Linux Security & Hardening, The Practical Approach

Course details

Introduction

About Security

Tips & Tricks

Physical Security of a Linux Box

Overview of Physical Security

BIOS Firmware Security

Set BIOS Password

Single User Mode Security (RHEL6/7)

How to set password at Single User Mode

Securing Boot Loader

Section Summary

PAM (Pluggable Authentication Modules)

Overview of PAM Security

Concepts of PAM

PAM Modules & Configurations

PAM Module Groups

Control Flags in PAM

PAM Modules

Account Security

Overview of User Account Security

User Account Information

Forcing strong passwords

Pam_pwquality - Password strength-checking

Security by Account Locked

Account Locked using pam_faillock PAM module - Lab Session

Understanding Password Aging Policy

Practice Lab Session

File System Security

Overview of File & Directory Permission

Access mode

Change Permission & Ownership

ACL

Controlling files with ACL

ACLs demo

Practice Lab Session

General Security

Keep your system updated

Disable USB stick

Turn off IPv6

Restrict users to use old passwords

Check password expiration

Verify accounts for Empty password

Verify accounts for Zero UID

Review logs regularly

Keep /boot as read only

Network Security

Overview of Network Security

Openssh Security

Securing SSHD

Linux Firewall

Packet flow via firewall

Configuring the Firewall from the Command Line

Enable, Disable services at firewall

Port forwarding in firewall

Secure web server via firewall

Masquerading & port forwarding - Lab Session

Rich rules using firewalld

Implementing Mandatory Access Control with SELinux

How SELinux Can Benefit a Systems Administrator?

SELinux Security Concepts

SELinux Modes

SELinux Lab Session

Configuring SELinux Contexts

SELinux Booleans

Audit logs & Troubleshooting SELinux