Chapter 3
Security
THE FOLLOWING COMPTIA LINUX+ EXAM OBJECTIVES ARE COVERED IN THIS CHAPTER:
3.1 Given a scenario, apply or acquire the appropriate user and/or group permissions and ownership
- File and directory permissions
- Read, write, execute
- User, group, other
- SUID
- Octal notation
- umask
- Sticky bit
- GUID
- Inheritance
- Utilities
chmod
chown
chgrp
getfacl
setfacl
ls
ulimit
chage
- Context-based permissions
- SELinux configurations
- Disabled
- Permissive
- Enforcing
- SELinux policy
- Targeted
- SELinux tools
setenforce
getenforce
sestatus
setsebool
getsebool
chcon
restorecon
ls -Z
ps -Z
- AppArmor
aa-disable
aa-complain
aa-unconfined
/etc/apparmor.d/
/etc/apparmor.d/tunables
- Privilege escalation
su
sudo
wheel
visudo
sudoedit
- User types
- Root
- Standard
- Service
- SELinux configurations
- File and directory permissions
3.2 Given a scenario, configure and implement appropriate access and authentication methods
- PAM:
- Password policies
- LDAP integration
- User lockouts
- Required, allowed, or sufficient
/etc/pam.d/
pam_tally2...
- PAM: