Visão Geral
O curso Oracle Linux Security & Hardening aborda os princípios, as técnicas e as ferramentas utilizadas para proteger servidores Oracle Linux em ambientes corporativos, datacenters e infraestruturas virtualizadas. A capacitação contempla a implementação de controles de segurança no sistema operacional, o gerenciamento de usuários e privilégios, o endurecimento de serviços, a configuração de mecanismos de controle de acesso, a proteção de comunicações e a aplicação de práticas de monitoramento e auditoria.
Os participantes aprenderão a avaliar a configuração de segurança de servidores Linux, identificar configurações inadequadas, reduzir a superfície de ataque e aplicar controles preventivos e de detecção. O treinamento inclui gerenciamento seguro de atualizações, permissões de arquivos, SSH, firewall, SELinux, registro de eventos, auditoria de atividades e análise de vulnerabilidades, considerando os recursos disponíveis nas versões adotadas do Oracle Linux.
Por meio de exercícios práticos, os participantes desenvolverão competências para implementar configurações de hardening, validar a efetividade dos controles, investigar eventos relevantes e documentar os resultados das atividades de segurança. O curso enfatiza a aplicação de medidas técnicas que contribuam para a proteção da confidencialidade, integridade e disponibilidade dos sistemas, observando requisitos operacionais e evitando alterações que comprometam a estabilidade dos serviços.
Conteúdo Programatico
Module 1 – Oracle Linux Security Fundamentals
- Security architecture and core protection principles
- Oracle Linux security features and system components
- Threats, attack surfaces and common Linux misconfigurations
- Security baselines and configuration assessment
- Least privilege, defense in depth and secure administration
- Security planning for production and virtualized environments
Module 2 – User, Group and Privilege Management
- Linux users, groups and account administration
- Password policies and account security
- Sudo configuration and privileged command execution
- Restricting administrative access and unnecessary privileges
- File ownership, permissions and special permission bits
- Secure handling of sensitive files and configuration data
- Identifying insecure permissions and excessive privileges
- Practical lab: reviewing and hardening user and privilege configurations
Module 3 – SSH and Remote Access Security
- OpenSSH architecture and secure administration
- SSH server configuration and authentication controls
- Public key authentication and private key protection
- Restricting remote access and privileged login
- Managing SSH access policies and trusted administrative users
- Secure remote administration and session management
- Diagnosing authentication failures and reviewing access logs
- Practical lab: hardening and validating SSH access
Module 4 – SELinux and Mandatory Access Control
- SELinux architecture, policies and security contexts
- Enforcing, permissive and disabled modes
- SELinux status verification and policy management
- File contexts, process contexts and port labeling
- Using restorecon, semanage and related utilities
- Analyzing access denials and AVC messages
- Troubleshooting application access without unnecessarily weakening protection
- Practical lab: diagnosing and resolving SELinux policy issues
Module 5 – Network Security and Firewall Configuration
- Network exposure and server attack surface reduction
- Managing services and listening network ports
- firewalld architecture, zones and firewall rules
- Restricting inbound traffic and administrative access
- Reviewing network listeners and active connections
- Secure service configuration and unnecessary service removal
- Network access validation and firewall troubleshooting
- Practical lab: applying and testing host-level network security controls
Module 6 – Security Updates and Vulnerability Management
- Oracle Linux package management and update procedures
- Identifying installed packages and outdated components
- Applying security updates through supported repositories
- Understanding security advisories and vulnerability identifiers
- Evaluating exposure and prioritizing remediation
- Assessing third-party software and unnecessary packages
- Change management, rollback planning and post-update validation
- Practical lab: identifying and remediating outdated software in a test environment
Module 7 – Auditing, Logging and Security Monitoring
- Linux logging architecture and systemd journal
- Reviewing authentication, system and service logs
- Configuring auditd and audit rules
- Using ausearch and aureport for event investigation
- Monitoring privileged activity and sensitive file access
- Identifying suspicious authentication and administrative events
- Log retention, protection and operational considerations
- Practical lab: configuring audit rules and investigating security events
Module 8 – System Hardening and Security Validation
- Reviewing system services, processes and startup configuration
- Hardening file permissions and critical system directories
- Reviewing kernel parameters and network-related security settings
- Applying secure configuration baselines and documenting exceptions
- Evaluating available vulnerability assessment and compliance tools
- Validating controls and identifying configuration drift
- Developing a hardening checklist and remediation plan
- Practical lab: performing a security review and validating hardening measures
Module 9 – Integrated Security Hardening Lab
- Assessing the initial security posture of an Oracle Linux server
- Identifying configuration weaknesses and unnecessary exposure
- Implementing account, SSH, SELinux and firewall protections
- Applying security updates and reviewing relevant advisories
- Configuring auditing and investigating simulated security events
- Reassessing the server after remediation
- Documenting findings, applied controls and residual risks