Download or read book SELinux by Example written by Frank Mayer and published by Pearson Education. This book was released on 2006-07-27 with total page 476 pages. Available in PDF, EPUB and Kindle. Book excerpt: SELinux: Bring World-Class Security to Any Linux Environment! SELinux offers Linux/UNIX integrators, administrators, and developers a state-of-the-art platform for building and maintaining highly secure solutions. Now that SELinux is included in the Linux 2.6 kernel—and delivered by default in Fedora Core, Red Hat Enterprise Linux, and other major distributions—it’s easier than ever to take advantage of its benefits. SELinux by Example is the first complete, hands-on guide to using SELinux in production environments. Authored by three leading SELinux researchers and developers, it illuminates every facet of working with SELinux, from its architecture and security object model to its policy language. The book thoroughly explains SELinux sample policies— including the powerful new Reference Policy—showing how to quickly adapt them to your unique environment. It also contains a comprehensive SELinux policy language reference and covers exciting new features in Fedora Core 5 and the upcoming Red Hat Enterprise Linux version 5. • Thoroughly understand SELinux’s access control and security mechanisms • Use SELinux to construct secure systems from the ground up • Gain fine-grained control over kernel resources • Write policy statements for type enforcement, roles, users, and constraints • Use optional multilevel security to enforce information classification and manage users with diverse clearances • Create conditional policies that can be changed on-the-fly • Define, manage, and maintain SELinux security policies • Develop and write new SELinux security policy modules • Leverage emerging SELinux technologies to gain even greater flexibility • Effectively administer any SELinux system

Download or read book SELinux written by Bill McCarty and published by O'Reilly Media. This book was released on 2005 with total page 262 pages. Available in PDF, EPUB and Kindle. Book excerpt: Offers a readable, practical introduction and step-by-step procedural manual for the installation, configuration, and use of SELinux, a kernel module and set of Linux programs developed by the National Security Agency to help protect computers running on Linux. Original. (All users).

Download or read book SELinux System Administration written by Sven Vermeulen and published by Packt Publishing Ltd. This book was released on 2013-09-24 with total page 179 pages. Available in PDF, EPUB and Kindle. Book excerpt: A step-by-step guide to learn how to set up security on Linux servers by taking SELinux policies into your own hands.Linux administrators will enjoy the various SELinux features that this book covers and the approach used to guide the admin into understanding how SELinux works. The book assumes that you have basic knowledge in Linux administration, especially Linux permission and user management.

Download or read book SELinux Cookbook written by Sven Vermeulen and published by Packt Publishing Ltd. This book was released on 2014-09-23 with total page 399 pages. Available in PDF, EPUB and Kindle. Book excerpt: If you are a Linux system administrator or a Linux-based service administrator and want to fine-tune SELinux to implement a supported, mature, and proven access control system, then this book is for you. Basic experience with SELinux enabled distributions is expected.

Download or read book SELinux System Administration Second Edition written by Sven Vermeulen and published by . This book was released on 2017-01-31 with total page 285 pages. Available in PDF, EPUB and Kindle. Book excerpt: Ward off traditional security permissions and effectively secure your Linux systems with SELinuxAbout This Book* Leverage SELinux to improve the security of your Linux system* An easy-to-follow approach and instructions to help you adopt SELinux within your organization* Acquire key skills and techniques in your system administration careerWho This Book Is ForThis book is for both beginners as well as seasoned Linux administrators who want to control the secure state of their systems. Packed with the latest information on SELinux operations and administrative procedures, you will enjoy hardening your system further through the Mandatory Access Control system that has been shaping Linux' security for years.What You Will Learn* Analyse SELinux events and selectively enable or disable SELinux enforcement* Manage Linux users and associate them with the right role and permission set* Secure network communications through SELinux' access controls* Tune the full service flexibility by dynamically assigning resource labels* Handle SELinux' access patterns enforced through the system* Query the SELinux policy in depthIn DetailDo you have the daunting job of protecting your and your company's systems from malicious attacks and undefined application behaviour? Or are you looking to secure your Linux systems with improved access control? Well, look no further! This book gives you all the preliminary know-hows about enhancing your system's security across Linux distributions, helping you keep application vulnerabilities at bay.In this book, we describe the SELinux concepts and show you how to leverage SELinux to improve the secure state of a Linux system. You will learn not only about the fundamental SELinux concepts, but also about all of SELinux's configuration handles including conditional policies, constraints, policy types, and audit capabilities, with genuine examples that you as administrators might come across. In addition, you will learn how to further harden the virtualization offering of both libvirt (sVirt) and Docker through SElinux.By the end of the book, you will know how SELinux works and how it can be tuned to your needs.

