Linux, Module 14

Sets an AppArmor profile to complain mode.

Disables an AppArmor profile.

Sets an AppArmor profile to enforce mode.

Used to view the status of AppArmor and AppArmor profiles.

Lists processes that are not controlled by AppArmor.

A Linux kernel module and related software packages that prevent malicious software from accessing system resources.

A text file within the /etc/ apparmor.d directory that lists application-specific restrictions.

Displays and modifies the MAC address cache on a system.

Displays the description and purpose of SELinux log entries.

A process that automatically sends application crash data to an online bug reporting service.

A measure of normal system activity.

A type of authentication that uses physical human attributes, such as fingerprints, to validate a user’s identity.

Displays and modifies Ethernet bridge configuration within the Linux kernel.

An attack in which a network service is altered in memory.

The process by which peripheral components perform tasks normally executed by the CPU.

The components of a firewall that specify the general type of network traffic to which rules apply.

Used to change the type classification within SELinux labels on system files and directories.

A system used to catalog security vulnerabilities.

A system used to catalog security vulnerabilities.

Used to configure and manage LUKS.

Displays hardware device information detected by the system BIOS.

System information that is stored in a file or log book for future reference.

Used to view and modify user lockout settings.

The connections that a program makes to files on a filesystem.

A graphical firewall configuration utility used on Fedora systems.

A daemon that can be used to simplify the configuration of netfilter firewall rules via network zones.

Used to view and configure firewalld zones, services, and rules.

Used to display memory and swap statistics.

Used to view whether SELinux is using enforcing or permissive mode.

Used to display SELinux settings within an SELinux policy.

An open source asymmetric encryption technology that can be used to encrypt and digitally sign files and email.

A daemon that can be used to store the private key passphrase used by GPG.

Used to configure and manage GPG.

Displays the bandwidth sent from the local computer to other hosts.

Sends input/output requests to a block storage device and measures the speed at which they occur.

Displays input and output statistics for block storage devices on the system.

Displays the processes on a Linux system that have the highest number of associated input/output requests to block storage devices.

A list of hosts and networks that can be used within a firewall rule.

Used to measure the bandwidth between two computers.

Used to configure IP sets.

Used to configure IPv4 rules for a netfilter firewall.

Used to configure IPv6 rules for a netfilter firewall.

The process by which failing hardware components send large amounts of information to the CPU.

Used to authenticate to a Kerberos authentication service.

Used to view Kerberos authentication information.

An identifier that SELinux places on a file, directory, or process.

An industry-standard protocol used to access directory service databases across a network.

A technology that encrypts the contents of a Linux filesystem.

A message that is displayed to users after logging into a system.

A condition whereby a process continually uses more and more memory within a system, until there is no more memory available.

same as checksum

The process by which system areas are observed for problems or irregularities.

Displays CPU statistics on a Linux system.

An optional SELinux policy scheme that prevents processes from accessing other processes that have similar attributes.

The process whereby multiple separate mechanisms are used to validate a user’s identity.

An optional SELinux policy scheme that uses custom attributes.

The Linux kernel component that provides firewall and NAT capability on modern Linux systems.

A condition where replies to network requests are slow or intermittent.

A component of firewalld that defines the level of trust for network connections.

Used to scan ports on network computers.

A password that is used to validate a user’s identity once only.

Used to view and modify user lockout settings.

Displays CPU statistics for each PID on a Linux system.

A component that provides authentication-related functionality on a Linux system.

The measures taken to reduce future system problems.

The measures taken when system problems arise.

A service that provides centralized authentication, logging, and policy restrictions on a network.

Forces SELinux to set the default label on system files and directories.

The components of a firewall that match specific network traffic that is to be allowed or dropped.

Displays various performance-related statistics on a Linux system.

A set of Linux kernel components and related software packages that prevent malicious software from accessing system resources.

Software that is used to monitor security events and vulnerabilities on systems across a network.

Displays SELinux features.

A certificate that was digitally signed by the computer that generated the public key within.

A secured room that stores servers within an organization.

Displays the current status and functionality of the SELinux subsystem.

Used to change SELinux between enforcing and permissive mode.

Used to modify SELinux settings within an SELinux policy.

A packet filter that applies rules to related packets within the same network session.

Used to perform commands as another user via entries in the /etc/sudoers file.

Used to edit text files as another user via entries in the /etc/sudoers file.

A software package that contains common performance-monitoring utilities.

A program that can be used to run a network daemon with additional client restrictions specified in the /etc/hosts.allow and /etc/hosts.deny files.

Used to display the network traffic passing through a network interface.

A service that provides centralized authentication, logging, and policy restrictions on a network.

Displays load average information for a Linux system.

A VPN mode whereby traffic is encrypted between two computers.

The tasks performed when solving system problems.

Used to start a command-line version of the graphical Wireshark program.

A VPN mode whereby traffic is encrypted between two routers.

Used to view and modify udev daemon configuration.

Used to configure UFW.

Used to modify process limit parameters in the current shell.

A software component that can be used to simplify the configuration of netfilter firewall rules.

Displays system uptime and load average information for a Linux system.

Used to modify the contents of the /etc/sudoers file.

Displays memory, CPU, and swap statistics on a Linux system.

Software that is used to scan a system for known vulnerabilities.

A graphical program used to display the network traffic passing through a network interface.