Read without ads and support Scribd by becoming a Scribd Premium Reader.

See Premium Plans

×

Language:

Download

Go BackAdd Note

Link

Embed

Save for later

You're Reading a Free Preview
Pages 19 to 34 are not shown in this preview.

Buy the Full Version

You're Reading a Free Preview
Pages 53 to 124 are not shown in this preview.

Buy the Full Version

You're Reading a Free Preview
Pages 143 to 259 are not shown in this preview.

Buy the Full Version

You're Reading a Free Preview
Pages 278 to 779 are not shown in this preview.

Buy the Full Version

You're Reading a Free Preview
Pages 798 to 940 are not shown in this preview.

Buy the Full Version

Searching...

Result 00 of 00

00 results for result for

p.

Deployment_Guide

Download or Print

Add To Collection

14.2K

Reads

1

Readcasts

2

Embed Views

Published by

TIP Press Ctrl-F⌘F to search anywhere in the document.

Read without ads and support Scribd by becoming a Scribd Premium Reader.

See Premium Plans

Sections

Introduction
1. Document Conventions
2. Send in Your Feedback
Send in Your Feedback
File System Structure
1. Why Share a Common Structure?
2. Overview of File System Hierarchy Standard (FHS)
2.1. FHS Organization
3. Special File Locations Under Red Hat Enterprise Linux
The ext3 File System
1. Features of ext3
2. Creating an ext3 File System
3. Converting to an ext3 File System
4. Reverting to an ext2 File System
Reverting to an ext2 File System
The proc File System
1. A Virtual File System
1.1. Viewing Virtual Files
1.2. Changing Virtual Files
2. Top-level Files within the proc File System
2.1. /proc/apm
2.2. /proc/buddyinfo
2.3. /proc/cmdline
2.4. /proc/cpuinfo
2.5. /proc/crypto
2.6. /proc/devices
2.7. /proc/dma
2.8. /proc/execdomains
2.9. /proc/fb
2.10. /proc/filesystems
2.11. /proc/interrupts
2.12. /proc/iomem
2.13. /proc/ioports
2.14. /proc/kcore
2.15. /proc/kmsg
2.16. /proc/loadavg
2.17. /proc/locks
2.18. /proc/mdstat
2.19. /proc/meminfo
2.20. /proc/misc
2.21. /proc/modules
2.22. /proc/mounts
2.23. /proc/mtrr
2.24. /proc/partitions
2.25. /proc/pci
2.26. /proc/slabinfo
2.27. /proc/stat
2.28. /proc/swaps
2.29. /proc/sysrq-trigger
2.30. /proc/uptime
2.31. /proc/version
3. Directories within /proc/
3.1. Process Directories
3.2. /proc/bus/
3.3. /proc/driver/
3.4. /proc/fs
3.5. /proc/ide/
3.6. /proc/irq/
3.7. /proc/net/
3.8. /proc/scsi/
3.9. /proc/sys/
3.10. /proc/sysvipc/
3.11. /proc/tty/
4. Using the sysctl Command
5. Additional Resources
5.1. Installed Documentation
5.2. Useful Websites
Additional Resources
Redundant Array of Independent Disks (RAID)
1. What is RAID?
2. Who Should Use RAID?
3. Hardware RAID versus Software RAID
3.1. Hardware RAID
3.2. Software RAID
4. RAID Levels and Linear Support
5. Configuring Software RAID
Configuring Software RAID
5.1. Creating the RAID Partitions
Figure 4.4. RAID 1 Partitions Ready, Pre-Device and Mount Point Creation
5.2. Creating the RAID Devices and Mount Points
Figure 4.6. Making a RAID Device and Assigning a Mount Point
Figure 4.9. Final Sample RAID With LVM Configuration
Swap Space
1. What is Swap Space?
2. Adding Swap Space
2.1. Extending Swap on an LVM2 Logical Volume
2.2. Creating an LVM2 Logical Volume for Swap
2.3. Creating a Swap File
Creating a Swap File
3. Removing Swap Space
3.1. Reducing Swap on an LVM2 Logical Volume
3.2. Removing an LVM2 Logical Volume for Swap
3.3. Removing a Swap File
Removing an LVM2 Logical Volume for