Download or read book CentOS Quick Start Guide written by Shiwang Kalkhanda and published by Packt Publishing Ltd. This book was released on 2018-12-26 with total page 313 pages. Available in PDF, EPUB and Kindle. Book excerpt: A concise walk-through of CentOS 7, starting from installation to securing it’s environment. Key FeaturesNo previous Linux environment experience needed for reading this bookGet comfortable with a popular and stable Red Hat Enterprise Linux distributionMost of the command line based concepts are explained with graphicsBook Description Linux kernel development has been the worlds largest collaborative project to date. With this practical guide, you will learn Linux through one of its most popular and stable distributions. This book will introduce you to essential Linux skills using CentOS 7. It describes how a Linux system is organized, and will introduce you to key command-line concepts you can practice on your own. It will guide you in performing basic system administration tasks and day-to-day operations in a Linux environment. You will learn core system administration skills for managing a system running CentOS 7 or a similar operating system, such as RHEL 7, Scientific Linux, and Oracle Linux. You will be able to perform installation, establish network connectivity and user and process management, modify file permissions, manage text files using the command line, and implement basic security administration after covering this book. By the end of this book, you will have a solid understanding of working with Linux using the command line. What you will learnUnderstand file system hierarchy and essential command-line skillsUse Vi editor, I/O redirections and how to work with common text manipulating toolsCreate, delete, modify user accounts and manage passwords and their aging policyManage file ownership, permissions, and ACLExecute process management and monitoring on the command lineValidate and manage network configuration using nmcliManage remote logins using SSH and file transfer using SCP and RsyncUnderstand system logging, how to control system services with systemd and systemctl, and manage firewalIdWho this book is for Any individual who wants to learn how to use Linux as server or desktop in his environment. Whether you are a developer, budding system administrator, or tech lover with no previous Linux administration background, you will be able to start your journey in Linux using CentOS 7 with this book.

Download or read book Docker in Practice Second Edition written by Ian Miell and published by Simon and Schuster. This book was released on 2019-02-06 with total page 707 pages. Available in PDF, EPUB and Kindle. Book excerpt: Summary Docker in Practice, Second Edition presents over 100 practical techniques, hand-picked to help you get the most out of Docker. Following a Problem/Solution/Discussion format, you'll walk through specific examples that you can use immediately, and you'll get expert guidance on techniques that you can apply to a whole range of scenarios. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the Technology Docker's simple idea-wrapping an application and its dependencies into a single deployable container-created a buzz in the software industry. Now, containers are essential to enterprise infrastructure, and Docker is the undisputed industry standard. So what do you do after you've mastered the basics? To really streamline your applications and transform your dev process, you need relevant examples and experts who can walk you through them. You need this book. About the Book Docker in Practice, Second Edition teaches you rock-solid, tested Docker techniques, such as replacing VMs, enabling microservices architecture, efficient network modeling, offline productivity, and establishing a container-driven continuous delivery process. Following a cookbook-style problem/solution format, you'll explore real-world use cases and learn how to apply the lessons to your own dev projects. What's inside Continuous integration and delivery The Kubernetes orchestration tool Streamlining your cloud workflow Docker in swarm mode Emerging best practices and techniques About the Reader Written for developers and engineers using Docker in production. About the Author Ian Miell and Aidan Hobson Sayers are seasoned infrastructure architects working in the UK. Together, they used Docker to transform DevOps at one of the UK's largest gaming companies. Table of Contents PART 1 - DOCKER FUNDAMENTALS Discovering Docker Understanding Docker: Inside the engine room PART 2 - DOCKER AND DEVELOPMENT Using Docker as a lightweight virtual machine Building images Running containers Day-to-day Docker Configuration management: Getting your house in order PART 3 - DOCKER AND DEVOPS Continuous integration: Speeding up your development pipeline Continuous delivery: A perfect fit for Docker principles Network simulation: Realistic environment testing without the pain PART 4 - ORCHESTRATION FROM A SINGLE MACHINE TO THE CLOUD A primer on container orchestration The data center as an OS with Docker Docker platforms PART 5 - DOCKER IN PRODUCTION Docker and security Plain sailing: Running Docker in production Docker in production: Dealing with challenges

