspbian, so you could add Debian to your search terms and you'll find a lot more info than searching specifically for Raspbian or Raspberry Pi.

[alanwbaker]

cyberfantome, what environment is your PI in? If it's only exposed to your home subnet behind a firewall things are pretty simple. If it's exposed to the internet there are more considerations.

[pluggy]

Unless you've got a huge local LAN with a lot of untrusted users on it, just not giving the internet access to the Pi is probably all you need. Which is entirely different to not giving the Pi access to the Internet.