Linux security fundamentals in Cybersecurity - Mini Project: Build & Apply

Linux Security Fundamentals

📖 Scenario: You are a system administrator setting up a new Linux server for your company. You want to ensure the server is secure by managing user permissions, setting up a firewall, and configuring basic security settings.

🎯 Goal: Build a simple Linux security checklist by creating a list of security tasks, setting a security level threshold, filtering tasks based on importance, and adding a final security reminder.

📋 What You'll Learn

Create a list of Linux security tasks with exact task names and importance levels

Add a variable to set a minimum importance level threshold

Filter the list to include only tasks meeting or exceeding the threshold

Add a final reminder message about regular security updates

💡 Why This Matters

🌍 Real World

System administrators use similar task lists to prioritize security measures on Linux servers to protect against unauthorized access and vulnerabilities.

💼 Career

Understanding Linux security fundamentals is essential for roles like system administrator, security analyst, and IT support specialist to maintain secure and reliable systems.

1

Create the list of Linux security tasks

Create a list called security_tasks containing these exact dictionaries with keys task and importance: {"task": "Set strong passwords", "importance": 5}, {"task": "Configure firewall", "importance": 4}, {"task": "Disable root login", "importance": 5}, {"task": "Install updates", "importance": 3}, {"task": "Limit user permissions", "importance": 4}

Cybersecurity

# Create the list security_tasks with the specified tasks and importance levels
# Your code here

Hint

Use a list of dictionaries. Each dictionary should have keys task and importance with the exact values given.

2

Set the importance threshold

Create a variable called importance_threshold and set it to the integer 4 to filter important tasks.

Cybersecurity

security_tasks = [
    {"task": "Set strong passwords", "importance": 5},
    {"task": "Configure firewall", "importance": 4},
    {"task": "Disable root login", "importance": 5},
    {"task": "Install updates", "importance": 3},
    {"task": "Limit user permissions", "importance": 4}
]
# Create importance_threshold variable and set it to 4
# Your code here

Hint

Just create a variable named importance_threshold and assign it the value 4.

3

Filter tasks by importance

Create a new list called important_tasks that includes only the tasks from security_tasks where the importance is greater than or equal to importance_threshold.

Cybersecurity

security_tasks = [
    {"task": "Set strong passwords", "importance": 5},
    {"task": "Configure firewall", "importance": 4},
    {"task": "Disable root login", "importance": 5},
    {"task": "Install updates", "importance": 3},
    {"task": "Limit user permissions", "importance": 4}
]
importance_threshold = 4
# Create important_tasks list filtering tasks by importance
# Your code here

Hint

Use a list comprehension to select tasks where importance is at least importance_threshold.

4

Add a final security reminder

Create a string variable called final_reminder with the exact text: "Remember to regularly update your Linux system for security patches."

Cybersecurity

security_tasks = [
    {"task": "Set strong passwords", "importance": 5},
    {"task": "Configure firewall", "importance": 4},
    {"task": "Disable root login", "importance": 5},
    {"task": "Install updates", "importance": 3},
    {"task": "Limit user permissions", "importance": 4}
]
importance_threshold = 4
important_tasks = [task for task in security_tasks if task["importance"] >= importance_threshold]
# Create final_reminder string with the exact message
# Your code here

Hint

Assign the exact reminder text to a variable named final_reminder.

Practice

1. Which of the following best describes the primary purpose of Linux file permissions?

easy

A. To backup files regularly

B. To speed up file access times

C. To control who can read, write, or execute files

D. To encrypt files automatically

Solution

1. Step 1: Understand file permissions in Linux

   Linux file permissions determine which users can read, write, or execute a file or directory.

2. Step 2: Identify the purpose of permissions

   Permissions protect files by controlling access, not by speeding access, encrypting, or backing up.

3. Final Answer:

   To control who can read, write, or execute files -> Option C

4. Quick Check:

   File permissions = control access [OK]

Hint: Permissions control access rights to files and folders [OK]

Common Mistakes:

• Confusing permissions with encryption
• Thinking permissions speed up file access
• Assuming permissions handle backups

2. Which command correctly changes the owner of a file named report.txt to user alice?

easy

A. chmod alice report.txt

B. chown alice report.txt

C. chgrp alice report.txt

D. owner alice report.txt

Solution

1. Step 1: Identify the command to change file owner

   The chown command changes the owner of a file in Linux.

2. Step 2: Match the command syntax

   The correct syntax is chown username filename, so chown alice report.txt is correct.

3. Final Answer:

   chown alice report.txt -> Option B

4. Quick Check:

   Change owner = chown [OK]

Hint: Use chown to change file ownership [OK]

Common Mistakes:

• Using chmod instead of chown
• Confusing chgrp (changes group) with chown
• Typing invalid commands like owner

3. What will be the output of the command ls -l /etc/passwd in a typical Linux system?

medium

A. Deletes the passwd file

B. Displays the contents of the passwd file

C. Changes the permissions of the passwd file

D. Shows detailed information including permissions, owner, and size of the passwd file

Solution

1. Step 1: Understand the ls -l command

   The ls -l command lists files with detailed info like permissions, owner, size, and modification date.

2. Step 2: Apply to /etc/passwd

   Running ls -l /etc/passwd shows detailed info about the passwd file, not its contents or changes.

3. Final Answer:

   Shows detailed information including permissions, owner, and size of the passwd file -> Option D

4. Quick Check:

   ls -l = detailed file info [OK]

Hint: ls -l lists file details, not contents [OK]

Common Mistakes:

• Confusing ls -l with cat command
• Thinking ls -l changes file permissions
• Assuming ls -l deletes files

4. You try to change a file's permissions using chmod 777 file.txt but get a 'Permission denied' error. What is the most likely cause?

medium

A. You are not the file owner or lack sudo privileges

B. The file does not exist

C. chmod command is misspelled

D. The file is already set to 777

Solution

1. Step 1: Understand permission requirements for chmod

   Only the file owner or a user with sudo rights can change file permissions.

2. Step 2: Analyze the error cause

   A 'Permission denied' error means you lack rights to modify the file, not that the file is missing or command is wrong.

3. Final Answer:

   You are not the file owner or lack sudo privileges -> Option A

4. Quick Check:

   Permission denied = insufficient rights [OK]

Hint: Permission denied means you lack rights or sudo [OK]

Common Mistakes:

• Assuming file doesn't exist
• Thinking chmod command is incorrect
• Believing file is already set to 777

5. A system administrator wants to restrict SSH access to only users in the group sshusers. Which configuration change in /etc/ssh/sshd_config achieves this?

hard

A. Add the line: AllowGroups sshusers and restart SSH service

B. Add the line: DenyUsers sshusers and restart SSH service

C. Change file permissions of /etc/ssh/sshd_config to 777

D. Disable SSH service completely

Solution

1. Step 1: Identify SSH access control options

   The AllowGroups directive in sshd_config limits SSH login to specified groups.

2. Step 2: Apply the correct configuration and restart SSH

   Adding AllowGroups sshusers and restarting SSH restricts access to that group only.

3. Final Answer:

   Add the line: AllowGroups sshusers and restart SSH service -> Option A

4. Quick Check:

   AllowGroups limits SSH access by group [OK]

Hint: Use AllowGroups in sshd_config to restrict SSH access [OK]

Common Mistakes:

• Using DenyUsers instead of AllowGroups
• Changing permissions to 777 (unsafe)
• Disabling SSH instead of restricting access