CentOS VM "template"

installed packages

Jul 06 15:39:23 Installed: 1:emacs-nox-24.3-11.el7.x86_64
Jul 06 21:54:26 Installed: yum-utils-1.1.31-29.el7.noarch
Jul 08 18:28:37 Installed: tmux-1.8-4.el7.x86_64
Jul 08 23:21:15 Installed: git-1.8.3.1-4.el7.x86_64
Jul 08 23:23:21 Installed: 2:vim-enhanced-7.4.160-1.el7.x86_64
Jul 08 23:25:04 Installed: epel-release-7-5.noarch
Jul 08 23:28:27 Installed: etckeeper-1.18.1-1.el7.noarch
Jul 08 23:43:26 Installed: mlocate-0.26-5.el7.x86_64
Jul 08 23:56:26 Installed: fail2ban-0.9.2-1.el7.noarch
Jul 09 00:02:02 Installed: logcheck-1.3.15-2.el7.noarch
Jul 09 10:57:00 Installed: ksh-20120801-22.el7_1.1.x86_64
Jul 09 13:19:37 Installed: compat-libcap1-1.10-7.el7.x86_64
Jul 09 13:22:45 Installed: compat-libstdc++-33-3.2.3-72.el7.x86_64
Jul 10 12:23:38 Installed: shorewall-4.6.4.1-1.el7.noarch
Jul 10 12:48:54 Installed: fail2ban-shorewall-0.9.2-1.el7.noarch
Jul 13 15:02:50 Installed: glibc-2.17-78.el7.i686
Jul 13 15:08:43 Installed: policycoreutils-python-2.2.5-15.el7.x86_64
Jul 15 17:31:33 Installed: wget-1.14-10.el7_0.1.x86_64
Jul 15 17:32:30 Installed: lgtoman-8.2.0.1-1.x86_64
Jul 15 18:41:11 Installed: 32:bind-utils-9.9.4-18.el7_1.1.x86_64
Jul 21 13:53:36 Installed: open-vm-tools-9.4.0-6.el7.x86_64

modifications to config files

• chrony.conf
  • disable server mode
• postfix/main.cf
  • standard smarthost configuration
• .gitattributes
  • disable diff for security-sensitive files
• resolv.conf
  • use HIZ nameserver
• shorewall/*
  • simple firewall: only allow SSH from the outside (and the backup service from 10.1.64.*)

new files

• cron.daily/notify_updates
• cron.daily/warn_unmerged_config
  • misc. notification scripts
• fail2ban/jail.d/local.conf
  • local fail2ban configuration
• logcheck/ignore.d.server/local.messages
• logcheck/ignore.d.server/local.secure
  • local logcheck rules
• fail2ban/jail.conf
  • straightforward ssh jail configuration using shorewall to block