Improving System Security

Abstract

Early in this book, we established that managing the contents and permission of files is the core of UNIX/Linux system administration. UNIX/Linux security is also almost entirely concerned with file contents and permissions. Even when configuring network settings for security reasons, we’re usually configuring file contents. This means that, in general, we’ll be performing very familiar operations when using cfengine to increase the security of our UNIX and Linux hosts.