4. Moving Swap Space
Managing Disk Storage
1. Standard Partitions using parted
1.1. Viewing the Partition Table
1.2. Creating a Partition
1.3. Removing a Partition
1.4. Resizing a Partition
2. LVM Partition Management
Resizing a Partition
Implementing Disk Quotas
1. Configuring Disk Quotas
1.1. Enabling Quotas
1.2. Remounting the File Systems
1.3. Creating the Quota Database Files
1.4. Assigning Quotas per User
Assigning Quotas per User
1.5. Assigning Quotas per Group
1.6. Setting the Grace Period for Soft Limits
2. Managing Disk Quotas
2.1. Enabling and Disabling
Setting the Grace Period for Soft Limits
2.2. Reporting on Disk Quotas
2.3. Keeping Quotas Accurate
3. Additional Resources
3.1. Installed Documentation
3.2. Related Books
Access Control Lists
1. Mounting File Systems
1.1. NFS
2. Setting Access ACLs
3. Setting Default ACLs
4. Retrieving ACLs
Setting Default ACLs
5. Archiving File Systems With ACLs
6. Compatibility with Older Systems
7. Additional Resources
7.1. Installed Documentation
7.2. Useful Websites
LVM (Logical Volume Manager)
1. What is LVM?
1.1. What is LVM2?
2. LVM Configuration
3. Automatic Partitioning
Automatic Partitioning
4. Manual LVM Partitioning
4.1. Creating the /boot/ Partition
Figure 9.4. Two Blank Drives, Ready For Configuration
Creating the /boot/ Partition
4.2. Creating the LVM Physical Volumes
Creating the LVM Physical Volumes
4.3. Creating the LVM Volume Groups
Creating the LVM Volume Groups
4.4. Creating the LVM Logical Volumes
5. Using the LVM utility system-config-lvm
5.1. Utilizing uninitialized entities
5.2. Adding Unallocated Volumes to a volume group
5.3. Migrating extents
5.4. Adding a new hard disk using LVM
5.5. Adding a new volume group
5.6. Extending a volume group
5.7. Editing a Logical Volume
6. Additional Resources
6.1. Installed Documentation
6.2. Useful Websites
Part II. Package Management
Package Management with RPM
1. RPM Design Goals
2. Using RPM
2.1. Finding RPM Packages
2.2. Installing
2.3. Uninstalling
2.4. Upgrading
2.5. Freshening
2.6. Querying
2.7. Verifying
3. Checking a Package's Signature
Checking a Package's Signature
3.1. Importing Keys
3.2. Verifying Signature of Packages
4. Practical and Common Examples of RPM Usage
Practical and Common Examples of RPM
5.3. Related Books
Package Management Tool
1. Listing and Analyzing Packages
2. Installing and Removing Packages
YUM (Yellowdog Updater Modified)
1. Setting Up a yum Repository
2. yum Commands
3. yum Options
4. Configuring yum
4.1. [main] Options
Configuring yum
4.2. [repository] Options
5. Useful yum Variables
Part III. Network-Related Configuration
Network Interfaces
1. Network Configuration Files
2. Interface Configuration Files
2.1. Ethernet Interfaces
2.2. IPsec Interfaces
2.3. Channel Bonding Interfaces
2.4. Alias and Clone Files
Channel Bonding Interfaces
2.5. Dialup Interfaces
2.6. Other Interfaces
3. Interface Control Scripts
Interface Control Scripts
4. Configuring Static Routes
Configuring Static Routes
5. Network Function Files
Network Function Files
Network Configuration
Chapter 15
1. Overview
2. Establishing an Ethernet Connection
3. Establishing an ISDN Connection
4. Establishing a Modem Connection
5. Establishing an xDSL Connection
Setting Up a T-Online Account
Figure 15.12. xDSL Configuration - Provider Tab
6. Establishing a Token Ring Connection
7. Establishing a Wireless Connection
Establishing a Wireless Connection
8. Managing DNS Settings
Managing DNS Settings
9. Managing Hosts
Managing Hosts
10. Working with Profiles
11. Device Aliases
12. Saving and Restoring the Network Configuration
Controlling Access to Services
Chapter 16
1. Runlevels
2. TCP Wrappers
2.1. xinetd
3. Services Configuration Tool
4. ntsysv
5. chkconfig
Installed Documentation
Berkeley Internet Name Domain (BIND)
1. Introduction to DNS
1.1. Nameserver Zones
1.2. Nameserver Types
1.3. BIND as a Nameserver
/etc/named.conf
2. /etc/named.conf
BIND as a Nameserver
2.1. Common Statement Types
2.2. Other Statement Types
Other Statement Types
2.3. Comment Tags
3. Zone Files
3.1. Zone File Directives
3.2. Zone File Resource Records
Table 17.1. Seconds compared to other time units
3.3. Example Zone File
3.4. Reverse Name Resolution Zone Files
4. Using rndc
4.1. Configuring /etc/named.conf
Using rndc
4.2. Configuring /etc/rndc.conf
4.3. Command Line Options
Command Line Options
5. Advanced Features of BIND
5.1. DNS Protocol Enhancements
5.2. Multiple Views
5.3. Security
5.4. IP version 6
6. Common Mistakes to Avoid
1. Features of SSH
1.1. Why Use SSH?
2. SSH Protocol Versions
3. Event Sequence of an SSH Connection
3.1. Transport Layer
3.2. Authentication
3.3. Channels
4. Configuring an OpenSSH Server
4.1. Requiring SSH for Remote Connections
Configuring an OpenSSH Server
5. OpenSSH Configuration Files
6. Configuring an OpenSSH Client
6.1. Using the ssh Command
Configuring an OpenSSH Client
6.2. Using the scp Command
6.3. Using the sftp Command
7. More Than a Secure Shell
Using the sftp Command
7.1. X11 Forwarding
7.2. Port Forwarding
7.3. Generating Key Pairs
8. Additional Resources
8.1. Installed Documentation
8.2. Useful Websites
Network File System (NFS)
1. How It Works
1.1. Required Services
2. NFS Client Configuration
2.1. Mounting NFS File Systems using /etc/fstab
NFS Client Configuration
3. autofs
3.1. What's new in autofs version 5?
What's new in autofs version 5?
3.2. autofs Configuration
3.3. autofs Common Tasks
4. Common NFS Mount Options
5. Starting and Stopping NFS
Starting and Stopping NFS
6. NFS Server Configuration
NFS Server Configuration
6.1. Exporting or Sharing NFS File Systems
6.2. Command Line Configuration
Command Line Configuration
6.3. Hostname Formats
7. The /etc/exports Configuration File
The /etc/exports Configuration File
7.1. The exportfs Command
The exportfs Command
8. Securing NFS
8.1. Host Access
8.2. File Permissions
9. NFS and portmap
9.1. Troubleshooting NFS and portmap
10. Using NFS over TCP
11. Additional Resources
11.1. Installed Documentation
11.2. Useful Websites
11.3. Related Books
1. Introduction to Samba
1.1. Samba Features
2. Samba Daemons and Related Services
2.1. Samba Daemons
winbindd
3. Connecting to a Samba Share
Connecting to a Samba Share
3.1. Command Line
3.2. Mounting the Share
4. Configuring a Samba Server
4.1. Graphical Configuration
4.2. Command Line Configuration
4.3. Encrypted Passwords
5. Starting and Stopping Samba
6. Samba Server Types and the smb.conf File
6.1. Stand-alone Server
Samba Server Types and the smb.conf File
6.2. Domain Member Server
6.3. Domain Controller
7. Samba Security Modes
Samba Security Modes
7.1. User-Level Security
7.2. Share-Level Security
8. Samba Account Information Databases
Share-Level Security
9. Samba Network Browsing
9.1. Domain Browsing
9.2. WINS (Windows Internetworking Name Server)
Samba Network Browsing
10. Samba with CUPS Printing Support
