Linux System Hardening & Security Auditing

Harden production Linux servers, audit critical configurations, and eliminate privilege escalation vectors with a structured, command-line field manual.

Designed for Linux system administrators, DevOps engineers, defensive blue teams, and cybersecurity students, Linux System Hardening & Security Auditing provides 30 modular defensive chapters paired with hands-on server verification worksheets and quick-reference cheat sheets.

Inside this practical reference manual, you will master:

• Boot & Kernel Security: UEFI Secure Boot, GRUB2 PBKDF2 protection, filesystem mount flags (nodev, nosuid, noexec), and production sysctl kernel hardening.
• Identity & Least Privilege: Sudoers auditing, PAM faillock and pwquality policies, SUID/SGID and POSIX capability pruning, and immutable file attributes.
• OpenSSH & Network Defense: Cryptographic key enforcement, cipher/MAC/Kex hardening, Fail2Ban jails, UFW/iptables, and modern nftables packet filtering.
• Logging, FIM & Intrusion Detection: Tamper-resistant auditd rules, systemd-journald persistence, AIDE file integrity monitoring, and rootkit anomaly auditing.
• Sandboxing & Automation: AppArmor/SELinux enforcement, systemd capability bounding, rootless container runtime security, and automated Bash baseline auditing.

Includes companion QR access to downloadable Bash baseline audit scripts plus Quick-Reference Appendices for critical file permissions and live incident triage.