LINUX Security

This test validates your knowledge of the following topics:

• Securing software
• Detecting and removing unnecessary software
• Securing DNS, HTTP, NFS, Samba and SSH
• Restricted shells for daemons such as git, ftp and apache.
• Stopping brute-force attacks with fail2ban
• Hardening tools (Bastille Linux, Lynis, AFICK and others)
• User control
• The login procedure
• Setting up password policies
• Checking passwords with password cracking tools
• Handling inactive users
• The PAM (Pluggable Authentication Module) system
• Controlling root access to the system
• Setting up OPIE one-time passwords using S/KEY
• Configuring sudo
• Securing file systems
• Encrypted file systems (EncFS, TrueCrypt, dm-crypt and loop-aes)
• Understanding and configuring SELinux (Security-Enhanced Linux)
• The AppArmor kernel module
• Monitoring

Overview of various IDSs (intrusion detection software)

Black-box scanning with nmap