10.1. Simple smb.conf Settings
11. Samba Distribution Programs
12. Additional Resources
12.1. Installed Documentation
12.2. Related Books
12.3. Useful Websites
Dynamic Host Configuration Protocol (DHCP)
1. Why Use DHCP?
2. Configuring a DHCP Server
2.1. Configuration File
2.2. Lease Database
2.3. Starting and Stopping the Server
2.4. DHCP Relay Agent
3. Configuring a DHCP Client
4. Additional Resources
4.1. Installed Documentation
Apache HTTP Server
1. Apache HTTP Server 2.2
1.1. Features of Apache HTTP Server 2.2
2. Migrating Apache HTTP Server Configuration Files
2.1. Migrating Apache HTTP Server 2.0 Configuration Files
2.2. Migrating Apache HTTP Server 1.3 Configuration Files to 2.0
3. Starting and Stopping httpd
Starting and Stopping httpd
4. Apache HTTP Server Configuration
4.1. Basic Settings
4.2. Default Settings
5. Configuration Directives in httpd.conf
5.1. General Configuration Tips
AddHandler
AddType
AllowOverride
CustomLog
Directory
ErrorLog
KeepAliveTimeout
LoadModule
Location
LogLevel
Options
ScriptAlias
VirtualHost
5.2. Configuration Directives for SSL
Configuration Directives for SSL
5.3. MPM Specific Server-Pool Directives
6. Adding Modules
Adding Modules
7. Virtual Hosts
7.1. Setting Up Virtual Hosts
8. Apache HTTP Secure Server Configuration
Apache HTTP Secure Server Configuration
8.1. An Overview of Security-Related Packages
8.2. An Overview of Certificates and Security
8.3. Using Pre-Existing Keys and Certificates
Using Pre-Existing Keys and Certificates
8.4. Types of Certificates
8.5. Generating a Key
Figure 22.17. Generating a self signed certificate for your server
8.6. How to configure the server to use the new key
9. Additional Resources
9.1. Useful Websites
1. The File Transport Protocol
1.1. Multiple Ports, Multiple Modes
2. FTP Servers
2.1. vsftpd
3. Files Installed with vsftpd
4. Starting and Stopping vsftpd
Files Installed with vsftpd
4.1. Starting Multiple Copies of vsftpd
5. vsftpd Configuration Options
5.1. Daemon Options
5.2. Log In Options and Access Controls
Log In Options and Access Controls
5.3. Anonymous User Options
5.4. Local User Options
5.5. Directory Options
5.6. File Transfer Options
File Transfer Options
5.7. Logging Options
5.8. Network Options
1. Email Protocols
1.1. Mail Transport Protocols
1.2. Mail Access Protocols
2. Email Program Classifications
2.1. Mail Transport Agent
2.2. Mail Delivery Agent
2.3. Mail User Agent
3. Mail Transport Agents
3.1. Sendmail
3.2. Postfix
3.3. Fetchmail
4. Mail Transport Agent (MTA) Configuration
Mail Transport Agent (MTA) Configuration
Figure 24.1. Mail Transport Agent Switcher
5. Mail Delivery Agents
5.1. Procmail Configuration
Procmail Configuration
5.2. Procmail Recipes
6. Mail User Agents
Mail User Agents
6.1. Securing Communication
7.3. Related Books
Lightweight Directory Access Protocol (LDAP)
1. Why Use LDAP?
1.1. OpenLDAP Features
2. LDAP Terminology
3. OpenLDAP Daemons and Utilities
OpenLDAP Daemons and Utilities
3.1. NSS, PAM, and LDAP
3.2. PHP4, LDAP, and the Apache HTTP Server
3.3. LDAP Client Applications
4. OpenLDAP Configuration Files
5. The /etc/openldap/schema/ Directory
The /etc/openldap/schema/ Directory
6. OpenLDAP Setup Overview
6.1. Editing /etc/openldap/slapd.conf
7. Configuring a System to Authenticate Using OpenLDAP
7.1. PAM and LDAP
7.2. Migrating Old Authentication Information to LDAP Format
8. Migrating Directories from Earlier Releases
9.1. Installed Documentation