Download or read book Red Hat Enterprise Linux 8 Administration written by Miguel Pérez Colino and published by Packt Publishing Ltd. This book was released on 2021-11-11 with total page 534 pages. Available in PDF, EPUB and Kindle. Book excerpt: Develop the skills to manage and administer Red Hat Enterprise Linux and get ready to earn the RHCSA certification Key Features Learn the most common administration and security tasks and manage enterprise Linux infrastructures efficiently Assess your knowledge using self-assessment questions based on real-world examples Understand how to apply the concepts of core systems administration in the real world Book DescriptionWhether in infrastructure or development, as a DevOps or site reliability engineer, Linux skills are now more relevant than ever for any IT job, forming the foundation of understanding the most basic layer of your architecture. With Red Hat Enterprise Linux (RHEL) becoming the most popular choice for enterprises worldwide, achieving the Red Hat Certified System Administrator (RHCSA) certification will validate your Linux skills to install, configure, and troubleshoot applications and services on RHEL systems. Complete with easy-to-follow tutorial-style content, self-assessment questions, tips, best practices, and practical exercises with detailed solutions, this book covers essential RHEL commands, user and group management, software management, networking fundamentals, and much more. You'll start by learning how to create an RHEL 8 virtual machine and get to grips with essential Linux commands. You'll then understand how to manage users and groups on an RHEL 8 system, install software packages, and configure your network interfaces and firewall. As you advance, the book will help you explore disk partitioning, LVM configuration, Stratis volumes, disk compression with VDO, and container management with Podman, Buildah, and Skopeo. By the end of this book, you'll have covered everything included in the RHCSA EX200 certification and be able to use this book as a handy, on-the-job desktop reference guide. This book and its contents are solely the work of Miguel Pérez Colino, Pablo Iranzo Gómez, and Scott McCarty. The content does not reflect the views of their employer (Red Hat Inc.). This work has no connection to Red Hat, Inc. and is not endorsed or supported by Red Hat, Inc.What you will learn Deploy RHEL 8 in different footprints, from bare metal and virtualized to the cloud Manage users and software on local and remote systems at scale Discover how to secure a system with SELinux, OpenSCAP, and firewalld Gain an overview of storage components with LVM, Stratis, and VDO Master remote administration with passwordless SSH and tunnels Monitor your systems for resource usage and take actions to fix issues Understand the boot process, performance optimizations, and containers Who this book is for This book is for IT professionals or students who want to start a career in Linux administration and anyone who wants to take the RHCSA 8 certification exam. Basic knowledge of Linux and familiarity with the Linux command-line is necessary.

