Chapter 3
Security
THE FOLLOWING COMPTIA LINUX+ EXAM OBJECTIVES ARE COVERED IN THIS CHAPTER:
3.1 Given a scenario, apply or acquire the appropriate user and/or group permissions and ownership
- File and directory permissions
- Read, write, execute
- User, group, other
- SUID
- Octal notation
- umask
- Sticky bit
- GUID
- Inheritance
- Utilities
chmodchownchgrpgetfaclsetfacllsulimitchage
- Context-based permissions
- SELinux configurations
- Disabled
- Permissive
- Enforcing
- SELinux policy
- Targeted
- SELinux tools
setenforcegetenforcesestatussetseboolgetseboolchconrestoreconls -Zps -Z
- AppArmor
aa-disableaa-complainaa-unconfined/etc/apparmor.d//etc/apparmor.d/tunables
- Privilege escalation
susudowheelvisudosudoedit
- User types
- Root
- Standard
- Service
- SELinux configurations
- File and directory permissions
- 3.2 Given a scenario, configure and implement appropriate access and authentication methods
- PAM:
- Password policies
- LDAP integration
- User lockouts
- Required, allowed, or sufficient
/etc/pam.d/pam_tally2...
- PAM:
