- Lab
- A Cloud Guru
Implementing System Security on Linux
Implementing security best practices is a necessary skill for a system administrator. In this hands-on lab, you will be tasked with securing a Linux host in a wide array of areas.
Path Info
Table of Contents
-
Challenge
Update the System Software
- Use the package manager to update all software packages (depending on the state of the lab image, packages may already be updated).
-
Challenge
Limit the Services on the Host to Only the Apache HTTP Server
- Stop and disable the
postfix
service. - Remove the
postfix
package.
- Stop and disable the
-
Challenge
Set Up a Local Firewall
- Start and enable the
firewalld
service. - Allow the
https
service through the firewall.
- Start and enable the
-
Challenge
Implement File-Level Security and Detection
- Set SELinux to enforcing mode.
- Install the the
aide
utility.
-
Challenge
Create a Remote Backup of Important Data on the Host
- Generate a public and private key on server01. This should use the default location for storing the keys, and a password should be provided.
- Share the public key with the backup server (server02).
- Use the
rsync
command to back up the contents of the/opt/data
directory to the/home/cloud_user/data
directory on server02.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.