Linux Security & Hardening, The Practical Approach

Introduction
·        About Security
·        Tips & Tricks
 
Physical Security of a Linux Box
·        Overview of Physical Security
·        BIOS Firmware Security
·        Set BIOS Password
·        Single User Mode Security (RHEL6/7)
·        How to set password at Single User Mode
·        Securing Boot Loader
·        Section Summary
 
PAM (Pluggable Authentication Modules)
·        Overview of PAM Security
·        Concepts of PAM
·        PAM Modules & Configurations
·        PAM Module Groups
·        Control Flags in PAM
·        PAM Modules
 
Account Security
·        Overview of User Account Security
·        User Account Information
·        Forcing strong passwords
·        Pam_pwquality – Password strength-checking
·        Security by Account Locked
·        Account Locked using pam_faillock PAM module – Lab Session
·        Understanding Password Aging Policy
·        Practice Lab Session
 
File System Security
·        Overview of File & Directory Permission
·        Access mode
·        Change Permission & Ownership
·        ACL
·        Controlling files with ACL
·        ACLs demo
·        Practice Lab Session
 
General Security
·        Keep your system updated
·        Disable USB stick
·        Turn off IPv6
·        Restrict users to use old passwords
·        Check password expiration
·        Verify accounts for Empty password
·        Verify accounts for “Zero” UID
·        Review logs regularly
·        Keep /boot as read only
 
Network Security
·        Overview of Network Security
·        Openssh Security
·        Securing SSHD
·        Linux Firewall
·        Packet flow via firewall
·        Configuring the Firewall from the Command Line
·        Enable, Disable services at firewall
·        Port forwarding in firewall
·        Secure web server via firewall
·        Masquerading & port forwarding – Lab Session
·        Rich rules using firewalld
 
Implementing Mandatory Access Control with SELinux
·        How SELinux Can Benefit a Systems Administrator?
·        SELinux Security Concepts
·        SELinux Modes
·        SELinux – Lab Session
·        Configuring SELinux Contexts
·        SELinux Booleans
·        Audit logs & Troubleshooting SELinux