9.2. Useful Websites
9.3. Related Books
Authentication Configuration
1. User Information
Winbind
2. Authentication
3. Options
4. Command Line Version
Part IV. System Configuration
1. Disabling Shutdown Via Ctrl-Alt-Del
2. Disabling Console Program Access
3. Defining the Console
4. Making Files Accessible From the Console
5. Enabling Console Access for Other Applications
6. The floppy Group
The floppy Group
The sysconfig Directory
1. Files in the /etc/sysconfig/ Directory
1.1. /etc/sysconfig/amd
1.2. /etc/sysconfig/apmd
1.3. /etc/sysconfig/arpwatch
1.4. /etc/sysconfig/authconfig
1.5. /etc/sysconfig/autofs
1.6. /etc/sysconfig/clock
1.7. /etc/sysconfig/desktop
1.8. /etc/sysconfig/dhcpd
1.9. /etc/sysconfig/exim
1.10. /etc/sysconfig/firstboot
1.11. /etc/sysconfig/gpm
1.12. /etc/sysconfig/hwconf
1.13. /etc/sysconfig/i18n
1.14. /etc/sysconfig/init
1.15. /etc/sysconfig/ip6tables-config
1.16. /etc/sysconfig/iptables-config
1.17. /etc/sysconfig/irda
1.18. /etc/sysconfig/keyboard
1.19. /etc/sysconfig/kudzu
1.20. /etc/sysconfig/named
1.21. /etc/sysconfig/netdump
1.22. /etc/sysconfig/network
1.23. /etc/sysconfig/nfs
1.24. /etc/sysconfig/ntpd
1.25. /etc/sysconfig/radvd
1.26. /etc/sysconfig/samba
1.27. /etc/sysconfig/selinux
1.28. /etc/sysconfig/sendmail
1.29. /etc/sysconfig/spamassassin
1.30. /etc/sysconfig/squid
1.31. /etc/sysconfig/system-config-securitylevel
1.32. /etc/sysconfig/system-config-selinux
1.33. /etc/sysconfig/system-config-users
1.34. /etc/sysconfig/system-logviewer
1.35. /etc/sysconfig/tux
1.36. /etc/sysconfig/vncservers
1.37. /etc/sysconfig/xinetd
2. Directories in the /etc/sysconfig/ Directory
Date and Time Configuration
1. Time and Date Properties
2. Network Time Protocol (NTP) Properties
Network Time Protocol (NTP) Properties
3. Time Zone Configuration
Keyboard Configuration
The X Window System
1. The X11R7.1 Release
2. Desktop Environments and Window Managers
2.1. Desktop Environments
2.2. Window Managers
3. X Server Configuration Files
3.1. xorg.conf
4. Fonts
4.1. Fontconfig
4.2. Core X Font System
5. Runlevels and X
Runlevels and X
5.1. Runlevel 3
5.2. Runlevel 5
X Window System Configuration
1. Display Settings
2. Display Hardware Settings
3. Dual Head Display Settings
Dual Head Display Settings
1. User and Group Configuration
1.1. Adding a New User
1.2. Modifying User Properties
1.3. Adding a New Group
1.4. Modifying Group Properties
2. User and Group Management Tools
User and Group Management Tools
2.1. Command Line Configuration
2.2. Adding a User
2.3. Adding a Group
2.4. Password Aging
2.5. Explaining the Process
3. Standard Users
Standard Users
4. Standard Groups
Standard Groups
5. User Private Groups
5.1. Group Directories
User Private Groups
6. Shadow Passwords
Printer Configuration
1. Adding a Local Printer
2. Adding an IPP Printer
3. Adding a Samba (SMB) Printer
Adding a Samba (SMB) Printer
4. Adding a JetDirect Printer
Adding a JetDirect Printer
5. Selecting the Printer Model and Finishing
5.1. Confirming Printer Configuration
6. Printing a Test Page
Confirming Printer Configuration
7. Modifying Existing Printers
7.1. The Settings Tab
7.2. The Policies Tab
7.3. The Access Control Tab
The Access Control Tab
7.4. The Printer and Job OptionsTab
8. Managing Print Jobs
Managing Print Jobs
1. Cron
1.1. Configuring Cron Tasks
1.2. Controlling Access to Cron
1.3. Starting and Stopping the Service
2. At and Batch
Controlling Access to Cron
2.1. Configuring At Jobs
