Signal9Signal9 — home
online
Engineer

Linux Security

Harden systems and implement security controls

0 of 56 labs · 8 modules
StartNext lab

01SSH Hardening

0 / 6
  1. se01
  2. stig-warning-banner
  3. se06
  4. stig-ssh-hardening
  5. stig-ssh-crypto
  6. ssh-config-key-lockdown

02Sudo & Privilege

0 / 8
  1. sudo-drop-in-backdoor
  2. se05
  3. se11
  4. sudo-oncall
  5. sudo-escalation-trail
  6. stig-sudo-policy
  7. security-least-privilege
  8. sudo-misery

03Access Control

0 / 11
  1. leaky-backup-script
  2. stig-umask-hardening
  3. cis-cron-hardening
  4. stig-file-permissions
  5. se13
  6. immutable-attributes
  7. rogue-suid-hunt
  8. se15
  9. apparmor-profile-modes
  10. apparmor-profile-rule
  11. se14

04Accounts & Authentication

0 / 9
  1. se02
  2. sec-pam-pwquality
  3. se12
  4. stig-password-policy
  5. security-orphaned-homes
  6. stig-account-hygiene
  7. se04
  8. stig-pam-lockout
  9. sec-pam-faillock

05System Hardening

0 / 9
  1. cis-core-dumps
  2. se10
  3. stig-sysctl-kernel
  4. cis-network-params
  5. cis-filesystem-modules
  6. cis-filesystem-mounts
  7. cis-service-minimization
  8. systemd-service-sandbox
  9. se07

06Logging & Audit

0 / 5
  1. cis-journald-logging
  2. se03
  3. se08
  4. stig-auditd-rules
  5. se09

07Signatures, Crypto & Patching

0 / 5
  1. signature-verify
  2. gpg-keys-and-signing
  3. security-patch-triage
  4. security-tls-crypto-policy
  5. pki-service-certificate

08Hardening Capstones

0 / 3
  1. stig-baseline
  2. stig-full-baseline
  3. harden-capstone