\select@language {french} \contentsline {section}{\numberline {1}Introduction}{3} \contentsline {section}{\numberline {2}Installation et s\'ecurisation du syst\`eme}{3} \contentsline {subsection}{\numberline {2.1}Recommandations pour et apr\`es l'installation }{3} \contentsline {subsection}{\numberline {2.2}Pam et autres restrictions}{4} \contentsline {subsection}{\numberline {2.3}Installation d'un noyau}{8} \contentsline {subsection}{\numberline {2.4}Lilo et le BIOS}{9} \contentsline {subsection}{\numberline {2.5}Paquets et services inutiles}{10} \contentsline {subsection}{\numberline {2.6}Mise en place d'un firewall}{10} \contentsline {subsection}{\numberline {2.7}Mises \`a jour de s\'ecurit\'e}{14} \contentsline {section}{\numberline {3}Installation et configuration des services}{14} \contentsline {subsection}{\numberline {3.1}MySQL}{15} \contentsline {subsection}{\numberline {3.2}Apache}{15} \contentsline {subsection}{\numberline {3.3}Ssh}{17} \contentsline {subsection}{\numberline {3.4}Postfix}{18} \contentsline {section}{\numberline {4}Mise en place de prisons chroot}{19} \contentsline {subsection}{\numberline {4.1}Pr\'esentation de Makejail}{19} \contentsline {subsection}{\numberline {4.2}Configuration d'une prison chroot pour Apache}{20} \contentsline {subsection}{\numberline {4.3}Configuration d'une prison chroot pour MySQL}{22} \contentsline {section}{\numberline {5}Outils de surveillance du syst\`eme}{24} \contentsline {subsection}{\numberline {5.1}Aide}{24} \contentsline {subsection}{\numberline {5.2}Logcheck}{28} \contentsline {section}{\numberline {6}Conclusion}{29} \contentsline {section}{\numberline {7}Annexe}{30} \contentsline {subsection}{\numberline {7.1}Arborescence d'une prison chroot pour Apache}{30} \contentsline {subsection}{\numberline {7.2}Arborescence d'une prison chroot pour MySQL}{35}