Introduction

·        About Security

·        Tips & Tricks

Physical Security of a Linux Box

·        Overview of Physical Security

·        BIOS Firmware Security

·        Set BIOS Password

·        Single User Mode Security (RHEL6/7)

·        How to set password at Single User Mode

·        Securing Boot Loader

·        Section Summary

PAM (Pluggable Authentication Modules)

·        Overview of PAM Security

·        Concepts of PAM

·        PAM Modules & Configurations

·        PAM Module Groups

·        Control Flags in PAM

·        PAM Modules

Account Security

·        Overview of User Account Security

·        User Account Information

·        Forcing strong passwords

·        Pam_pwquality - Password strength-checking

·        Security by Account Locked

·        Account Locked using pam_faillock PAM module - Lab Session

·        Understanding Password Aging Policy

·        Practice Lab Session

File System Security

·        Overview of File & Directory Permission

·        Access mode

·        Change Permission & Ownership

·        ACL

·        Controlling files with ACL

·        ACLs demo

·        Practice Lab Session

General Security

·        Keep your system updated

·        Disable USB stick

·        Turn off IPv6

·        Restrict users to use old passwords

·        Check password expiration

·        Verify accounts for Empty password

·        Verify accounts for “Zero” UID

·        Review logs regularly

·        Keep /boot as read only

Network Security

·        Overview of Network Security

·        Openssh Security

·        Securing SSHD

·        Linux Firewall

·        Packet flow via firewall

·        Configuring the Firewall from the Command Line

·        Enable, Disable services at firewall

·        Port forwarding in firewall

·        Secure web server via firewall

·        Masquerading & port forwarding - Lab Session

·        Rich rules using firewalld

Implementing Mandatory Access Control with SELinux

·        How SELinux Can Benefit a Systems Administrator?

·        SELinux Security Concepts

·        SELinux Modes

·        SELinux – Lab Session

·        Configuring SELinux Contexts

·        SELinux Booleans

·        Audit logs & Troubleshooting SELinux