Download or read book Embedded Linux Development Using Yocto Project Cookbook written by Alex González and published by Packt Publishing Ltd. This book was released on 2018-01-25 with total page 449 pages. Available in PDF, EPUB and Kindle. Book excerpt: Over 79 hands-on recipes for professional embedded Linux developers to optimize and boost their Yocto Project know-how Key Features Optimize your Yocto setup to speed up development and debug build issues Use what is quickly becoming the standard embedded Linux product builder framework—the Yocto Project Recipe-based implementation of best practices to optimize your Linux system Book Description The Yocto Project has become the de facto distribution build framework for reliable and robust embedded systems with a reduced time to market.You'll get started by working on a build system where you set up Yocto, create a build directory, and learn how to debug it. Then, you'll explore everything about the BSP layer, from creating a custom layer to debugging device tree issues. In addition to this, you’ll learn how to add a new software layer, packages, data, scripts, and configuration files to your system. You will then cover topics based on application development, such as using the Software Development Kit and how to use the Yocto project in various development environments. Toward the end, you will learn how to debug, trace, and profile a running system. This second edition has been updated to include new content based on the latest Yocto release. What you will learn Optimize your Yocto Project setup to speed up development and debug build issues Use Docker containers to build Yocto Project-based systems Take advantage of the user-friendly Toaster web interface to the Yocto Project build system Build and debug the Linux kernel and its device trees Customize your root filesystem with already-supported and new Yocto packages Optimize your production systems by reducing the size of both the Linux kernel and root filesystems Explore the mechanisms to increase the root filesystem security Understand the open source licensing requirements and how to comply with them when cohabiting with proprietary programs Create recipes, and build and run applications in C, C++, Python, Node.js, and Java Who this book is for If you are an embedded Linux developer with the basic knowledge of Yocto Project, this book is an ideal way to broaden your knowledge with recipes for embedded development.

Download or read book Hardening Linux written by James Turnbull and published by Apress. This book was released on 2006-11-01 with total page 571 pages. Available in PDF, EPUB and Kindle. Book excerpt: *Imparts good security doctrine, methodology, and strategies *Each application-focused chapter will be able to be used as a stand-alone HOW-TO for that particular application. *Offers users a selection of resources (websites, mailing lists, and books) to further their knowledge.

Download or read book Kubernetes Security and Observability written by Brendan Creane and published by "O'Reilly Media, Inc.". This book was released on 2021-10-26 with total page 201 pages. Available in PDF, EPUB and Kindle. Book excerpt: Securing, observing, and troubleshooting containerized workloads on Kubernetes can be daunting. It requires a range of considerations, from infrastructure choices and cluster configuration to deployment controls and runtime and network security. With this practical book, you'll learn how to adopt a holistic security and observability strategy for building and securing cloud native applications running on Kubernetes. Whether you're already working on cloud native applications or are in the process of migrating to its architecture, this guide introduces key security and observability concepts and best practices to help you unleash the power of cloud native applications. Authors Brendan Creane and Amit Gupta from Tigera take you through the full breadth of new cloud native approaches for establishing security and observability for applications running on Kubernetes. Learn why you need a security and observability strategy for cloud native applications and determine your scope of coverage Understand key concepts behind the book's security and observability approach Explore the technology choices available to support this strategy Discover how to share security responsibilities across multiple teams or roles Learn how to architect Kubernetes security and observability for multicloud and hybrid environments

Download or read book Linux Observability with BPF written by David Calavera and published by O'Reilly Media. This book was released on 2019-11-14 with total page 179 pages. Available in PDF, EPUB and Kindle. Book excerpt: Build your expertise in the BPF virtual machine in the Linux kernel with this practical guide for systems engineers. You’ll not only dive into the BPF program lifecycle but also learn to write applications that observe and modify the kernel’s behavior; inject code to monitor, trace, and securely observe events in the kernel; and more. Authors David Calavera and Lorenzo Fontana help you harness the power of BPF to make any computing system more observable. Familiarize yourself with the essential concepts you’ll use on a day-to-day basis and augment your knowledge about performance optimization, networking, and security. Then see how it all comes together with code examples in C, Go, and Python. Write applications that use BPF to observe and modify the Linux kernel’s behavior on demand Inject code to monitor, trace, and observe events in the kernel in a secure way—no need to recompile the kernel or reboot the system Explore code examples in C, Go, and Python Gain a more thorough understanding of the BPF program lifecycle