2.2. Configuring Batch Jobs
2.3. Viewing Pending Jobs
2.4. Additional Command Line Options
2.5. Controlling Access to At and Batch
2.6. Starting and Stopping the Service
1. Locating Log Files
2. Viewing Log Files
3. Adding a Log File
4. Monitoring Log Files
Part V. System Monitoring
1. Introduction
2. Implementation
3. Using SystemTap
3.1. Tracing
Gathering System Information
1. System Processes
2. Memory Usage
3. File Systems
4. Hardware
1. Overview of Tools
2. Configuring OProfile
2.1. Specifying the Kernel
2.2. Setting Events to Monitor
Table 39.2. OProfile Processors and Counters
2.3. Separating Kernel and User-space Profiles
3. Starting and Stopping OProfile
4. Saving Data
Starting and Stopping OProfile
5. Analyzing the Data
5.1. Using opreport
5.2. Using opreport on a Single Executable
5.3. Getting more detailed output on the modules
5.4. Using opannotate
6. Understanding /dev/oprofile/
7. Example Usage
8. Graphical Interface
9.1. Installed Docs
Part VI. Kernel and Driver Configuration
Manually Upgrading the Kernel
1. Overview of Kernel Packages
2. Preparing to Upgrade
3. Downloading the Upgraded Kernel
Downloading the Upgraded Kernel
4. Performing the Upgrade
5. Verifying the Initial RAM Disk Image
6. Verifying the Boot Loader
6.1. x86 Systems
Verifying the Boot Loader
6.2. Itanium Systems
6.3. IBM S/390 and IBM System z Systems
6.4. IBM eServer iSeries Systems
6.5. IBM eServer pSeries Systems
IBM eServer iSeries Systems
General Parameters and Modules
1. Kernel Module Utilities
2. Persistent Module Loading
3. Specifying Module Parameters
4. Storage parameters
5. Ethernet Parameters
5.1. Using Multiple Ethernet Cards
5.2. The Channel Bonding Module
Part VII. Security And Authentication
Security Overview
1. Introduction to Security
1.1. What is Computer Security?
1.2. Security Controls
1.3. Conclusion
2. Vulnerability Assessment
2.1. Thinking Like the Enemy
Thinking Like the Enemy
2.2. Defining Assessment and Testing
2.3. Evaluating the Tools
3. Attackers and Vulnerabilities
3.1. A Quick History of Hackers
3.2. Threats to Network Security
Threats to Network Security
3.3. Threats to Server Security
3.4. Threats to Workstation and Home PC Security
4. Common Exploits and Attacks
5. Security Updates
5.1. Updating Packages
Securing Your Network
1. Workstation Security
1.1. Evaluating Workstation Security
1.2. BIOS and Boot Loader Security
1.3. Password Security
1.4. Administrative Controls
Table 43.1. Methods of Disabling the Root Account
Figure 43.2. Adding users to the "wheel" group
1.5. Available Network Services
1.6. Personal Firewalls
1.7. Security Enhanced Communication Tools
2. Server Security
2.1. Securing Services With TCP Wrappers and xinetd
Server Security
2.1.1. Enhancing Security With TCP Wrappers
2.2. Securing Portmap
2.3. Securing NIS
2.4. Securing NFS
2.5. Securing the Apache HTTP Server
2.6. Securing FTP
2.7. Securing Sendmail
2.8. Verifying Which Ports Are Listening
3. Single Sign-on (SSO)
3.1. Introduction
3.2. Getting Started with your new Smart Card
Getting Started with your new Smart Card
3.3. How Smart Card Enrollment Works
How Smart Card Enrollment Works
3.4. How Smart Card Login Works
3.5. Configuring Firefox to use Kerberos for SSO
4. Pluggable Authentication Modules (PAM)
4.1. Advantages of PAM
4.2. PAM Configuration Files
4.3. PAM Configuration File Format
4.4. Sample PAM Configuration Files
4.5. Creating PAM Modules
