Mastering Linux Security and Hardening: Protect Your Linux Systems from Intruders, Malware Attacks, and Other Threats

by Donald A. Tevault

An end-to-end advanced level guide for setting up a Linux system to be as secure as possible against attackers and intruders.

Key Features Leverage this guide to confidently deliver a system that reduces the risk of being hacked Perform a number of advanced Linux security techniques such as network service detection, user authentication, controlling special permissions, encrypting file systems, kernel hardening, logging security Master the art of securing a Linux environment with this end-to-end practical guide Book Description

For the past couple of decades, Linux has been extremely popular with system administrators, for everything from creating networks and servers to automating their entire working environment. However, security has always been a major concern. With not many resources available in the Linux security domain, this book will be an invaluable resource to help you get your Linux systems properly secured.

Complete with step-by-step explanations of essential concepts, practical examples and self-assessment questions, you will begin by setting up a practice lab environment, then you’ll learn and practice various hardening techniques, and end by having set up a locked-down Linux server. You will learn how to set up a practice lab, create user accounts with appropriate privilege levels, protect sensitive data with permissions settings and encryption, and configure a firewall. You’ll also set up Mandatory Access Control, system auditing, security profiles, and kernel hardening.

By the end of this book, you will be confident in your ability to set up a Linux server that will be much harder for malicious actors to compromise.

What you will learn Set up a practice lab environment with Ubuntu and CentOS virtual machines. Create user accounts with locked-down home directories and strong passwords. Configure firewalls using the iptables, ufw, nftables, firewalld technologies and encrypt drives and directories with LUKS, ecryptfs, and VeraCrypt. Harden the Secure Shell service in order to prevent break-ins and data loss. Install anti-malware programs, and scan for malware. Implement Mandatory Access Control to help prevent attackers from exploiting a system. Change kernel parameters to harden the system against certain types of attacks, configure a kernel-level auditing system, and extract data from audit reports. Harden the Linux operating system by applying OpenSCAP security profiles and set up a Snort intrusion detection system. Password-protect the GRUB 2 bootloader, to prevent kernel parameter edits during boot-up and configure a system BIOS/UEFI in a secure manner, to help prevent local attacks. Who This Book Is For

This book is for Linux administrators, or aspiring Linux administrators. Readers should know the basics of Linux command-line usage and package management and should be familiar with the process of installing a Linux operating system, either on bare metal or in a virtual machine.

1276 pages, Kindle Edition

Published February 21, 2020

Reviews

[André R · Rating 4 out of 5]

Best book I read regarding linux security.