Download or read book Operating System Security written by Trent Jaeger and published by Morgan & Claypool Publishers. This book was released on 2008 with total page 237 pages. Available in PDF, EPUB and Kindle. Book excerpt: "Operating systems provide the fundamental mechanisms for securing computer processing. Since the 1960s, operating systems designers have explored how to build"secure" operating systems - operating systems whose mechanisms protect the system against a motivated adversary. Recently, the importance of ensuring such security has become a mainstream issue for all operating systems. In this book, we examine past research that outlines the requirements for a secure operating system and research that implements example systems that aim for such requirements. For system designs that aimed to satisfy these requirements,we see that the complexity of software systems often results in implementation challenges that we are still exploring to this day. However, if a system design does not aim for achieving the secure operating system requirements, then its security features fail to protect the system in a myriad of ways. We also study systems that have been retro-fit with secure operating system features after an initial deployment. In all cases, the conflict between function on one hand and security on the other leads to difficult choices and the potential for unwise compromises. From this book, we hope that systems designers and implementers will learn the requirements for operating systems that effectively enforce security and will better understand how to manage the balance between function and security."--BOOK JACKET.

Download or read book Red Hat Enterprise Linux 6 Administration written by Sander van Vugt and published by John Wiley & Sons. This book was released on 2013-01-23 with total page 673 pages. Available in PDF, EPUB and Kindle. Book excerpt: The definitive guide to administering a Red Hat Enterprise Linux 6 network Linux professionals who need a go-to guide on version 6 of Red Hat Enterprise Linux (RHEL) will find what they need in this comprehensive Sybex book. It covers RHEL administration in detail, including how to set up and manage web and mail services, use RHEL in enterprise environments, secure it, optimize storage, configure for virtualization and high availability, and much more. It also provides a great study aid for those preparing for either the RHCSA or RHCE certification exam. Red Hat is the Linux market leader, and Red Hat administrators are in demand This Sybex guide is a comprehensive resource on Red Hat Enterprise Linux administration and useful for those preparing for one of the Red Hat certification exams Covers setting up and managing web and mail services, using RHEL in enterprise environments, securing RHEL, and optimizing storage to fit your environment Explores advanced RHEL configurations, including virtualization and high availability Red Hat Enterprise Linux 6 Administration is the guide Linux professionals and Red Hat administrators need to stay current on the newest version.

Download or read book Hadoop Security written by Ben Spivey and published by "O'Reilly Media, Inc.". This book was released on 2015-06-29 with total page 336 pages. Available in PDF, EPUB and Kindle. Book excerpt: As more corporations turn to Hadoop to store and process their most valuable data, the risk of a potential breach of those systems increases exponentially. This practical book not only shows Hadoop administrators and security architects how to protect Hadoop data from unauthorized access, it also shows how to limit the ability of an attacker to corrupt or modify data in the event of a security breach. Authors Ben Spivey and Joey Echeverria provide in-depth information about the security features available in Hadoop, and organize them according to common computer security concepts. You’ll also get real-world examples that demonstrate how you can apply these concepts to your use cases. Understand the challenges of securing distributed systems, particularly Hadoop Use best practices for preparing Hadoop cluster hardware as securely as possible Get an overview of the Kerberos network authentication protocol Delve into authorization and accounting principles as they apply to Hadoop Learn how to use mechanisms to protect data in a Hadoop cluster, both in transit and at rest Integrate Hadoop data ingest into enterprise-wide security architecture Ensure that security architecture reaches all the way to end-user access

