Linux security fundamentals in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the primary purpose of the Linux file permissions system?

The Linux file permissions system controls who can read, write, or execute files and directories, helping to protect data from unauthorized access.

beginner

What does the 'root' user represent in Linux?

The 'root' user is the superuser in Linux with full control over the system, able to perform any action without restrictions.

beginner

Why is it important to keep Linux software updated?

Updating Linux software fixes security vulnerabilities and bugs, reducing the risk of attacks and keeping the system safe.

beginner

What is the role of a firewall in Linux security?

A firewall controls incoming and outgoing network traffic based on security rules, helping to block unauthorized access to the Linux system.

intermediate

What is SELinux and why is it used?

SELinux (Security-Enhanced Linux) adds an extra layer of security by enforcing strict access controls on processes and files beyond standard permissions.

Which Linux user has unrestricted access to all commands and files?

A root

B guest

C admin

D user

The root user is the superuser with full system access.

What does the 'chmod' command do in Linux?

A Changes file ownership

B Changes file name

C Changes file permissions

D Changes file location

chmod modifies the read, write, and execute permissions of files or directories.

Why should you avoid running everyday tasks as the root user?

A It can accidentally cause system damage

B It slows down the system

C It uses more memory

D It disables security updates

Using root for daily tasks risks accidental changes that can harm the system.

Which tool is commonly used to manage firewall rules on Linux?

A grep

B cron

C ssh

D iptables

iptables is a standard tool to configure Linux firewall rules.

What is the main benefit of using SELinux?

A Improves system speed

B Provides enhanced access control

C Simplifies user management

D Automatically updates software

SELinux enforces strict access controls beyond normal permissions.

Explain how Linux file permissions help secure a system.

Think about who can do what with files and folders.

Describe the role of the root user and why it should be used carefully.

Consider why having all power can be dangerous.

Practice

1. Which of the following best describes the primary purpose of Linux file permissions?

easy

A. To backup files regularly

B. To speed up file access times

C. To control who can read, write, or execute files

D. To encrypt files automatically

Solution

1. Step 1: Understand file permissions in Linux

   Linux file permissions determine which users can read, write, or execute a file or directory.

2. Step 2: Identify the purpose of permissions

   Permissions protect files by controlling access, not by speeding access, encrypting, or backing up.

3. Final Answer:

   To control who can read, write, or execute files -> Option C

4. Quick Check:

   File permissions = control access [OK]

Hint: Permissions control access rights to files and folders [OK]

Common Mistakes:

• Confusing permissions with encryption
• Thinking permissions speed up file access
• Assuming permissions handle backups

2. Which command correctly changes the owner of a file named report.txt to user alice?

easy

A. chmod alice report.txt

B. chown alice report.txt

C. chgrp alice report.txt

D. owner alice report.txt

Solution

1. Step 1: Identify the command to change file owner

   The chown command changes the owner of a file in Linux.

2. Step 2: Match the command syntax

   The correct syntax is chown username filename, so chown alice report.txt is correct.

3. Final Answer:

   chown alice report.txt -> Option B

4. Quick Check:

   Change owner = chown [OK]

Hint: Use chown to change file ownership [OK]

Common Mistakes:

• Using chmod instead of chown
• Confusing chgrp (changes group) with chown
• Typing invalid commands like owner

3. What will be the output of the command ls -l /etc/passwd in a typical Linux system?

medium

A. Deletes the passwd file

B. Displays the contents of the passwd file

C. Changes the permissions of the passwd file

D. Shows detailed information including permissions, owner, and size of the passwd file

Solution

1. Step 1: Understand the ls -l command

   The ls -l command lists files with detailed info like permissions, owner, size, and modification date.

2. Step 2: Apply to /etc/passwd

   Running ls -l /etc/passwd shows detailed info about the passwd file, not its contents or changes.

3. Final Answer:

   Shows detailed information including permissions, owner, and size of the passwd file -> Option D

4. Quick Check:

   ls -l = detailed file info [OK]

Hint: ls -l lists file details, not contents [OK]

Common Mistakes:

• Confusing ls -l with cat command
• Thinking ls -l changes file permissions
• Assuming ls -l deletes files

4. You try to change a file's permissions using chmod 777 file.txt but get a 'Permission denied' error. What is the most likely cause?

medium

A. You are not the file owner or lack sudo privileges

B. The file does not exist

C. chmod command is misspelled

D. The file is already set to 777

Solution

1. Step 1: Understand permission requirements for chmod

   Only the file owner or a user with sudo rights can change file permissions.

2. Step 2: Analyze the error cause

   A 'Permission denied' error means you lack rights to modify the file, not that the file is missing or command is wrong.

3. Final Answer:

   You are not the file owner or lack sudo privileges -> Option A

4. Quick Check:

   Permission denied = insufficient rights [OK]

Hint: Permission denied means you lack rights or sudo [OK]

Common Mistakes:

• Assuming file doesn't exist
• Thinking chmod command is incorrect
• Believing file is already set to 777

5. A system administrator wants to restrict SSH access to only users in the group sshusers. Which configuration change in /etc/ssh/sshd_config achieves this?

hard

A. Add the line: AllowGroups sshusers and restart SSH service

B. Add the line: DenyUsers sshusers and restart SSH service

C. Change file permissions of /etc/ssh/sshd_config to 777

D. Disable SSH service completely

Solution

1. Step 1: Identify SSH access control options

   The AllowGroups directive in sshd_config limits SSH login to specified groups.

2. Step 2: Apply the correct configuration and restart SSH

   Adding AllowGroups sshusers and restarting SSH restricts access to that group only.

3. Final Answer:

   Add the line: AllowGroups sshusers and restart SSH service -> Option A

4. Quick Check:

   AllowGroups limits SSH access by group [OK]

Hint: Use AllowGroups in sshd_config to restrict SSH access [OK]

Common Mistakes:

• Using DenyUsers instead of AllowGroups
• Changing permissions to 777 (unsafe)
• Disabling SSH instead of restricting access