Linux Engineering 210: Linux OS Security
Linux Security Best Practices, OS Hardening and Policy Enforcement
The Linux Engineering 210: Linux OS Security course focuses on proven best practices to harden a production Linux server. Building on information taught in our earlier courses, plus your existing Linux experience, this three-day, hands-on class uses simple and effective tools, techniques and concepts to teach you how to protect and monitor Linux servers.
Key Topics Covered
This 3-day hands-on training class will cover the following topics and give you a deeper understanding of:
- Using blackhole routing to restrict traffic to unwanted networks
- Filtering and logging network traffic with netfilter/iptables
- Reducing Linux server network footprints
- Monitoring and detecting rootkits
- Managing advanced file and directory permission settings
- Managing CHROOT jails to restrict process/user access
- Managing extended Linux filesystem attributes
- Managing filesystem changes with AIDE
- Monitoring process interactions with the file system
- Managing daemons with the xinetd super-server
- System daemon security
- Monitoring user login activity
- Monitoring and actively responding to log activity
- Real-time encryption of Linux files, directories and filesystems
- Extended security policy enforcement with SELinux
- Advanced user access controls
- NFS mount security
- Active intrusion response with Fail2Ban
- System security using PAM
- Superuser access with SUDO
- Advanced user account policies
Who Should Take This Class?
Our classes aren’t easy. In fact, they’re downright hard. Think of it as an intense workout for your engineering brain. If you’re not ready to sweat the details and work harder than ever before, our classes aren’t for you.
Our Linux Engineering 210 class is designed for Linux Administrators with experience managing Linux servers in a complex environment, and who want to gain the experience required to protect their Linux servers. This class provides the knowledge needed to successfully implement Linux security best practices.
Participants in this class should have expertise at the Senior Systems Administrator level or higher, as well as hands-on experience configuring and managing Linux in a production server environment.
By Engineers, For Engineers
SteelPivot’s unique learning methodology, Full Immersion Training (FIT), is unlike any other in the industry. Our focus is on the complete engineer, not just the basics of Linux, how to use a particular vendor’s product, or how to pass a certification test.
It’s been proven that people learn best in small-group environments. That’s why our Linux Engineering 210 class is taught by two (2) instructors and limited to no more than eight (8) students. Our instructors are also working senior Linux engineers employed full-time by SteelPivot, who practice what they teach by identifying and solving real client problems when they’re not teaching class.
Based on the simple idea that the best way to learn is by doing, you will be taught in a hands-on lab where you’ll be encouraged to experiment and take risks – preparing you to work confidently in a full production environment. We give you two Linux servers to work on during class, and when something “breaks” or you encounter a problem, we teach you how to troubleshoot and fix it. Your learning experience is 100% hands-on, and passive participation is not an option. When you finish our class, you will truly know Linux.
What You Should Already Know
You will get the most out of this class – and be more successful applying what you learn – if you know your level of Linux expertise. That’s why pre- and post-tests are mandatory for every class. Besides making sure you have the following core skills in place, these tests are a great way for you to benchmark your own progress.
To get the most out of this 3-day Linux Engineering 210 class, participants should already have the following core skills:
- Understanding of disk volumes and partitions
- Knowledge of IP networking
- Understand the role of the Linux Kernel
- Ability to work on a Linux system with no graphical desktop
- Comprehend the FHS directory structure
- Know the Linux boot process and its components (GRUB, initrd, etc.)
- Understand Linux I/O streams, pipes and redirects
- Understanding of Linux user account management and authentication
- Know how to use Linux search tools
- Grasp the roles and functions of daemons
- Understand DNS, DHCP and TFTP
- Know how to locate and monitor processes by PID and name
- Ability to edit text comfortably with vi
- Know how to operate and configure Network File Systems (NFS)
Important Info About This Class
The following are a few things to remember about the Linux Engineering 210 class:
- This is a 3-day, instructor-led class in a hands-on lab environment.
- Class schedule each day: 8:30am – 4:30pm
- We suggest arriving at least 15 minutes early so you can get settled in the classroom.
- Need directions to class? Click here for directions to our offices.
Our Linux Engineering 210 class is taught many times throughout the year in both of our Atlanta and Dallas training facilities.
- Click here for a complete listing of classes offered in our Atlanta office
- Click here for a complete listing of classes offered in our Dallas office
- Need some help finding the right class date? Just give us a call toll free at 866-586-2427
Class Price:
$1,599
