Next

Red Hat Enterprise Linux 9 Essentials Book now available.

Purchase a copy of Red Hat Enterprise Linux 9 (RHEL 9) Essentials

Red Hat Enterprise Linux 9 Essentials Print and eBook (PDF) editions contain 34 chapters and 298 pages

Red Hat Enterprise Linux 5

Red Hat Enterprise Linux Deployment Guide

Legal Notice

Abstract

This Deployment Guide documents relevant information regarding the deployment, configuration and administration of Red Hat Enterprise Linux 5.

Table of Contents

Introduction

1. Document Conventions
2. Send in Your Feedback

I. File Systems

1. File System Structure

1.1. Why Share a Common Structure?

1.2. Overview of File System Hierarchy Standard (FHS)

1.2.1. FHS Organization

1.3. Special File Locations Under Red Hat Enterprise Linux

2. The ext3 File System

2.1. Features of ext3
2.2. Creating an ext3 File System
2.3. Converting to an ext3 File System
2.4. Reverting to an ext2 File System

3. The proc File System

3.1. A Virtual File System

3.1.1. Viewing Virtual Files
3.1.2. Changing Virtual Files

3.2. Top-level Files within the proc File System

3.2.1. /proc/apm
3.2.2. /proc/buddyinfo
3.2.3. /proc/cmdline
3.2.4. /proc/cpuinfo
3.2.5. /proc/crypto
3.2.6. /proc/devices
3.2.7. /proc/dma
3.2.8. /proc/execdomains
3.2.9. /proc/fb
3.2.10. /proc/filesystems
3.2.11. /proc/interrupts
3.2.12. /proc/iomem
3.2.13. /proc/ioports
3.2.14. /proc/kcore
3.2.15. /proc/kmsg
3.2.16. /proc/loadavg
3.2.17. /proc/locks
3.2.18. /proc/mdstat
3.2.19. /proc/meminfo
3.2.20. /proc/misc
3.2.21. /proc/modules
3.2.22. /proc/mounts
3.2.23. /proc/mtrr
3.2.24. /proc/partitions
3.2.25. /proc/pci
3.2.26. /proc/slabinfo
3.2.27. /proc/stat
3.2.28. /proc/swaps
3.2.29. /proc/sysrq-trigger
3.2.30. /proc/uptime
3.2.31. /proc/version

3.3. Directories within /proc/

3.3.1. Process Directories
3.3.2. /proc/bus/
3.3.3. /proc/driver/
3.3.4. /proc/fs
3.3.5. /proc/ide/
3.3.6. /proc/irq/
3.3.7. /proc/net/
3.3.8. /proc/scsi/
3.3.9. /proc/sys/
3.3.10. /proc/sysvipc/
3.3.11. /proc/tty/

3.4. Using the sysctl Command

3.5. Additional Resources

3.5.1. Installed Documentation
3.5.2. Useful Websites

4. Redundant Array of Independent Disks (RAID)

4.1. What is RAID?

4.2. Who Should Use RAID?

4.3. Hardware RAID versus Software RAID

4.3.1. Hardware RAID
4.3.2. Software RAID

4.4. RAID Levels and Linear Support

4.5. Configuring Software RAID

4.5.1. Creating the RAID Partitions
4.5.2. Creating the RAID Devices and Mount Points

5. Swap Space

5.1. What is Swap Space?

5.2. Adding Swap Space

5.2.1. Extending Swap on an LVM2 Logical Volume
5.2.2. Creating an LVM2 Logical Volume for Swap
5.2.3. Creating a Swap File

5.3. Removing Swap Space

5.3.1. Reducing Swap on an LVM2 Logical Volume
5.3.2. Removing an LVM2 Logical Volume for Swap
5.3.3. Removing a Swap File

5.4. Moving Swap Space

6. Managing Disk Storage

6.1. Standard Partitions using parted

6.1.1. Viewing the Partition Table
6.1.2. Creating a Partition
6.1.3. Removing a Partition
6.1.4. Resizing a Partition

6.2. LVM Partition Management

7. Implementing Disk Quotas

7.1. Configuring Disk Quotas

7.1.1. Enabling Quotas
7.1.2. Remounting the File Systems
7.1.3. Creating the Quota Database Files
7.1.4. Assigning Quotas per User
7.1.5. Assigning Quotas per Group
7.1.6. Setting the Grace Period for Soft Limits

7.2. Managing Disk Quotas

7.2.1. Enabling and Disabling
7.2.2. Reporting on Disk Quotas
7.2.3. Keeping Quotas Accurate

7.3. Additional Resources

7.3.1. Installed Documentation
7.3.2. Related Books

8. Access Control Lists

8.1. Mounting File Systems

8.1.1. NFS

8.2. Setting Access ACLs

8.3. Setting Default ACLs

8.4. Retrieving ACLs

8.5. Archiving File Systems With ACLs

8.6. Compatibility with Older Systems

8.7. Additional Resources

8.7.1. Installed Documentation
8.7.2. Useful Websites

9. LVM (Logical Volume Manager)

9.1. What is LVM?

9.1.1. What is LVM2?

9.2. LVM Configuration

9.3. Automatic Partitioning

9.4. Manual LVM Partitioning

9.4.1. Creating the /boot/ Partition
9.4.2. Creating the LVM Physical Volumes
9.4.3. Creating the LVM Volume Groups
9.4.4. Creating the LVM Logical Volumes

9.5. Using the LVM utility system-config-lvm

9.5.1. Utilizing uninitialized entities
9.5.2. Adding Unallocated Volumes to a volume group
9.5.3. Migrating extents
9.5.4. Adding a new hard disk using LVM
9.5.5. Adding a new volume group
9.5.6. Extending a volume group
9.5.7. Editing a Logical Volume

9.6. Additional Resources

9.6.1. Installed Documentation
9.6.2. Useful Websites

II. Package Management

10. Package Management with RPM

10.1. RPM Design Goals

10.2. Using RPM

10.2.1. Finding RPM Packages
10.2.2. Installing
10.2.3. Uninstalling
10.2.4. Upgrading
10.2.5. Freshening
10.2.6. Querying
10.2.7. Verifying

10.3. Checking a Package's Signature

10.3.1. Importing Keys
10.3.2. Verifying Signature of Packages

10.4. Practical and Common Examples of RPM Usage

10.5. Additional Resources

10.5.1. Installed Documentation
10.5.2. Useful Websites
10.5.3. Related Books

11. Package Management Tool

11.1. Listing and Analyzing Packages
11.2. Installing and Removing Packages

12. Red Hat Network

III. Network-Related Configuration

13. Network Interfaces

13.1. Network Configuration Files

13.2. Interface Configuration Files

13.2.1. Ethernet Interfaces
13.2.2. IPsec Interfaces
13.2.3. Channel Bonding Interfaces
13.2.4. Alias and Clone Files
13.2.5. Dialup Interfaces
13.2.6. Other Interfaces

13.3. Interface Control Scripts

13.4. Network Function Files

13.5. Additional Resources

13.5.1. Installed Documentation

14. Network Configuration

14.1. Overview
14.2. Establishing an Ethernet Connection
14.3. Establishing an ISDN Connection
14.4. Establishing a Modem Connection
14.5. Establishing an xDSL Connection
14.6. Establishing a Token Ring Connection
14.7. Establishing a Wireless Connection
14.8. Managing DNS Settings
14.9. Managing Hosts
14.10. Working with Profiles
14.11. Device Aliases
14.12. Saving and Restoring the Network Configuration

15. Controlling Access to Services

15.1. Runlevels

15.2. TCP Wrappers

15.2.1. xinetd

15.3. Services Configuration Tool

15.4. ntsysv

15.5. chkconfig

15.6. Additional Resources

15.6.1. Installed Documentation
15.6.2. Useful Websites

16. Berkeley Internet Name Domain (BIND)

16.1. Introduction to DNS

16.1.1. Nameserver Zones
16.1.2. Nameserver Types
16.1.3. BIND as a Nameserver

16.2. /etc/named.conf

16.2.1. Common Statement Types
16.2.2. Other Statement Types
16.2.3. Comment Tags

16.3. Zone Files

16.3.1. Zone File Directives
16.3.2. Zone File Resource Records
16.3.3. Example Zone File
16.3.4. Reverse Name Resolution Zone Files

16.4. Using rndc

16.4.1. Configuring /etc/named.conf
16.4.2. Configuring /etc/rndc.conf
16.4.3. Command Line Options

16.5. Advanced Features of BIND

16.5.1. DNS Protocol Enhancements
16.5.2. Multiple Views
16.5.3. Security
16.5.4. IP version 6

16.6. Common Mistakes to Avoid

16.7. Additional Resources

16.7.1. Installed Documentation
16.7.2. Useful Websites
16.7.3. Related Books

17. OpenSSH

17.1. Features of SSH

17.1.1. Why Use SSH?

17.2. SSH Protocol Versions

17.3. Event Sequence of an SSH Connection

17.3.1. Transport Layer
17.3.2. Authentication
17.3.3. Channels

17.4. Configuring an OpenSSH Server

17.4.1. Requiring SSH for Remote Connections

17.5. OpenSSH Configuration Files

17.6. Configuring an OpenSSH Client

17.6.1. Using the ssh Command
17.6.2. Using the scp Command
17.6.3. Using the sftp Command

17.7. More Than a Secure Shell

17.7.1. X11 Forwarding
17.7.2. Port Forwarding
17.7.3. Generating Key Pairs

17.8. Additional Resources

17.8.1. Installed Documentation
17.8.2. Useful Websites

18. Network File System (NFS)

18.1. How It Works

18.1.1. Required Services

18.2. NFS Client Configuration

18.2.1. Mounting NFS File Systems using /etc/fstab

18.3. autofs

18.3.1. What's new in autofs version 5?
18.3.2. autofs Configuration
18.3.3. autofs Common Tasks

18.4. Common NFS Mount Options

18.5. Starting and Stopping NFS

18.6. NFS Server Configuration

18.6.1. Exporting or Sharing NFS File Systems
18.6.2. Command Line Configuration
18.6.3. Hostname Formats

18.7. The /etc/exports Configuration File

18.7.1. The exportfs Command

18.8. Securing NFS

18.8.1. Host Access
18.8.2. File Permissions

18.9. NFS and portmap

18.9.1. Troubleshooting NFS and portmap

18.10. Using NFS over TCP

18.11. Additional Resources

18.11.1. Installed Documentation
18.11.2. Useful Websites
18.11.3. Related Books

19. Samba

19.1. Introduction to Samba

19.1.1. Samba Features

19.2. Samba Daemons and Related Services

19.2.1. Samba Daemons

19.3. Connecting to a Samba Share

19.3.1. Command Line
19.3.2. Mounting the Share

19.4. Configuring a Samba Server

19.4.1. Graphical Configuration
19.4.2. Command Line Configuration
19.4.3. Encrypted Passwords

19.5. Starting and Stopping Samba

19.6. Samba Server Types and the smb.conf File

19.6.1. Stand-alone Server
19.6.2. Domain Member Server
19.6.3. Domain Controller

19.7. Samba Security Modes

19.7.1. User-Level Security
19.7.2. Share-Level Security

19.8. Samba Account Information Databases

19.9. Samba Network Browsing

19.9.1. Domain Browsing
19.9.2. WINS (Windows Internetworking Name Server)

19.10. Samba with CUPS Printing Support

19.10.1. Simple smb.conf Settings

19.11. Samba Distribution Programs

19.12. Additional Resources

19.12.1. Installed Documentation
19.12.2. Related Books
19.12.3. Useful Websites

20. Dynamic Host Configuration Protocol (DHCP)

20.1. Why Use DHCP?

20.2. Configuring a DHCP Server

20.2.1. Configuration File
20.2.2. Lease Database
20.2.3. Starting and Stopping the Server
20.2.4. DHCP Relay Agent

20.3. Configuring a DHCP Client

20.4. Additional Resources

20.4.1. Installed Documentation

21. Apache HTTP Server

21.1. Apache HTTP Server 2.2

21.1.1. Features of Apache HTTP Server 2.2

21.2. Migrating Apache HTTP Server Configuration Files

21.2.1. Migrating Apache HTTP Server 2.0 Configuration Files
21.2.2. Migrating Apache HTTP Server 1.3 Configuration Files to 2.0

