Enterprise Linux Security Administration

Linux Training and Certification FAQ

What Linux distributions does this course relate to?

ExitCertified's Guru Lab courses use the Red Hat Linux (RHEL5) distribution, but can also be delivered in other Linux distributions such as SUSE Linux. Contact one of our Education consultants to request a specific Linux distribution.

What Linux Certifications does this course qualify for?

Employers are increasingly requiring tangible proof of skill sets. ExitCertified's Guru Labs Linux courses support several leading, industry-standard, Linux certifications:

	Red Hat Linux Certification Program
	Search for qualifying Red Hat Certified Technician (RHCT) and Red Hat Certified Engineer (RHCE) courses. MORE »
	Linux Professional Institute (LPI) Certification Program
	Search for courses qualifying for LPI's industry standard certifications. MORE »
	Novell Linux Certification Program
	Novell offers industry-leading certifications and tests that are globally recognized. MORE »

Why ExitCertified for your Linux Training?

ExitCertified has partnered with Guru Labs to offer the best in Linux training. With this de facto standard in Linux training across different distributions, students are exposed to core Linux concepts with extensive hands-on labs and instructors who "really really know their stuff".

We always hear from our students how refreshing it is to learn from ExitCertified's highly-qualified Linux instructors, with an in-depth and dynamic hands-on format. Learn from the experts.

Red Hat Courses | Suse Courses

Linux Training | Linux Certification FAQs

Linux Professional Institute LPI Certification Program

Novell Certification Program :: Certified Linux Professional

Start your journey to becoming a Network Security Guru.

This highly technical course focuses on properly securing machines running the Linux operating systems. A broad range of general security techniques such as packet filtering, password policies, and file integrity checking are covered. Advanced security technologies such as Kerberos and SELinux are taught. Special attention is given to securing commonly deployed network services. At the end of the course, students have an excellent understanding of the potential security vulnerabilities -- know how to audit existing machines, and how to securely deploy new network services.

course content details

	Security Foundations

	Security Principles
	Post-installation Hardening
	Service Discovery, Minimization
	Scanning and Mapping Vulnerabilities
	Probing with DNS, SNMP, RPC, and NFS
	Nessus Insecurity Scanner
	Password Security and PAM

	Secure Authentication with Kerberos

	Secure Time Synchronization with NTP
	ACLs for Secure NTP
	Kerberos History, Implementations, and Concepts
	Kerberos Principals, Safeguards, and Components
	Authentication Process and Identification Types
	KDC Server Daemons
	Plan Topology and Implementation
	Create KDC Databases and Administrators
	Add Host Principals and Common Service Principals
	Configure Slave KDC
	Client PAM Configuration
	Managing Keytabs
	Principals and Managing Principals
	MIT vs. Heimdal Principal Policy
	Using Kerberized Services
	Enabling Kerberized Services
	OpenSSH and Kerberos

	Securing the Filesystem

	Filesystem Mount Options
	NFS Properties and NFS Export Option
	NFSv4 and GSSAPI Auth
	Implementing NFSv4
	File Encryption with GPG and OpenSSL
	Encrypted Loopback FS
	Using RPM as an IDS
	TripWire History and Concepts
	TripWire Installation, Policies, and Configuration
	TripWire Commands and General Operation

	Securing Common Services

	Secure CGI with Apache
	Turning off Unneeded Modules
	Configuration Delegation and Scope
	ACL by IP Address
	HTTP User Authentication
	Standard Auth Modules
	HTTP Digest Authentication
	Authentication via SQL, LDAP, and Kerberos
	Scrubbing HTTP Headers
	Metering HTTP Bandwidth
	PostgreSQL Overview and Default Configuration
	SSL for PostgreSQL
	Authentication Methods and Advanced Authentication
	Ident-based Authentication
	PostgreSQL Kerberos Authentication
	Integrating Apache, PHP, and PostgreSQL Securely
	SMTP Overview and Implementations
	Selecting an MTA
	Security Considerations
	Postfix Overview
	Chrooting Postfix
	Connections and Relays
	SMTP AUTH & StartTLS/SSL
	Secure Cyrus IMAP Config
	Using GSSAPI/Kerberos Authentication

	SELinux

	DAC vs. MAC Security
	Shortcomings of Traditional UNIX Security
	SELinux Goals, Terms, and Architecture
	Activating and Interfacing with SELinux
	SELinux commands and Roles
	Understanding and Modifying Policy Source
	File Context Files (*.fc)
	Type Enforcement Files (*.te)
	Using Booleans
	Policy Analysis
	Policy Customization