Debian and its offspring, such as Ubuntu, have two user creation utilities:
- useradd on Debian/Ubuntu
-
adduser on Debian/Ubuntu
Locking down users' home directories the Debian/Ubuntu way
by Donald A. Tevault
Mastering Linux Security and Hardening
- Preface
- Running Linux in a Virtual Environment
- Securing User Accounts
- The dangers of logging in as the root user
- The advantages of using sudo
- Setting up sudo privileges for full administrative users
- Setting up sudo for users with only certain delegated privileges
- Advanced tips and tricks for using sudo
- Locking down users' home directories the Red Hat or CentOS way
- Locking down users' home directories the Debian/Ubuntu way
- Enforcing strong password criteria
- Setting and enforcing password and account expiration
- Preventing brute-force password attacks
- Locking user accounts
- Setting up security banners
- Summary
- Securing Your Server with a Firewall
- Encrypting and SSH Hardening
- GNU Privacy Guard
- Encrypting partitions with Linux Unified Key Setup – LUKS
- Encrypting directories with eCryptfs
- Using VeraCrypt for cross-platform sharing of encrypted containers
- Ensuring that SSH protocol 1 is disabled
- Creating and managing keys for password-less logins
- Disabling root user login
- Disabling username/password logins
- Setting up a chroot environment for SFTP users
- Summary
- Mastering Discretionary Access Control
- Access Control Lists and Shared Directory Management
- Creating an access control list for either a user or a group
- Creating an inherited access control list for a directory
- Removing a specific permission by using an ACL mask
- Using the tar --acls option to prevent the loss of ACLs during a backup
- Creating a user group and adding members to it
- Creating a shared directory
- Setting the SGID bit and the sticky bit on the shared directory
- Using ACLs to access files in the shared directory
- Summary
- Implementing Mandatory Access Control with SELinux and AppArmor
- How SELinux can benefit a systems administrator
- Setting security contexts for files and directories
- Troubleshooting with setroubleshoot
- Working with SELinux policies
- How AppArmor can benefit a systems administrator
- Looking at AppArmor profiles
- Working with AppArmor command-line utilities
- Troubleshooting AppArmor problems
- Summary
- Scanning, Auditing, and Hardening
- Installing and updating ClamAV and maldet
- Scanning with ClamAV and maldet
- SELinux considerations
- Scanning for rootkits with Rootkit Hunter
- Controlling the auditd daemon
- Creating audit rules
- Using ausearch and aureport
- Applying OpenSCAP policies with oscap
- Using SCAP Workbench
- More about OpenSCAP profiles
- Applying an OpenSCAP profile during system installation
- Summary
- Vulnerability Scanning and Intrusion Detection
- Security Tips and Tricks for the Busy Bee
- Auditing system services
- Password-protecting the GRUB 2 bootloader
- Securely configuring BIOS/UEFI
- Using a security checklist for system setup
- Summary
- Other Books You May Enjoy
Locking down users' home directories the Debian/Ubuntu way
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.