21.3. Starting and Stopping httpd

21.4. Apache HTTP Server Configuration

21.4.1. Basic Settings
21.4.2. Default Settings

21.5. Configuration Directives in httpd.conf

21.5.1. General Configuration Tips
21.5.2. Configuration Directives for SSL
21.5.3. MPM Specific Server-Pool Directives

21.6. Adding Modules

21.7. Virtual Hosts

21.7.1. Setting Up Virtual Hosts

21.8. Apache HTTP Secure Server Configuration

21.8.1. An Overview of Security-Related Packages
21.8.2. An Overview of Certificates and Security
21.8.3. Using Pre-Existing Keys and Certificates
21.8.4. Types of Certificates
21.8.5. Generating a Key
21.8.6. How to configure the server to use the new key

21.9. Additional Resources

21.9.1. Useful Websites

22. FTP

22.1. The File Transport Protocol

22.1.1. Multiple Ports, Multiple Modes

22.2. FTP Servers

22.2.1. vsftpd

22.3. Files Installed with vsftpd

22.4. Starting and Stopping vsftpd

22.4.1. Starting Multiple Copies of vsftpd

22.5. vsftpd Configuration Options

22.5.1. Daemon Options
22.5.2. Log In Options and Access Controls
22.5.3. Anonymous User Options
22.5.4. Local User Options
22.5.5. Directory Options
22.5.6. File Transfer Options
22.5.7. Logging Options
22.5.8. Network Options

22.6. Additional Resources

22.6.1. Installed Documentation
22.6.2. Useful Websites

23. Email

23.1. Email Protocols

23.1.1. Mail Transport Protocols
23.1.2. Mail Access Protocols

23.2. Email Program Classifications

23.2.1. Mail Transport Agent
23.2.2. Mail Delivery Agent
23.2.3. Mail User Agent

23.3. Mail Transport Agents

23.3.1. Sendmail
23.3.2. Postfix
23.3.3. Fetchmail

23.4. Mail Transport Agent (MTA) Configuration

23.5. Mail Delivery Agents

23.5.1. Procmail Configuration
23.5.2. Procmail Recipes

23.6. Mail User Agents

23.6.1. Securing Communication

23.7. Additional Resources

23.7.1. Installed Documentation
23.7.2. Useful Websites
23.7.3. Related Books

24. Lightweight Directory Access Protocol (LDAP)

24.1. Why Use LDAP?

24.1.1. OpenLDAP Features

24.2. LDAP Terminology

24.3. OpenLDAP Daemons and Utilities

24.3.1. NSS, PAM, and LDAP
24.3.2. PHP4, LDAP, and the Apache HTTP Server
24.3.3. LDAP Client Applications

24.4. OpenLDAP Configuration Files

24.5. The /etc/openldap/schema/ Directory

24.6. OpenLDAP Setup Overview

24.6.1. Editing /etc/openldap/slapd.conf

24.7. Configuring a System to Authenticate Using OpenLDAP

24.7.1. PAM and LDAP
24.7.2. Migrating Old Authentication Information to LDAP Format

24.8. Migrating Directories from Earlier Releases

24.9. Additional Resources

24.9.1. Installed Documentation
24.9.2. Useful Websites
24.9.3. Related Books

25. Authentication Configuration

25.1. User Information
25.2. Authentication
25.3. Options
25.4. Command Line Version

IV. System Configuration

26. Console Access

26.1. Disabling Shutdown Via CtrlAltDel
26.2. Disabling Console Program Access
26.3. Defining the Console
26.4. Making Files Accessible From the Console
26.5. Enabling Console Access for Other Applications
26.6. The floppy Group

