CORE DOMAIN -TOP LEVELSEC.LINUX

Linux Security & Systems Hardening

POSIX discretionary access controls, SUID privilege boundary triage, Linux kernel capabilities, auditd system event monitoring, and kernel sysctl baselines.

Constituent Capability Skills (6)

SEC.LINUX.AUDITING2 Obj

Linux System Auditing with auditd

Writing immutable auditd syscall monitoring rules to log process executions, sensitive file modifications, and authentication events.

View Details

SEC.LINUX.CAPABILITIES

2 Obj

Linux Kernel Capabilities & Bounding Sets

Configuring fine-grained kernel privileges with getcap and setcap, dropping dangerous capabilities from service units.

View Details

SEC.LINUX.HARDENING2 Obj

Linux Security Baselines & Kernel Hardening

Configuring hardened sysctl kernel baselines, core dump restrictions, ASLR verification, and filesystem mount protections.

View Details

SEC.LINUX.PERMISSIONS2 Obj

Linux Discretionary Access Control & Permissions

Auditing POSIX file permission bits, directory traversal execution rights, default umask enforcement, and ownership hierarchies.

View Details

SEC.LINUX.PRIVESC2 Obj

Linux Privilege Escalation & SUID Triage

Auditing SUID/SGID binary permissions, shared library hijacking, and sudoers configuration flaws to prevent unprivileged root compromise.

View Details

SEC.LINUX.PROCESS_SECURITY2 Obj

Linux Process Isolation & ProcFS Forensics

Triaging active process memory, environment variables, deleted binary file descriptors, and socket connections in /proc.

View Details