Book Image

Practical Linux Security Cookbook

By : Michael A Lindner, Tajinder Kalsi
Book Image

Practical Linux Security Cookbook

By: Michael A Lindner, Tajinder Kalsi

Overview of this book

With the growing popularity of Linux, more and more administrators have started moving to the system to create networks or servers for any task. This also makes Linux the first choice for any attacker now. Due to the lack of information about security-related attacks, administrators now face issues in dealing with these attackers as quickly as possible. Learning about the different types of Linux security will help create a more secure Linux system. Whether you are new to Linux administration or experienced, this book will provide you with the skills to make systems more secure. With lots of step-by-step recipes, the book starts by introducing you to various threats to Linux systems. You then get to walk through customizing the Linux kernel and securing local files. Next you will move on to manage user authentication locally and remotely and also mitigate network attacks. Finally, you will learn to patch bash vulnerability and monitor system logs for security. With several screenshots in each example, the book will supply a great learning experience and help you create more secure Linux systems.

Related Content you might be interested in

Current Title:

Small book image
Practical Linux Security Cookbook
Michael A Lindner | Tajinder Kalsi
Apr, 2016 | 276 pages
No titles found
Table of Contents (17 chapters)
Practical Linux Security Cookbook
Practical Linux Security Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Linux Security Problems
Linux Security Problems
Introduction
The security policy of Linux
Configuring password protection
Configuring server security
Security controls
Conducting integrity checks of the installation medium using checksum
Using the LUKS disk encryption
Making use of sudoers – configuring sudo access
Scanning hosts with Nmap
Gaining a root on a vulnerable Linux system
2
Configuring a Secure and Optimized Kernel
Configuring a Secure and Optimized Kernel
Introduction
Requirements for building and using a kernel
Creating a USB boot media
Retrieving a kernel source
Configuring and building a kernel
Installing and booting from a kernel
Testing and debugging a kernel
Configuring a console for debugging using Netconsole
Debugging a kernel on boot
3
Local Filesystem Security
Local Filesystem Security
Viewing file and directory details using the ls command
Changing the file permissions using the chmod command
Implementing access control list (ACL)
File handling using the mv command (moving and renaming)
Install and configure a basic LDAP server on Ubuntu
4
Local Authentication in Linux
Local Authentication in Linux
User authentication and logging
Limiting the login capabilities of users
Monitoring user activity using acct
Login authentication using a USB device and PAM
Defining user authorization controls
5
Remote Authentication
Remote Authentication
Remote server/host access using SSH
Disabling or enabling SSH root login
Restricting remote access with key-based login into SSH
Copying files remotely
Setting up a Kerberos server with Ubuntu
6
Network Security
Network Security
Managing the TCP/IP network
Using Iptables to configure a firewall
Blocking spoofed addresses
Blocking incoming traffic
Configuring and using the TCP Wrapper
7
Security Tools
Security Tools
Linux sXID
PortSentry
Using Squid proxy
OpenSSL Server
Tripwire
Shorewall
8
Linux Security Distros
Linux Security Distros
Kali Linux
pfSense
DEFT – Digital Evidence and Forensic Toolkit
NST – Network Security Toolkit
Helix
9
Patching a Bash Vulnerability
Patching a Bash Vulnerability
Understanding the bash vulnerability through Shellshock
Shellshock's security issues
The patch management system
Applying patches on the Linux systems
10
Security Monitoring and Logging
Security Monitoring and Logging
Viewing and managing log files using Logcheck
Monitoring a network using Nmap
Using glances for system monitoring
Monitoring logs using MultiTail
Using system tools – Whowatch
Using system tools – stat
Using system tools – lsof
Using system tools – strace
Using Lynis
Index
Index

Changing the file permissions using the chmod command

Change Mode or chmod is a Linux command that is used to modify the access permissions of files and directories. Everybody wants to keep their data secure and properly organized. For this reason, Linux has a concept that associates owners and groups with every file and directory. These owners and groups have different permissions to access a particular file.

Getting ready

Before we take a look at the different usages of the chmod command, we need to know the different types of users and the symbolic representation used:

  • u is used for user/owner

  • g is used for a group

  • o is used for others

Now, create a file called testfile.txt, to try out the different commands of chmod.

How to do it…

Now, we will take a look at how to use chmod in different ways in order to set different permissions:

  1. If we want to change a single permission for users (owners, groups, or others), we use the + symbol to add the permission, as shown in the following command:

    chmod u...
Previous Section
End of Section 3
Next Section