27. The sysconfig Directory

27.1. Files in the /etc/sysconfig/ Directory

27.1.1. /etc/sysconfig/amd
27.1.2. /etc/sysconfig/apmd
27.1.3. /etc/sysconfig/arpwatch
27.1.4. /etc/sysconfig/authconfig
27.1.5. /etc/sysconfig/autofs
27.1.6. /etc/sysconfig/clock
27.1.7. /etc/sysconfig/desktop
27.1.8. /etc/sysconfig/dhcpd
27.1.9. /etc/sysconfig/exim
27.1.10. /etc/sysconfig/firstboot
27.1.11. /etc/sysconfig/gpm
27.1.12. /etc/sysconfig/hwconf
27.1.13. /etc/sysconfig/i18n
27.1.14. /etc/sysconfig/init
27.1.15. /etc/sysconfig/ip6tables-config
27.1.16. /etc/sysconfig/iptables-config
27.1.17. /etc/sysconfig/irda
27.1.18. /etc/sysconfig/keyboard
27.1.19. /etc/sysconfig/kudzu
27.1.20. /etc/sysconfig/named
27.1.21. /etc/sysconfig/netdump
27.1.22. /etc/sysconfig/network
27.1.23. /etc/sysconfig/ntpd
27.1.24. /etc/sysconfig/radvd
27.1.25. /etc/sysconfig/samba
27.1.26. /etc/sysconfig/selinux
27.1.27. /etc/sysconfig/sendmail
27.1.28. /etc/sysconfig/spamassassin
27.1.29. /etc/sysconfig/squid
27.1.30. /etc/sysconfig/system-config-selinux
27.1.31. /etc/sysconfig/system-config-users
27.1.32. /etc/sysconfig/system-logviewer
27.1.33. /etc/sysconfig/tux
27.1.34. /etc/sysconfig/vncservers
27.1.35. /etc/sysconfig/xinetd

27.2. Directories in the /etc/sysconfig/ Directory

27.3. Additional Resources

27.3.1. Installed Documentation

28. Date and Time Configuration

28.1. Time and Date Properties
28.2. Network Time Protocol (NTP) Properties
28.3. Time Zone Configuration

29. Keyboard Configuration

30. The X Window System

30.1. The X11R7.1 Release

30.2. Desktop Environments and Window Managers

30.2.1. Desktop Environments
30.2.2. Window Managers

30.3. X Server Configuration Files

30.3.1. xorg.conf

30.4. Fonts

30.4.1. Fontconfig
30.4.2. Core X Font System

30.5. Runlevels and X

30.5.1. Runlevel 3
30.5.2. Runlevel 5

30.6. Additional Resources

30.6.1. Installed Documentation
30.6.2. Useful Websites

31. X Window System Configuration

31.1. Display Settings
31.2. Display Hardware Settings
31.3. Dual Head Display Settings

32. Users and Groups

32.1. User and Group Configuration

32.1.1. Adding a New User
32.1.2. Modifying User Properties
32.1.3. Adding a New Group
32.1.4. Modifying Group Properties

32.2. User and Group Management Tools

32.2.1. Command Line Configuration
32.2.2. Adding a User
32.2.3. Adding a Group
32.2.4. Password Aging
32.2.5. Explaining the Process

32.3. Standard Users

32.4. Standard Groups

32.5. User Private Groups

32.5.1. Group Directories

32.6. Shadow Passwords

32.7. Additional Resources

32.7.1. Installed Documentation

33. Printer Configuration

33.1. Adding a Local Printer

33.2. Adding an IPP Printer

33.3. Adding a Samba (SMB) Printer

33.4. Adding a JetDirect Printer

33.5. Selecting the Printer Model and Finishing

33.5.1. Confirming Printer Configuration

33.6. Printing a Test Page

33.7. Modifying Existing Printers

33.7.1. The Settings Tab
33.7.2. The Policies Tab
33.7.3. The Access Control Tab
33.7.4. The Printer and Job OptionsTab

33.8. Managing Print Jobs

33.9. Additional Resources

33.9.1. Installed Documentation
33.9.2. Useful Websites

34. Automated Tasks

34.1. Cron

34.1.1. Configuring Cron Tasks
34.1.2. Controlling Access to Cron
34.1.3. Starting and Stopping the Service

34.2. At and Batch

34.2.1. Configuring At Jobs
34.2.2. Configuring Batch Jobs
34.2.3. Viewing Pending Jobs
34.2.4. Additional Command Line Options
34.2.5. Controlling Access to At and Batch
34.2.6. Starting and Stopping the Service

34.3. Additional Resources

34.3.1. Installed Documentation

35. Log Files

35.1. Locating Log Files
35.2. Viewing Log Files
35.3. Adding a Log File
35.4. Monitoring Log Files

V. System Monitoring

36. SystemTap

36.1. Introduction

36.2. Implementation

36.3. Using SystemTap

36.3.1. Tracing

37. Gathering System Information

37.1. System Processes

37.2. Memory Usage

37.3. File Systems

37.4. Hardware

37.5. Additional Resources

37.5.1. Installed Documentation

38. OProfile

38.1. Overview of Tools

38.2. Configuring OProfile

38.2.1. Specifying the Kernel
38.2.2. Setting Events to Monitor
38.2.3. Separating Kernel and User-space Profiles

38.3. Starting and Stopping OProfile

38.4. Saving Data

38.5. Analyzing the Data

38.5.1. Using opreport
38.5.2. Using opreport on a Single Executable
38.5.3. Getting more detailed output on the modules
38.5.4. Using opannotate