Download or read book Mastering Linux Security and Hardening written by Donald A. Tevault and published by Packt Publishing Ltd. This book was released on 2020-02-21 with total page 652 pages. Available in PDF, EPUB and Kindle. Book excerpt: A comprehensive guide to securing your Linux system against cyberattacks and intruders Key Features Deliver a system that reduces the risk of being hacked Explore a variety of advanced Linux security techniques with the help of hands-on labs Master the art of securing a Linux environment with this end-to-end practical guide Book DescriptionFrom creating networks and servers to automating the entire working environment, Linux has been extremely popular with system administrators for the last couple of decades. However, security has always been a major concern. With limited resources available in the Linux security domain, this book will be an invaluable guide in helping you get your Linux systems properly secured. Complete with in-depth explanations of essential concepts, practical examples, and self-assessment questions, this book begins by helping you set up a practice lab environment and takes you through the core functionalities of securing Linux. You'll practice various Linux hardening techniques and advance to setting up a locked-down Linux server. As you progress, you will also learn how to create user accounts with appropriate privilege levels, protect sensitive data by setting permissions and encryption, and configure a firewall. The book will help you set up mandatory access control, system auditing, security profiles, and kernel hardening, and finally cover best practices and troubleshooting techniques to secure your Linux environment efficiently. By the end of this Linux security book, you will be able to confidently set up a Linux server that will be much harder for malicious actors to compromise.What you will learn Create locked-down user accounts with strong passwords Configure firewalls with iptables, UFW, nftables, and firewalld Protect your data with different encryption technologies Harden the secure shell service to prevent security break-ins Use mandatory access control to protect against system exploits Harden kernel parameters and set up a kernel-level auditing system Apply OpenSCAP security profiles and set up intrusion detection Configure securely the GRUB 2 bootloader and BIOS/UEFI Who this book is for This book is for Linux administrators, system administrators, and network engineers interested in securing moderate to complex Linux environments. Security consultants looking to enhance their Linux security skills will also find this book useful. Working experience with the Linux command line and package management is necessary to understand the concepts covered in this book.

Download or read book Practical UNIX and Internet Security written by Simson Garfinkel and published by "O'Reilly Media, Inc.". This book was released on 2003-02-21 with total page 989 pages. Available in PDF, EPUB and Kindle. Book excerpt: When Practical Unix Security was first published more than a decade ago, it became an instant classic. Crammed with information about host security, it saved many a Unix system administrator from disaster. The second edition added much-needed Internet security coverage and doubled the size of the original volume. The third edition is a comprehensive update of this very popular book - a companion for the Unix/Linux system administrator who needs to secure his or her organization's system, networks, and web presence in an increasingly hostile world.Focusing on the four most popular Unix variants today--Solaris, Mac OS X, Linux, and FreeBSD--this book contains new information on PAM (Pluggable Authentication Modules), LDAP, SMB/Samba, anti-theft technologies, embedded systems, wireless and laptop issues, forensics, intrusion detection, chroot jails, telephone scanners and firewalls, virtual and cryptographic filesystems, WebNFS, kernel security levels, outsourcing, legal issues, new Internet protocols and cryptographic algorithms, and much more.Practical Unix & Internet Security consists of six parts: Computer security basics: introduction to security problems and solutions, Unix history and lineage, and the importance of security policies as a basic element of system security. Security building blocks: fundamentals of Unix passwords, users, groups, the Unix filesystem, cryptography, physical security, and personnel security. Network security: a detailed look at modem and dialup security, TCP/IP, securing individual network services, Sun's RPC, various host and network authentication systems (e.g., NIS, NIS+, and Kerberos), NFS and other filesystems, and the importance of secure programming. Secure operations: keeping up to date in today's changing security world, backups, defending against attacks, performing integrity management, and auditing. Handling security incidents: discovering a break-in, dealing with programmed threats and denial of service attacks, and legal aspects of computer security. Appendixes: a comprehensive security checklist and a detailed bibliography of paper and electronic references for further reading and research. Packed with 1000 pages of helpful text, scripts, checklists, tips, and warnings, this third edition remains the definitive reference for Unix administrators and anyone who cares about protecting their systems and data from today's threats.