Sams Teach Yourself Linux Security Basics in 24 Hours

by Hsiao, Aron

• ISBN13: 9780672320910
• ISBN10: 0672320916
• Edition: 1st
• Format: Paperback
• Copyright: 2001-04-13
• Publisher: Sams Publishing

Summary

This book is an introductory, tutorial-style text designed to give the reader a strong foundational knowledge of securing a Linux system. This book teaches the reader how to securely install and run Linux as it comes shipped from most Linux distributors. Most other titles in this market focus on the use of tools and software not normally included with Linux. Our approach teaches fundamentals the reader can take to other operating systems. This text is designed to provide a basic guide to resolving security involved in the use of Linux in workstation, small server, or small network environments. Covered topics include the following: Securing network services such as Samba and NFS Installation security details Firewalling with ipchains and iptables Intrusion detection, auditing, and monitoring BIOS and motherboard security issues Kerberos authentication Data encryption Eliminating ID and device risks Preserving data Steps to take if hacked

Author Biography

Aron Hsiao is a computing entrepreneur and freelance network consultant with a background in UNIX-like operating systems stretching back to the mid-1980s. He has spent time as both an independent contractor and as a proprietor working in computer hardware and software retail, real-time software development, network deployment, Internet development, and Internet marketing. Aron has also worked as a volunteer in a number of different computer-related and education capacities in his local area. He has served as the About.com guide to Linux since 1997 and is the author of Que's The Concise Guide to XFree86 for Linux.

Table of Contents

Introduction	1	(6)
Part I Basic Security for All Roles	7	(140)
Selecting and Installing a Linux Distribution	9	(22)
BIOS and Motherboards	31	(14)
Physical Security	45	(10)
The Boot Process	55	(14)
System and User Fundamentals	69	(14)
TCP/IP Network Security	83	(16)
File System Security	99	(22)
Extra File System Security Tools	121	(14)
Making the Most of Pluggable Authentication Modules (PAM)	135	(12)
Part II Network Security	147	(88)
Using ipchains for Firewalling and Routing	149	(14)
Using iptables for Firewalling and Routing	163	(16)
Securing Apache, FTP, and SMTP Services	179	(20)
Network Security: DNS with BIND	199	(10)
Network Security: NFS and Samba	209	(14)
Securing X11R6 Access	223	(12)
Part III Data Encryption	235	(76)
Encrypting Data Streams	237	(22)
Introduction to Kerberos	259	(18)
Encrypting Web Data	277	(10)
Encrypting File System Data	287	(12)
Encrypting E-Mail Data	299	(12)
Part IV Intrusion Detection, Auditing, and Recovery	311	(52)
Auditing and Monitoring	313	(14)
Detecting Attacks in Progress	327	(10)
Preserving Data	337	(14)
Recovering from Attacks	351	(12)
Part V Appendixes	363	(22)
Appendix A Configuration Files Important to Security	365	(4)
B System Account File Formats	369	(2)
C Security Web Sites of Note	371	(4)
D Quick Security Checklist	375	(8)
E Web Links to Documented Software	383	(2)
Index	385