Portland State University
 
Information Technology

Course Number: IT151B
LINUX ESSENTIALS AND ADMINISTRATION

Security

  • Configure and use system log files to meet administrative and security needs
  • Setup user level security
  • Configure security environment files (for example: hosts.allow, sudoers, ftpusers, sshd_config, PAM)
  • Set up secure shell (OpenSSH)
  • Delete accounts while maintaining data stored in that user's home directory
  • Given security requirements, implement appropriate encryption configuration (for example: blowfish 3DES, MD5)
  • Detect symptoms that indicate a machine's security has been compromised (for example: review logfiles for irregularities or intrusion attempts)
  • Use appropriate access level for login (for example: root level vs user level activities, su, sudo)
  • Set process and special permissions (for example: SUID, GUID)
  • Identify different Linux Intrusion Detection Systems (IDS) (for example: Snort, PortSentry)
  • Given security requirements, implement basic IP tables/chains (note: requires knowledge of common ports)
  • Implement security auditing for files and authentication
  • Identify whether a package or file has been corrupted / altered (for example: checksum, Tripwire)
  • Given a set of security requirements, set password policies to match (complexity / aging / shadowed passwords) (for example: identify systems not shadow passwords)
  • Identify security vulnerabilities within Linux services
  • Set up user-level security (for example: limits on logins, memory usage and processes)

For more details, please contact our Technical Adviser at 503-725-2395 or email it@pdx.edu.