Linux System Security - 4 days Online Classroom

Linux System Security - 4 days Online Classroom

Strengthen your ability to secure Linux systems against modern cyber threats with this hands-on Linux System Security course. Designed for IT professionals and system administrators, the course covers essential security concepts, system hardening techniques, access control, authentication, encryption, network security, vulnerability management, and security monitoring.

Through practical labs and real-world scenarios, participants will learn how to identify security risks, protect Linux servers, implement defense-in-depth strategies, secure network services, and respond effectively to security incidents. By the end of the course, learners will have the skills and confidence to build, manage, and maintain secure Linux environments in enterprise, cloud, and hybrid infrastructures.

Key Features

• Course and material in english
• Intermediate level
• 4 days of live instructor-led virtual training (8 hours / day)
• Practical exercises using live lab environments
• Real enterprise-grade case studies
• Full set of digital course materials
• Post-course guides and downloadable tools
• 50+ recommended study hours
• Certificate included

Learning Outcomes

• User Account and Access Control: Learn to securely manage Linux users, passwords, permissions, and access policies while monitoring user activity and enforcing security best practices.
• Logging and Auditing: Configure Linux logging and auditing tools to track system activity, monitor critical events, investigate anomalies, and support compliance requirements.
• Malware and Intrusion Detection: Implement security tools such as AIDE and ClamAV to detect malware, monitor file integrity, identify rootkits, and strengthen system defenses.
• File and Data Security: Protect data with access controls, encryption, secure storage, and privilege management using tools such as LUKS and sudo. Gain insight into vulnerability assessment and data protection techniques.

Target Audience

• Linux System Administrators
• Linux Engineers
• Network Administrators
• Cybersecurity Analysts
• Security Engineers
• DevOps Engineers
• Cloud Engineers
• Infrastructure Engineers
• IT Operations Professionals
• Technical Support Engineers responsible for Linux environments
• IT professionals seeking to improve Linux security and hardening skills

Prerequisites

• Basic Linux administration knowledge
• Familiarity with Linux command-line operations
• Understanding of user accounts, file permissions, and system services
• Basic networking concepts, including TCP/IP and common network services
• Previous experience administering Linux systems is recommended

Course Outline

Day 1

Session 1: Introduction to Linux Security

• Linux security fundamentals
• Common attack methods and security controls
• Security standards, compliance, and STIGs

Session 2: Securing the User Environment

• User account security and account defaults
• File permissions and access controls
• Command-line history management

Session 3: Linux Logging and Auditing

• Security logs and login monitoring
• Journal management and audit records
• Audit rules, reporting, and performance

Session 4: SELinux

• DAC vs MAC security models
• SELinux policies, contexts, and commands
• SELinux booleans, domains, and configuration management

Day 2

Session 5: SELinux Modules

• Managing SELinux modules and policies
• Creating custom rules with audit2allow
• Type enforcement and file context management

Session 6: Red Hat Firewall

• Firewalld administration and architecture
• Managing ports, services, zones, and rich rules
• Fail2ban configuration and protection

Session 7: Securing SSH

• SSH key management and authentication
• Access restrictions and server hardening
• Certificate-based authentication

Session 8: Securing Applications

• TCP Wrapper access controls
• NTP and Chrony security
• Secure application and service configuration

Day 3

Session 9: Intrusion Detection and Prevention

• Host intrusion detection with AIDE
• File integrity monitoring and rootkit detection
• ClamAV installation and malware protection

Session 10: Creating and Signing RPM Packages

• CVE awareness and package security
• RPM package management and rollback
• Package creation, signing, and repository management

Session 11: Pluggable Authentication Modules (PAM)

• PAM architecture and configuration
• Access control for services and SSH
• Password policies, login controls, and resource limits

Session 12: Linux Password Security

• Password hashing and strength validation
• Common password attack methods
• Password auditing and cracking tools for security assessment

Day 4

Session 13: Sudo and Login Restrictions

• Sudo configuration and administration
• Remote sudo, logging, and session replay
• Root access controls and timeout policies

Session 14: Securing the Linux Filesystem

• Secure partitioning and boot protection
• Data sanitization and secure deletion
• ACLs, file attributes, and LUKS encryption

Appendix A: Red Hat Identity Management

• Identity Management (IdM) architecture
• IdM server and client deployment

Appendix B: Certificate-Based Authentication

• Certificate Authority (CA) creation
• TLS-secured logging and services
• SSL/TLS configuration for VSFTPD

Appendix C: Audit Records

• Audit log analysis and interpretation

Appendix D: Root Password Recovery

• Resetting a lost root password and recovery procedures

FAQ

When is the class held?

The majority of the class is a full-day online course from morning to afternoon CET with 8 hours / day straight. However, please contact us to confirm the final detailed schedules.

What will I learn in this course?

You will learn how to secure Linux systems through hardening techniques, authentication controls, access management, encryption, network security, vulnerability assessment, logging, auditing, and security monitoring.

Is this course suitable for beginners?

The course is designed for professionals with foundational Linux administration skills. Prior Linux experience is recommended to gain maximum value from the hands-on exercises.

Does the course include hands-on labs?

Yes. The training includes practical labs that allow you to configure networks, analyze traffic, troubleshoot issues, and work with networking tools in realistic Linux environments.

Will I learn how to secure Linux networks?

Yes. The course covers firewall configuration, network access controls, secure network services, and techniques for protecting Linux systems from network-based attacks.

Are security monitoring and auditing included?

Yes. You will learn how to analyze logs, monitor system activity, perform security audits, and identify potential threats or suspicious behavior.

Is this course relevant for cloud and DevOps environments?

Absolutely. The security principles taught apply to on-premises servers, cloud infrastructure, containers, and DevOps workflows where Linux systems play a critical role.

What practical skills will I gain?

You will be able to secure Linux servers, implement access controls, configure firewalls, monitor security events, manage encryption, perform audits, and respond to security incidents.

What job roles can benefit from this training?

This course is valuable for Linux Administrators, Security Engineers, Cybersecurity Analysts, DevOps Engineers, Infrastructure Engineers, Cloud Engineers, and IT Operations professionals responsible for securing Linux systems.