Packt+ | Advance your knowledge in tech

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Mastering Linux Security and Hardening

You're reading from Mastering Linux Security and Hardening Secure your Linux server and protect it from intruders, malware attacks, and other external threats

Product type Paperback

Published in Jan 2018

Publisher

ISBN-13 9781788620307

Length 376 pages

Edition 1st Edition

Tools

Linux

Concepts

Cybersecurity

Author (1):

Donald A. Tevault

View More author details

Table of Contents (12) Chapters

Preface

1. Running Linux in a Virtual Environment FREE CHAPTER

2. Securing User Accounts

3. Securing Your Server with a Firewall

4. Encrypting and SSH Hardening

5. Mastering Discretionary Access Control

6. Access Control Lists and Shared Directory Management

7. Implementing Mandatory Access Control with SELinux and AppArmor

8. Scanning, Auditing, and Hardening

9. Vulnerability Scanning and Intrusion Detection

10. Security Tips and Tricks for the Busy Bee

11. Other Books You May Enjoy

Leave a review – let other readers know what you think

Securely configuring BIOS/UEFI

This topic is different from anything we've looked at thus far because it has nothing to do with the operating system. Rather, we're now going to talk about the computer hardware.

Every computer motherboard has either a BIOS or a UEFI chip, which stores both the hardware configuration for the computer, and the bootstrap instructions that are needed to start the boot process after the power is turned on. UEFI has replaced the old-style BIOS on newer motherboards, and it has more security features than what the old BIOS had.

I can't give you any specific information about BIOS/UEFI setup because every model of the motherboard has a different way of doing things. What I can give you is some more generalized information.

When you think about BIOS/UEFI security, you might be thinking about disabling the ability to boot from anything other than the normal system drive. In the following screenshot, you can see that I've disabled all SATA drive ports except for the one...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Donald A. Tevault

Donald A. Tevault

Donald A. Tevault - but you can call him Donnie - got involved with Linux way back in 2006, and has been working with it ever since. He holds the Linux Professional Institute Level 3-Security certification, and the GIAC Incident Handler certification. Donnie is a professional Linux trainer, and thanks to the magic of the internet, teaches Linux classes literally the world over from the comfort of his living room. He's also a Linux security researcher for an IoT security company.

See other products by Donald A. Tevault

Other recommended products

Related to this chapter

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Containerization with LXC

Containerization with LXC

Feb 2017 11h 44m

Containerization with LXC

Containerization with LXC

Feb 2017 11h 44m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m