Linux Security Audit

10-point security check for Linux servers.

Quick Scan

# Open ports
ss -tlnp

# Failed SSH logins
grep "Failed password" /var/log/auth.log | wc -l

# Sudo users
grep -Po '^sudo:.*$' /etc/group

# World-writable files
find / -perm -2 -type f 2>/dev/null | wc -l

# Users with shells
cat /etc/passwd | grep -E '/(bash|sh|zsh)$'