38.6. Understanding /dev/oprofile/

38.7. Example Usage

38.8. Graphical Interface

38.9. Additional Resources

38.9.1. Installed Docs
38.9.2. Useful Websites

VI. Kernel and Driver Configuration

39. Manually Upgrading the Kernel

39.1. Overview of Kernel Packages

39.2. Preparing to Upgrade

39.3. Downloading the Upgraded Kernel

39.4. Performing the Upgrade

39.5. Verifying the Initial RAM Disk Image

39.6. Verifying the Boot Loader

39.6.1. x86 Systems
39.6.2. Itanium Systems
39.6.3. IBM S/390 and IBM System z Systems
39.6.4. IBM eServer iSeries Systems
39.6.5. IBM eServer pSeries Systems

40. General Parameters and Modules

40.1. Kernel Module Utilities

40.2. Persistent Module Loading

40.3. Specifying Module Parameters

40.4. Storage parameters

40.5. Ethernet Parameters

40.5.1. Using Multiple Ethernet Cards
40.5.2. The Channel Bonding Module

40.6. Additional Resources

40.6.1. Installed Documentation
40.6.2. Useful Websites

VII. Security And Authentication

41. Security Overview

41.1. Introduction to Security

41.1.1. What is Computer Security?
41.1.2. Security Controls
41.1.3. Conclusion

41.2. Vulnerability Assessment

41.2.1. Thinking Like the Enemy
41.2.2. Defining Assessment and Testing
41.2.3. Evaluating the Tools

41.3. Attackers and Vulnerabilities

41.3.1. A Quick History of Hackers
41.3.2. Threats to Network Security
41.3.3. Threats to Server Security
41.3.4. Threats to Workstation and Home PC Security

41.4. Common Exploits and Attacks

41.5. Security Updates

41.5.1. Updating Packages

42. Securing Your Network

42.1. Workstation Security

42.1.1. Evaluating Workstation Security
42.1.2. BIOS and Boot Loader Security
42.1.3. Password Security
42.1.4. Administrative Controls
42.1.5. Available Network Services
42.1.6. Personal Firewalls
42.1.7. Security Enhanced Communication Tools

42.2. Server Security

42.2.1. Securing Services With TCP Wrappers and xinetd
42.2.2. Securing Portmap
42.2.3. Securing NIS
42.2.4. Securing NFS
42.2.5. Securing the Apache HTTP Server
42.2.6. Securing FTP
42.2.7. Securing Sendmail
42.2.8. Verifying Which Ports Are Listening

42.3. Single Sign-on (SSO)

42.3.1. Introduction
42.3.2. Getting Started with your new Smart Card
42.3.3. How Smart Card Enrollment Works
42.3.4. How Smart Card Login Works
42.3.5. Configuring Firefox to use Kerberos for SSO

42.4. Pluggable Authentication Modules (PAM)

42.4.1. Advantages of PAM
42.4.2. PAM Configuration Files
42.4.3. PAM Configuration File Format
42.4.4. Sample PAM Configuration Files
42.4.5. Creating PAM Modules
42.4.6. PAM and Administrative Credential Caching
42.4.7. PAM and Device Ownership
42.4.8. Additional Resources

42.5. TCP Wrappers and xinetd

42.5.1. TCP Wrappers
42.5.2. TCP Wrappers Configuration Files
42.5.3. xinetd
42.5.4. xinetd Configuration Files
42.5.5. Additional Resources

42.6. Kerberos

42.6.1. What is Kerberos?
42.6.2. Kerberos Terminology
42.6.3. How Kerberos Works
42.6.4. Kerberos and PAM
42.6.5. Configuring a Kerberos 5 Server
42.6.6. Configuring a Kerberos 5 Client
42.6.7. Domain-to-Realm Mapping
42.6.8. Setting Up Secondary KDCs
42.6.9. Setting Up Cross Realm Authentication
42.6.10. Additional Resources

