Lesson 8.1: Capstone: a Linux 201 review of a server
A new application server, app03, is about to take traffic. Before it does, you review it with everything from this course: how its services are sandboxed, whether its scheduled backups actually run, whether its logs are rotated, how its temporary file systems are mounted, and which programs carry extra privileges. You record each finding with severity and fix, sort them, seal the report and say what must change before go-live.
24 min
You will learn to
- Review services, timers, logs, mounts and privileges
- Record findings with severity and fix
- Prioritise a critical privilege finding
- Seal a report
- Give a go-live recommendation
Key terms
- Baseline
- The expected secure state a server is compared against.
- Go-live gate
- Conditions a system must meet before it takes production traffic.
- Finding
- One problem with area, severity, evidence and fix.
- Re-test
- Checking a fix with the same command that found the problem.
- Report seal
- A hash of the report at delivery.
← Package management on Debian and Ubuntu: apt · All lessons · Computer crime law: what is illegal almost everywhere →