Introduction
Welcome to the Security Guide!
The Security Guide is designed to assist users of Red Hat Enterprise Linux in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. The Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Red Hat Enterprise Linux can be both fully functional and secured from most common intrusion and exploit methods.
This guide discusses several security-related topics in great detail, including:
- Firewalls
- Encryption
- Securing Critical Services
- Virtual Private Networks
- Intrusion Detection
The manual is divided into the following parts:
- General Introduction to Security
- Configuring Red Hat Enterprise Linux for Security
- Assessing Your Security
- Intrusions and Incident Response
- Appendix
We would like to thank Thomas Rude for his generous contributions to this manual. He wrote the Vulnerability Assessments and Incident Response chapters. Thanks, Thomas!
This manual assumes that you have an advanced knowledge of Red Hat Enterprise Linux. If you are a new user or only have basic to intermediate knowledge of Red Hat Enterprise Linux and need more information on using the system, refer to the following guides which discuss the fundamental aspects of Red Hat Enterprise Linux in greater detail than the Security Guide:
- The Installation Guide provides information regarding installation.
- The Red Hat Enterprise Linux Introduction to System Adminitration contains introductory information for new Red Hat Enterprise Linux system administrators.
- The System Administrators Guide offers detailed information about configuring Red Hat Enterprise Linux to suit your particular needs as a user. This guide includes some services that are discussed (from a security standpoint) in the Security Guide.
- Reference Guide provides detailed information suited for more experienced users to refer to when needed, as opposed to step-by-step instructions.
1. More to Come
The Security Guide is part of Red Hat's growing commitment to provide useful and timely support and information to Red Hat Enterprise Linux users. As new tools and security methodologies are released, this guide will be expanded to include them.
1.1. Send in Your Feedback
If you spot a typo in the Security Guide, or if you have thought of a way to make this manual better, we would love to hear from you! Submit a report in Bugzilla (
http://bugzilla.redhat.com/bugzilla/) against the component rhel-sg.
Be sure to mention the manual's identifier:
rhel-sg
By mentioning the identifier, we know exactly which version of the guide you have.
If you have a suggestion for improving the documentation, try to be as specific as possible. If you have found an error, include the section number and some of the surrounding text so we can find it easily.