42.7. Virtual Private Networks (VPNs)

42.7.1. How Does a VPN Work?
42.7.2. VPNs and Red Hat Enterprise Linux
42.7.3. IPsec
42.7.4. Creating an IPsec Connection
42.7.5. IPsec Installation
42.7.6. IPsec Host-to-Host Configuration
42.7.7. IPsec Network-to-Network Configuration
42.7.8. Starting and Stopping an IPsec Connection

42.8. Firewalls

42.8.1. Netfilter and IPTables
42.8.2. Basic Firewall Configuration
42.8.3. Using IPTables
42.8.4. Common IPTables Filtering
42.8.5. FORWARD and NAT Rules
42.8.6. Malicious Software and Spoofed IP Addresses
42.8.7. IPTables and Connection Tracking
42.8.8. IPv6
42.8.9. Additional Resources

42.9. IPTables

42.9.1. Packet Filtering
42.9.2. Differences Between IPTables and IPChains
42.9.3. Command Options for IPTables
42.9.4. Saving IPTables Rules
42.9.5. IPTables Control Scripts
42.9.6. IPTables and IPv6
42.9.7. Additional Resources

43. Security and SELinux

43.1. Access Control Mechanisms (ACMs)

43.1.1. Discretionary Access Control (DAC)
43.1.2. Access Control Lists (ACLs)
43.1.3. Mandatory Access Control (MAC)
43.1.4. Role-based Access Control (RBAC)
43.1.5. Multi-Level Security (MLS)
43.1.6. Multi-Category Security (MCS)

43.2. Introduction to SELinux

43.2.1. SELinux Overview
43.2.2. Files Related to SELinux
43.2.3. Additional Resources

43.3. Brief Background and History of SELinux

43.4. Multi-Category Security (MCS)

43.4.1. Introduction
43.4.2. Applications for Multi-Category Security
43.4.3. SELinux Security Contexts

43.5. Getting Started with Multi-Category Security (MCS)

43.5.1. Introduction
43.5.2. Comparing SELinux and Standard Linux User Identities
43.5.3. Configuring Categories
43.5.4. Assigning Categories to Users
43.5.5. Assigning Categories to Files

43.6. Multi-Level Security (MLS)

43.6.1. Why Multi-Level?
43.6.2. Security Levels, Objects and Subjects
43.6.3. MLS Policy
43.6.4. LSPP Certification

43.7. SELinux Policy Overview

43.7.1. What is the SELinux Policy?
43.7.2. Where is the Policy?
43.7.3. The Role of Policy in the Boot Process
43.7.4. Object Classes and Permissions

43.8. Targeted Policy Overview

43.8.1. What is the Targeted Policy?
43.8.2. Files and Directories of the Targeted Policy
43.8.3. Understanding the Users and Roles in the Targeted Policy

44. Working With SELinux

44.1. End User Control of SELinux

44.1.1. Moving and Copying Files
44.1.2. Checking the Security Context of a Process, User, or File Object
44.1.3. Relabeling a File or Directory
44.1.4. Creating Archives That Retain Security Contexts

44.2. Administrator Control of SELinux

44.2.1. Viewing the Status of SELinux
44.2.2. Relabeling a File System
44.2.3. Managing NFS Home Directories
44.2.4. Granting Access to a Directory or a Tree
44.2.5. Backing Up and Restoring the System
44.2.6. Enabling or Disabling Enforcement
44.2.7. Enable or Disable SELinux
44.2.8. Changing the Policy
44.2.9. Specifying the Security Context of Entire File Systems
44.2.10. Changing the Security Category of a File or User
44.2.11. Running a Command in a Specific Security Context
44.2.12. Useful Commands for Scripts
44.2.13. Changing to a Different Role
44.2.14. When to Reboot

44.3. Analyst Control of SELinux

44.3.1. Enabling Kernel Auditing
44.3.2. Dumping and Viewing Logs

45. Customizing SELinux Policy

45.1. Introduction

45.1.1. Modular Policy

45.2. Building a Local Policy Module

45.2.1. Using audit2allow to Build a Local Policy Module
45.2.2. Analyzing the Type Enforcement (TE) File
45.2.3. Loading the Policy Package

