THM Room: Hardening basics

---

Introduction

What?

Configuring access control

Why?

• Protecting sensitive files and directories by setting proper permissions and ownership, and by using Extended Attributes (xattr).

• Avoiding security related problems with Set User ID (SUID) and Set Group ID (SGID).

How?

• Discretionary access control (DAC)

• Access control lists (ACL) and shared directory management (SDM)

• Mandatory access control (MAC)

---

Mastering Linux Security and Hardening, Donald A. Tevault, Second Edition