SLE341 Securing SUSE Linux Enterprise Server

Date/Time
June 21, 2021 - June 23, 2021
09:00 - 17:00

Securing SUSE Linux Enterprise Server 12

This ​​course ​introduces ​attendees ​to ​security ​topics ​for SUSE Linux Enterprise Server. ​

​Attendees ​will be introduced to the basic computer security concepts and will ​learn ​how ​to ​develop ​a ​security ​policy ​and ​implement ​a ​more ​secure ​SUSE ​environment.

Course content summary

During this course the students will learn:

• Understand Security Concepts and Cryptography Basics.
• Understand SUSE Security Resources and SLES 12 Security Certifications.
• Secure the Boot Process.
• Understand the YaST Security Module.
• Understand Configurable Kernel Security Settings.
• Understand the Importance of Patches and Updates.
• Filesystem Security.
• Secure Local User Accounts and Restricting Access to the Root Account.
• Understand Systemd Session Management and Resource Control.
• PAM Modules.
• Delegate Administrative Privilege (sudo, polkit).
• Understand Network Packet Filtering, TCP Wrappers and Xinetd.
• Restrict Network Access with Systemd.
• Understand and Configure Virtual Private Networks.
• Use Security Audit Tools: SUSE Seccheck, AIDE, Linux Audit Framework, Centralized Logging.
• Understand the Linux Security Modules Framework ( LSM ).
• Understand How AppArmor and SELinux Compare.

Audience

• This course is designed for SUSE ​system ​administrators ​who ​want ​to ​learn ​how ​to ​secure ​their ​systems.

Prerequisites

• SCE in Enterprise Linux or equivalent experience is strongly recommended.

Outline for this course

• Section 1: Introduction to Security
• Section 2: Basic System Lockdown
• Section 3: Local Account Security
• Section 4: Privilege Elevation
• Section 5: Network Service Lockdown
• Section 6: Security Audit Tools
• Section 7: Linux Security Modules
• More: here

Recommended next exam or course

• SUSE Certified Engineer SCE – Enterprise Linux
• SMGR201 SUSE Manager Administration
• SES201 SUSE Enterprise Storage Administration
• SLE321 High Availability Clustering with SUSE Linux Enterprise