Chapter 6: Managing Linux Security and Identities

1. Using the firewall-cmd file or by deploying Extensible Markup Language (XML) files in the /etc/firewalld directory.
2. The --permanent parameter makes it persistent across reboots and executes during start up configuration.
3. In Linux, you can restrict access using ACLs in systemd. Some applications also provide other host allow/deny options. In Azure, you have network security groups and the Azure Firewall service.
4. Discretionary access control (DAC) is used for restricting access based on users/groups and permissions on files. Mandatory access control (MAC) further restricts access based on classification labels for each resource object.
5. If someone gained access illegally to an application or system, with DAC, there is no way to prevent further access, especially for files with the same user/group owner and files with permissions for others.
6. Every device will have a unique MAC address and you can find your virtual...