4.6. PAM and Administrative Credential Caching
4.7. PAM and Device Ownership
4.8. Additional Resources
5. TCP Wrappers and xinetd
TCP Wrappers and xinetd
Figure 43.9. Access Control to Network Services
5.1. TCP Wrappers
5.2. TCP Wrappers Configuration Files
5.3. xinetd
5.4. xinetd Configuration Files
5.5. Additional Resources
6. Kerberos
6.1. What is Kerberos?
6.2. Kerberos Terminology
6.3. How Kerberos Works
6.4. Kerberos and PAM
6.5. Configuring a Kerberos 5 Server
6.6. Configuring a Kerberos 5 Client
Configuring a Kerberos 5 Client
6.7. Domain-to-Realm Mapping
6.8. Setting Up Secondary KDCs
Setting Up Secondary KDCs
6.9. Setting Up Cross Realm Authentication
6.10. Additional Resources
7. Virtual Private Networks (VPNs)
7.1. How Does a VPN Work?
Virtual Private Networks (VPNs)
7.2. VPNs and Red Hat Enterprise Linux
7.3. IPsec
7.4. Creating an IPsec Connection
7.5. IPsec Installation
7.6. IPsec Host-to-Host Configuration
7.7. IPsec Network-to-Network Configuration
7.8. Starting and Stopping an IPsec Connection
8. Firewalls
8.1. Netfilter and IPTables
8.2. Basic Firewall Configuration
8.3. Using IPTables
8.4. Common IPTables Filtering
Common IPTables Filtering
8.5. FORWARD and NAT Rules
8.6. Malicious Software and Spoofed IP Addresses
8.7. IPTables and Connection Tracking
8.8. IPv6
8.9. Additional Resources
9. IPTables
9.1. Packet Filtering
9.2. Differences Between IPTables and IPChains
9.3. Command Options for IPTables
9.4. Saving IPTables Rules
9.5. IPTables Control Scripts
9.6. IPTables and IPv6
9.7. Additional Resources
Security and SELinux
1. Access Control Mechanisms (ACMs)
1.1. Discretionary Access Control (DAC)
1.2. Access Control Lists (ACLs)
1.3. Mandatory Access Control (MAC)
1.4. Role-based Access Control (RBAC)
1.5. Multi-Level Security (MLS)
1.6. Multi-Category Security (MCS)
2. Introduction to SELinux
2.1. SELinux Overview
2.2. Files Related to SELinux
2.3. Additional Resources
3. Brief Background and History of SELinux
4. Multi-Category Security (MCS)
4.1. Introduction
4.2. Applications for Multi-Category Security
Multi-Category Security (MCS)
4.3. SELinux Security Contexts
5. Getting Started with Multi-Category Security (MCS)
5.1. Introduction
5.2. Comparing SELinux and Standard Linux User Identities
5.3. Configuring Categories
5.4. Assigning Categories to Users
5.5. Assigning Categories to Files
Assigning Categories to Files
6. Multi-Level Security (MLS)
6.1. Why Multi-Level?
6.2. Security Levels, Objects and Subjects
6.3. MLS Policy
6.4. LSPP Certification
7. SELinux Policy Overview
7.1. What is the SELinux Policy?
7.2. Where is the Policy?
7.3. The Role of Policy in the Boot Process
The Role of Policy in the Boot Process
7.4. Object Classes and Permissions
8. Targeted Policy Overview
8.1. What is the Targeted Policy?
Targeted Policy Overview
8.2. Files and Directories of the Targeted Policy
8.3. Understanding the Users and Roles in the Targeted Policy
Working With SELinux
1. End User Control of SELinux
1.1. Moving and Copying Files
1.2. Checking the Security Context of a Process, User, or File Object
1.3. Relabeling a File or Directory
1.4. Creating Archives That Retain Security Contexts
2. Administrator Control of SELinux
2.1. Viewing the Status of SELinux
2.2. Relabeling a File System
2.3. Managing NFS Home Directories
Managing NFS Home Directories
2.4. Granting Access to a Directory or a Tree
2.5. Backing Up and Restoring the System
2.6. Enabling or Disabling Enforcement