46. References

VIII. Red Hat Training And Certification

47. Red Hat Training and Certification

47.1. Three Ways to Train
47.2. Microsoft Certified Professional Resource Center

48. Certification Tracks

48.1. Free Pre-assessment tests

49. RH033: Red Hat Linux Essentials

49.1. Course Description

49.1.1. Prerequisites
49.1.2. Goal
49.1.3. Audience
49.1.4. Course Objectives
49.1.5. Follow-on Courses

50. RH035: Red Hat Linux Essentials for Windows Professionals

50.1. Course Description

50.1.1. Prerequisites
50.1.2. Goal
50.1.3. Audience
50.1.4. Course Objectives
50.1.5. Follow-on Courses

51. RH133: Red Hat Linux System Administration and Red Hat Certified Technician (RHCT) Certification

51.1. Course Description

51.1.1. Prerequisites
51.1.2. Goal
51.1.3. Audience
51.1.4. Course Objectives
51.1.5. Follow-on Courses

52. RH202 RHCT EXAM - The fastest growing credential in all of Linux.

52.1. Course Description

52.1.1. Prerequisites

53. RH253 Red Hat Linux Networking and Security Administration

53.1. Course Description

53.1.1. Prerequisites
53.1.2. Goal
53.1.3. Audience
53.1.4. Course Objectives
53.1.5. Follow-on Courses

54. RH300: RHCE Rapid track course (and RHCE exam)

54.1. Course Description

54.1.1. Prerequisites
54.1.2. Goal
54.1.3. Audience
54.1.4. Course Objectives
54.1.5. Follow-on Courses

55. RH302 RHCE EXAM

55.1. Course Description

55.1.1. Prerequisites
55.1.2. Content

56. RHS333: RED HAT enterprise security: network services

56.1. Course Description

56.1.1. Prerequisites
56.1.2. Goal
56.1.3. Audience
56.1.4. Course Objectives
56.1.5. Follow-on Courses

57. RH401: Red Hat Enterprise Deployment and systems management

57.1. Course Description

57.1.1. Prerequisites
57.1.2. Goal
57.1.3. Audience
57.1.4. Course Objectives
57.1.5. Follow-on Courses

58. RH423: Red Hat Enterprise Directory services and authentication

58.1. Course Description

58.1.1. Prerequisites
58.1.2. Goal
58.1.3. Audience
58.1.4. Course Objectives
58.1.5. Follow-on Courses

59. SE Linux Courses

59.1. RHS427: Introduction to SELinux and Red Hat Targeted Policy

59.1.1. Audience
59.1.2. Course Summary

59.2. RHS429: Red Hat Enterprise SE Linux Policy Administration

60. RH436: Red Hat Enterprise storage management

60.1. Course Description

60.1.1. Prerequisites
60.1.2. Goal
60.1.3. Audience
60.1.4. Course Objectives
60.1.5. Follow-on Courses

61. RH442: Red Hat Enterprise system monitoring and performance tuning

61.1. Course Description

61.1.1. Prerequisites
61.1.2. Goal
61.1.3. Audience
61.1.4. Course Objectives
61.1.5. Follow-on Courses

62. Red Hat Enterprise Linux Developer Courses

62.1. RHD143: Red Hat Linux Programming Essentials
62.2. RHD221 Red Hat Linux Device Drivers
62.3. RHD236 Red Hat Linux Kernel Internals
62.4. RHD256 Red Hat Linux Application Development and Porting

63. JBoss Courses

63.1. RHD161 JBoss and EJB3 for Java

63.1.1. Prerequisites

63.2. RHD163 JBoss for Web Developers

63.2.1. Prerequisites

63.3. RHD167: JBOSS - HIBERNATE ESSENTIALS

63.3.1. Prerequisites
63.3.2. Course Summary

63.4. RHD267: JBOSS - ADVANCED HIBERNATE

63.4.1. Prerequisites

63.5. RHD261:JBOSS for advanced J2EE developers

63.5.1. Prerequisites

63.6. RH336: JBOSS for Administrators

63.6.1. Prerequisites
63.6.2. Course Summary

63.7. RHD439: JBoss Clustering

63.7.1. Prerequisites

63.8. RHD449: JBoss jBPM

63.8.1. Description
63.8.2. Prerequisites

63.9. RHD451 JBoss Rules

63.9.1. Prerequisites

NextIntroduction