Linux Boot Camp. Our Lady of the Lake University Computer Information Systems & Security Department Kevin Barton Artair Burnett

Transcription

1 Linux Boot Camp Our Lady of the Lake University Computer Information Systems & Security Department Kevin Barton Artair Burnett

2 Schedule for the Week Schedule for the Week Mon Welcome from Enrollment Management Introduction to VMWare Player Introduction to Linux Live USB Introduction to Linux Command Line Lunch Familiarization with Fedora Core 12 Securing FC12 - User Accounts - File Management - Personal File Sharing - Services - File Permissions Tue Securing Ubuntu - Finding your way around the OS - User Accounts - Root Log In - Services & Ports - Updates Lunch Port and Network Scanning - Installing Nessus - Configuring Nessus Server - Launching Nessus Client - Performing Scan - Reviewing Scan

3 Schedule for the Week Wed Workstation Configurations - User Accounts - Services - Ports - File Sharing Server Configurations - User Accounts - Services - Ports - File Sharing Troubleshooting - Problems with Scoring Engine Lunch Hardening Fedora Core 12 (Instructor Guided) Thu Hardening Fedora Core 12 (Student Hands-On) Hardening Ubuntu (Student Hands-On) Fri Competition

4 General Hardening Process Access Control File Shares Ports & Services Anti-Virus Protection* Operating System Updates Monitoring & Auditing Backups Securing Applications

5 Ubuntu Navigation Hardening Category Tasks System/Preference/Personal File Sharing File Shares Share Files over the Network - Deselect Share public files on network Share Files over Bluetooth - Deselect Share public files over Bluetooth Receive Files over Bluetooth - Deselect Receive files in Downloads folder over Bluetooth

6 Ubuntu Navigation Hardening Category Tasks Applications/Accessories/Terminal Ports & Services Verify status of Uncomplicated Firewall (ufw). Ufw is standard with Ubuntu versions 8.04 and later. - Verify with sudo ufw status - Start with sudo ufw enable - Turn logging on with sudo ufw logging on Applications/Accessories/Terminal Ports & Services Or, load the GUI ufw (gufw) - Navigate to system > administration > Synaptic Packet Manager >> Ubuntu Software >> Edit, Software Sources - Select all options except source code - Save and Reload - On the terminal enter sudo apt-get install gufw - Navigate System > Administration > Firewall Configuration

7 Ubuntu Navigation Hardening Category Tasks System/Administration/Firewall Configuration Ports & Services - Select Unlock - Select Add - Configure any other desired firewall settings - Confirm firewall settings with command sudo ufw status - Should show all firewall rules configured with gufw - Gufw instructions

8 Ubuntu Navigation Hardening Category Tasks System/Administration/Update Manager Operating System Updates Download and Install Update Use CLI if having problems installing updates from GUI - CLI with sudo apt-get update, followed by sudo apt-get upgrade System/Administration/Services Auditing & Monitoring Enable and start auditd - auditd runs by default, but verify it is running (enabled & started) - Verify by CLI with /sbin/service auditd status

9 Vulnerability Scanning Tools Available in Linux Nessus Installing & Configuring Nessus Launching Nessus Client Performing Scan Reviewing Scan

10 Vulnerability Scanning Available Tools Ubuntu has built in scanner NMAP included in most Linux distributions netcat in Linux distributions Nessus

11 NMAP Scan for open ports Included in most Linux distributions To scan local host, nmap v localhost Results show open and closed ports Returns results quickly without high resource demands

12 netcat Included in Linux distributions To scan localhost, command nc z localhost specifies range of ports. Ports outside that range may be open, but not shown Returns results quickly without high resource demands, but can miss ports outside of the specified range

13 Nessus A robust vulnerability scanner than does more than just identify open ports Nessus will identify vulnerabilities other than just open ports & services Scans are slower and more resource intensive Security tools such as firewalls, IDS, and antivirus do not like Nessus Requires expertise to install and operate

14 Nessus Installation and Configuration Download Nessus Install the Nessus server Nessus is a client/server scanning tool The client is launched from a web browser Register Nessus server Start Nessus server Create a user

15 Launch Nessus Client Open a browser Enter Login with the username & password created on the Nessus server

16 Scanning with Nessus Click the Scans tab Click the Add button Enter a name for the scan, select Run Now or Template from the Type dropdown menu Select a scan policy Default policies are available, or create your own policies Enter an IP address or range to scan Save and Launch the scan

17 Scanning with Nessus Results are shown under the Reports button Vulnerabilities are shown based on severity Drill down in the vulnerabilities to identify those that need corrected Not all vulnerabilities can or should be corrected