Portland State University
 
Information Technology

Course Number: IT151
RED HAT LINUX CERTIFICATION

Module 2: Linux Essential and Administration (Linux+ and LPI 1&2)

2.1 Installation

  • Identify all system hardware required (for example: CPU, memory, drive space, scalability) and check compatibility with Linux Distribution
  • Determine appropriate method of installation based on environment (for example: boot disk, CD-ROM, network (HTTP, FTP, NFS, SMB))
  • Install multimedia options (for example: video, sound, codecs)
    Identify purpose of Linux machine based on predetermined customer requirements (for example: appliance, desktop system, database, mail server, web server, etc.)
  • Determine what software and services should be installed (for example: client applications for workstation, server services for desired task)
  • Partition according to pre-installation plan using fdisk (for example: /boot, /usr, /var, /home, swap, RAID/volume, hot-spare, lvm)
  • Configure file systems (for example: (ext2) or (ext3) or REISER)
  • Boot the system
  • Configure a boot manager (for example: LILO, ELILO, GRUB, multiple boot options)
  • Manage packages after installing the operating systems (for example: install, uninstall, update) (for example: RPM, tar, gzip)
  • Manage shared libraries
  • Reconfigure, build, and install a custom kernel and kernel modules
  • Select appropriate networking configuration and protocols (for example: inetd, xinetd, modems, Ethernet)
  • Select appropriate parameters for Linux installation (for example: language, time zones, keyboard, mouse)
  • Configure peripherals as necessary (for example: printer, scanner, modem)
  • Use Debian package management
  • Use Red Hat Package Manager (RPM)

2.2 Management

  • 2.1 Manage local storage devices and file systems (for example:: fsck, fdisk, mkfs) using CLI commands
  • 2.2 Mount and unmount varied file systems (for example: Samba, NFS) using CLI commands
  • Customize and use the shell environment
  • Tune the user environment and system environment variables
  • Create files and directories and modify files using CLI commands
  • Process text streams using filters
  • Use streams, pipes, and redirects
  • Execute content and directory searches using find and grep
  • Find system files and place files in the correct location
  • Create linked files using CLI commands
  • Modify file and directory permissions and ownership (for example: chmod, chown, sticky bit, octal permissions, chgrp) using CLI commands
  • Identify and modify default permissions for files and directories (for example: umask) using CLI commands
  • Perform and verify backups and restores (tar, cpio)
  • Access and write data to recordable media (for example: CDRW, hard drive, flash memory devices)
  • Manage run levels and system initialization from the CLI and configuration files (for example: /etc/inittab and init command, /etc/rc.d, rc.local)
  • Identify, execute, manage and kill processes (for example: ps, kill, killall, bg, fg, jobs, nice, renice, rc)
  • Modify process execution priorities
  • Differentiate core processes from non-critical services (for example: init, [kernel processes], PID, and PPID values)
  • Repair packages and scripts (for example: resolving dependencies, repairing, installing, updating applications)
  • Monitor and troubleshoot network activity (for example: ping, netstat, traceroute)
  • Perform text manipulation (for example: sed, awk, vi)
  • Manage print jobs and print queues (for example: lpd, lprm, lpq, CUPS)
  • Perform remote management (for example: rsh, ssh, rlogin)
  • Perform NIS-related domain management (yp commands)
  • Create, modify, and use basic shell scripts
  • Create, modify, and delete user and group accounts (for example: useradd, groupadd, /etc/passwd, chgrp, quota, chown, chmod, grpmod) using CLI utilities
  • Manage and access mail queues (for example: sendmail, postfix, mail, mutt) using CLI utilities
  • Maintain system time
  • Schedule jobs to execute in the future using "at" and "cron" daemons
  • Redirect output (for example: piping, redirection)

2.3 Configuration

  • Configure client network services and settings (for example: settings for TCP/IP)
  • Configure basic server network services (for example: DNS, DHCP, SAMBA, Apache)
  • Configure Linux as a PPP client
  • Implement basic routing and subnetting (for example: /sbin/route, IP forward statement)
  • Configure the system and perform basic make file changes to support compiling applications and drivers
  • Configure files that are used to mount drives or partitions (for example: fstab, mtab, SAMBA, nfs, syntax)
  • Properly manage the NFS, smb, and nmb daemons
  • Managing disk quota
  • Implement DNS and describe how it works (for example: edit /etc/hosts, edit /etc/host.conf, edit /etc/resolv.conf, dig, host, named)
  • Configure a Network Interface Card (NIC) from a command line
  • Configure Linux printing (for example: CUPS, BSD LPD, SAMBA)
  • Apply basic printer permissions
  • Configure log files (for example: syslog, remote logfile storage)
  • Configure the X Window system
  • Setup a display manager
  • Install & Customize a Window Manager Environment
  • Set up environment variables (for example: $PATH, $DISPLAY,$TERM, $PROMPT, $PS1)
  • Notify users on system-related issues

2.4 Security

  • Configure and use system log files to meet administrative and security needs
  • Setup user level security
  • Configure security environment files (for example: hosts.allow, sudoers, ftpusers, sshd_config, PAM)
  • Set up secure shell (OpenSSH)
  • Delete accounts while maintaining data stored in that user's home directory
  • Given security requirements, implement appropriate encryption configuration (for example: blowfish 3DES, MD5)
  • Detect symptoms that indicate a machine's security has been compromised (for example: review logfiles for irregularities or intrusion attempts)
  • Use appropriate access level for login (for example: root level vs user level activities, su, sudo)
  • Set process and special permissions (for example: SUID, GUID)
  • Identify different Linux Intrusion Detection Systems (IDS) (for example: Snort, PortSentry)
  • Given security requirements, implement basic IP tables/chains (note: requires knowledge of common ports)
  • Implement security auditing for files and authentication
  • Identify whether a package or file has been corrupted / altered (for example: checksum, Tripwire)
  • Given a set of security requirements, set password policies to match (complexity / aging / shadowed passwords) (for example: identify systems not shadow passwords)
  • Identify security vulnerabilities within Linux services
  • Set up user-level security (for example: limits on logins, memory usage and processes)

2.5 Documentation

  • Establish and monitor system performance baseline (for example: top, sar, vmstat, pstree)
  • Create written procedures for installation, configuration, security and management
  • Document installed configuration (for example: installed packages, package options, TCP/IP assignment list, changes -configuration and maintenance)
  • Troubleshoot errors using systems logs (for example: tail, head, grep)
  • Troubleshoot application errors using application logs (for example: tail, head, grep)
  • Access system documentation and help files (for example: man, info, readme, Web)

2.6 Hardware

  • Describe common hardware components and resources (for example: connectors, IRQs, DMA, SCSI, memory addresses)
  • Configure Modem and Sound cards
  • Diagnose hardware issues using Linux tools (for example: /proc, disk utilities, ifconfig, /dev, live CD rescue disk, dmesg)
  • Identify and configure removable system hardware (for example: PCMCIA, USB, IEEE1394)
  • Configure advanced power management and Advanced Configuration and Power Interface (ACPI)
  • Identify and configure mass storage devices and RAID (for example: SCSI, ATAPI, tape, optical recordable)

For more details, please contact our Technical Adviser at 503-725-2395 or email it@pdx.edu.