2.7. Enable or Disable SELinux
2.8. Changing the Policy
2.9. Specifying the Security Context of Entire File Systems
2.10. Changing the Security Category of a File or User
2.11. Running a Command in a Specific Security Context
2.12. Useful Commands for Scripts
2.13. Changing to a Different Role
2.14. When to Reboot
3. Analyst Control of SELinux
3.1. Enabling Kernel Auditing
3.2. Dumping and Viewing Logs
Customizing SELinux Policy
1.1. Modular Policy
2. Building a Local Policy Module
2.1. Using audit2allow to Build a Local Policy Module
2.2. Analyzing the Type Enforcement (TE) File
2.3. Loading the Policy Package
Analyzing the Type Enforcement (TE) File
Part VIII. Red Hat Training And Certification
Red Hat Training and Certification
1. Three Ways to Train
2. Microsoft Certified Professional Resource Center
Certification Tracks
1. Free Pre-assessment tests
RH033: Red Hat Linux Essentials
1. Course Description
1.1. Prerequisites
1.2. Goal
1.3. Audience
1.4. Course Objectives
RH035: Red Hat Linux Essentials for Windows Professionals
1.5. Follow-on Courses
RH202 RHCT EXAM - The fastest growing credential in all of Linux
RH253 Red Hat Linux Networking and Security Administration
RH300: RHCE Rapid track course (and RHCE exam)
RH302 RHCE EXAM
1.2. Content
RHS333: RED HAT enterprise security: network services
RH401: Red Hat Enterprise Deployment and systems management
RH423: Red Hat Enterprise Directory services and authentication
1. RHS427: Introduction to SELinux and Red Hat Targeted Policy
1.1. Audience
1.2. Course Summary
2. RHS429: Red Hat Enterprise SE Linux Policy Administration
RH436: Red Hat Enterprise storage management
RH442: Red Hat Enterprise system monitoring and performance tuning
Red Hat Enterprise Linux Developer Courses
1. RHD143: Red Hat Linux Programming Essentials
2. RHD221 Red Hat Linux Device Drivers
3. RHD236 Red Hat Linux Kernel Internals
4. RHD256 Red Hat Linux Application Development and Porting
1. RHD161 JBoss and EJB3 for Java
2. RHD163 JBoss for Web Developers
2.1. Prerequisites
3. RHD167: JBOSS - HIBERNATE ESSENTIALS
3.1. Prerequisites
3.2. Course Summary
4. RHD267: JBOSS - ADVANCED HIBERNATE
4.1. Prerequisites
5. RHD261:JBOSS for advanced J2EE developers
5.1. Prerequisites
6. RH336: JBOSS for Administrators
6.1. Prerequisites
6.2. Course Summary
7. RHD439: JBoss Clustering
7.1. Prerequisites
8. RHD449: JBoss jBPM
8.1. Description
8.2. Prerequisites
9. RHD451 JBoss Rules
9.1. Prerequisites

Info and Rating

Category:	Uncategorized.
Rating:
Upload Date:	08/25/2010
Copyright:	Attribution Non-commercial
Tags:	No tags

ebook download or readfalse online.

Flag for inappropriate content

Download and print this document

Read offline in your PDF viewer
Edit this document in Adobe Acrobat, Notepad
Keep a copy in case this version is deleted from Scribd
Read and print without ads
Email the file

Choose a format to download in

Download

Read without ads and support Scribd by becoming a Scribd Premium Reader.

See Premium Plans

More From This User

NS4300N_PM_v2.4

286 Reads

57 Reads

291 Reads

55 Reads

260 Reads

3885028-DSL-2640T-Manual

1068 Reads

29812784 Skinner Science Technology Clocks Auction 2502

187 Reads

Blade Conference

695 Reads

bx-manblade-s1-uid-en

4389 Reads

sb11-sb11a-ibp-cg

6389 Reads

Notes

Load more

About

Premium

Advertise with us

Support

Partners

Developers / API

Legal

© Copyright 2013 Scribd Inc.

Language: