Packt+ | Advance your knowledge in tech

0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

Mastering Linux Security and Hardening

You're reading from Mastering Linux Security and Hardening Secure your Linux server and protect it from intruders, malware attacks, and other external threats

Product type Paperback

Published in Jan 2018

Publisher

ISBN-13 9781788620307

Length 376 pages

Edition 1st Edition

Tools

Linux

Concepts

Cybersecurity

Author (1):

Donald A. Tevault

View More author details

Table of Contents (12) Chapters

Preface

1. Running Linux in a Virtual Environment FREE CHAPTER

2. Securing User Accounts

3. Securing Your Server with a Firewall

4. Encrypting and SSH Hardening

5. Mastering Discretionary Access Control

6. Access Control Lists and Shared Directory Management

7. Implementing Mandatory Access Control with SELinux and AppArmor

8. Scanning, Auditing, and Hardening

9. Vulnerability Scanning and Intrusion Detection

10. Security Tips and Tricks for the Busy Bee

11. Other Books You May Enjoy

Leave a review – let other readers know what you think

Working with AppArmor command-line utilities

Whether or not you have all the AppArmor utilities you need will depend on which Linux distro you have. On my OpenSUSE Leap workstation, the utilities were there out of the box. On my Ubuntu Server virtual machine, I had to install them myself:

sudo apt install apparmor-utils

First, let's look at the status of AppArmor on the Ubuntu machine:

donnie@ubuntu5:~$ sudo aa-status
[sudo] password for donnie:

apparmor module is loaded.
13 profiles are loaded.
13 profiles are in enforce mode.
   /sbin/dhclient
   /usr/bin/lxc-start
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/sbin/mysqld
   /usr/sbin/tcpdump
   lxc-container-default
   lxc-container-default-cgns
   lxc-container-default-with-mounting
   lxc-container-default-with-nesting
0 profiles are in complain...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (1)

Donald A. Tevault

Donald A. Tevault

Donald A. Tevault - but you can call him Donnie - got involved with Linux way back in 2006, and has been working with it ever since. He holds the Linux Professional Institute Level 3-Security certification, and the GIAC Incident Handler certification. Donnie is a professional Linux trainer, and thanks to the magic of the internet, teaches Linux classes literally the world over from the comfort of his living room. He's also a Linux security researcher for an IoT security company.

See other products by Donald A. Tevault

Other recommended products

Related to this chapter

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Mastering Linux Security and Hardening

Mastering Linux Security and Hardening

Hardening a Linux system can make it much more difficult for an attacker to exploit it. This book will enable system administrators and network engineers to protect their Linux systems, and the sensitive data on those systems.

Feb 2020 22h 12m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Practical Linux Security Cookbook

Practical Linux Security Cookbook

Linux is often treated as a highly secure operating system. However, the reality is that Linux too has its own share of security flaws. These flaws allow attackers to get into your system and modify or even destroy your important data. This book will work as a practical guide for administrators and help them configure a more secure machine.

Aug 2018 16h 4m

Containerization with LXC

Containerization with LXC

Feb 2017 11h 44m

Containerization with LXC

Containerization with LXC

Feb 2017 11h 44m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

SELinux System Administration

SELinux System Administration

Security-Enhanced Linux is a comprehensive security solution for Linux, supported by many Linux distributions. SELinux System Administration uses easy-to-follow examples to provide end-to-end coverage of everything from what SELinux is to effectively applying SELinux. You'll also learn how to fine-tune SELinux, including gradual policy development.

Dec 2020 15h 16m

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m