Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying CentOS System Administration Essentials
  • Table Of Contents Toc
CentOS System Administration Essentials

CentOS System Administration Essentials

By : Andrew Mallett
4.2 (13)
Buy this Book
close
close
CentOS System Administration Essentials

CentOS System Administration Essentials

4.2 (13)
By: Andrew Mallett
Buy this Book

Overview of this book

If you are a Linux administrator who is looking to gain knowledge that differentiates yourself from the crowd, then this is the book for you. Beginners who have a keen interest to learn more about Linux administration will also progress quickly with this resourceful learning guide.
Table of Contents (13 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Taming vi
Icon
1. Taming vi
Icon
CLI trickery – shortcuts that you will love
Icon
Vim and vi
Icon
Getting the .vimrc setup the way you like
Icon
Search and replace
Icon
Learning to remove extraneous comments from a file with a few deft key strokes
Icon
Summary
2
2. Cold Starts
Icon
2. Cold Starts
Icon
The GRUB and MBR
Icon
When is the root filesystem not the root filesystem?
Icon
Working on the GRUB console
Icon
Protecting the GRUB menu with passwords
Icon
Boot splashing with plymouth
Icon
Summary
3
3. CentOS Filesystems – A Deeper Look
Icon
3. CentOS Filesystems – A Deeper Look
Icon
A magician's secret
Icon
Special permissions
Icon
Naming your pipes
Icon
Understanding the command stat
Icon
Enterprise filesystem shootout
Icon
Using BTRFS snapshots
Icon
Summary
4
4. YUM – Software Never Looked So Good
Icon
4. YUM – Software Never Looked So Good
Icon
Managing software installation with RPM files
Icon
Creating your own RPM file
Icon
Creating a YUM Repository
Icon
Summary
5
5. Herding Cats – Taking Control of Processes
Icon
5. Herding Cats – Taking Control of Processes
Icon
Managing services with Upstart
Icon
Creating your own Upstart script
Icon
Managing processes
Icon
Summary
6
6. Users – Do We Really Want Them?
Icon
6. Users – Do We Really Want Them?
Icon
Managing public and private groups
Icon
Getent
Icon
Quotas
Icon
Scripting user creation
Icon
Summary
7
7. LDAP – A Better Type of User
Icon
7. LDAP – A Better Type of User
Icon
LDAP concepts
Icon
Installing 389-ds
Icon
LDAP user account management
Icon
LDAP authentication
Icon
Summary
8
8. Nginx – Deploying a Performance-centric Web Server
Icon
8. Nginx – Deploying a Performance-centric Web Server
Icon
Installing and configuring Nginx
Icon
Installing PHP
Icon
Installing MySQL
Icon
Create dynamic web content
Icon
Summary
9
9. Puppet – Now You Are the Puppet Master
Icon
9. Puppet – Now You Are the Puppet Master
Icon
Installing the Puppet master
Icon
Puppet resource
Icon
Managing packages, services, and files
Icon
Summary
10
10. Security Central
Icon
10. Security Central
Icon
Understanding PAM configuration files
Icon
Limits of PAM
Icon
SELinux
Icon
Hardening Linux
Icon
Summary
11
11. Graduation Day
chevron up
Icon
11. Graduation Day
Icon
Securing remote access to your system
Icon
Best practices of OpenLDAP
Icon
Best practices of Nginx
Icon
Mastering Puppet
Icon
What's new in CentOS 7
Icon
Summary
12
Index
Icon
Index

Best practices of Nginx

If you choose to implement the Nginx web server, there are few things that we should take a look at to endure the longevity of your web service.

From a security perspective, your web server could be accessible to the whole world, everyone. For this reason, we should ensure that some basic security threats are protected:

  • SELinux: Ensure that we have set SELinux to Enforcing on our CentOS system that hosts Nginx.
  • DocumentRoot: Mount the DocumentRoot structure independently as its own filesystem, ensuring that malicious writes will not crash the Linux host if the disk fills, and secondly the partition or disk can be mounted with minimal rights, for example, LABEL=web /var/www ext4 ro,nosuid,noexec,nodev,noatime 0 2.
  • Use a host-based firewall: Allow only incoming TCP ports 80 and 443. Often, only outgoing UDP port 123 along with outgoing dynamic TCP ports need to be open, with port 123 being for time synchronization.
  • Restrict HTTP methods available to Nginx. The RFC 2616...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
CentOS System Administration Essentials
End of Section 11
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon