In this post we’ll go over using SELinux to manage the security of a Linux system.

NSA Security-Enhanced Linux or SELinux is a mandatory access control architecture controlled through the /etc/selinux/config file.

Today we’ll look at creating software RAID devices with mdadm. For the example I will use /dev/sdb1 and /dev/sdb2

Today we continue with the IMAP/S of LFCS, by configuring Dovecot.

Dovecot is an open source IMAP / POP3 server written with security in mind. It can be installed on CentOS via the dovecot package.

Today we’ll look at configuring a mail service for LFCS objectives. We’ll use the Postfix implementation that already comes preinstalled on CentOS.

In this post we’ll look at changing kernel parameters both at runtime and at boot. Such changes can be made with the sysctl command or by inputting values in different files inside /proc/sys

In this post we’ll look at NTP configuration by using chrony, which is installed by default on newer RedHat systems.

In this post we’ll see how to configure SGID directories to share files between members of the same group.

Today we’ll go over creating LUKS-encrypted partitions with cryptsetup. LUKS (Linux Unified Key Setup) is a block device encryption format that is the standard on Linux systems. Also, because it stores all the necessary data in the partition header, it’s easy to migrate partitions.

Something that you may come up with in the exam and that I’ve been avoiding is the LDAP topic. In this post we’ll look at server and client configuration for LDAP.

For this scenario, the hostname of my LDAP server is centos.example.com. The domain is example.com and the entry is inside /etc/hosts

I used CertDepot as inspiration..the LDAP syntax and topic really keeps me away from approaching it.

Today we’ll take a look at setting up a caching only DNS server for the LFCS exam objectives.