<li>

To protect the server it is important to audit the open ports on the machine. To check listening ports you can run

netstat -tulpn

<li>

[http://selinuxproject.org/page/Main_Page| Security Enhanced Linux(SELinux)] is a kernel level security control mechanism, which enforces a set of rules and procedures for the system. SELinux provides fine grained control for access rights and permissions.

To check if it is enabled run

sestatus

To enable run

setenforce enforcing

To adjust the SELinux config is available at

/etc/selinux/config

</li>