| View previous topic :: View next topic |
| Author |
Message |
bluwulf
Jr. Member
Joined: 27 Jun 2024
Posts: 60
|
|
| Back to top |
|
geeshock
Moderator
Joined: 02 Nov 2024
Posts: 933
Location: Hertford, NC
|
|
| Back to top |
|
lynch
Sr. Member
Joined: 15 Nov 2024
Posts: 1946
Location: The Diamond State
|
|
| Back to top |
|
mmmna
. . . . . . .
Joined: 21 Apr 2024
Posts: 5100
Location: Centah Bahnstead Nuh Ham-shuh
|
 Posted: Fri Nov 28, 2024 3:23 pm Post subject: |
 |
|
| A certification in Linux SECURITY is not the main issue for people seeking certification in Linux Administration. Yes, security is a major contributing factor in administration, but is not 100% of the matter. As for getting the certification, I'd rather have it and not need it than need it and not have it. So many employers are prescreening candidates via headhunters, and the headhunters are clueless in many instances about how to interview a technical person, so the resume that gets passed along to the employer has to say RHCE or LPI or what not.
_________________
Slackware 10.2 with stock kernel
|
|
| Back to top |
|
mr_ed
Moderator
Joined: 28 Aug 2024
Posts: 3306
Location: 42 miles north of Ogdensburg, NY
|
|
| Back to top |
|
Germ
Keeper of the BIG STICK
Joined: 30 Apr 2024
Posts: 9605
Location: Planet Earth
|
|
| Back to top |
|
geeshock
Moderator
Joined: 02 Nov 2024
Posts: 933
Location: Hertford, NC
|
| Posted: Sat Nov 29, 2024 9:59 am Post subject: |
|
|
LOL, I know, had a lady I tried to help set up an isp. I Had the e-mail server, Radius Server, secondary firewall (software), DNS server, database server, and even had samba set up for the 2 winblows computers. I wonder if she was all talk and no action, she never gave any direction, had an accend 6000 ready to be setup but it collected dust, and all she had to do was set up 2 servers but never did. Eventualy the whole project went belly up and we haden't even signed the first customer. Tell me we don't have a few idiots around here 
|
|
| Back to top |
|
mmmna
. . . . . . .
Joined: 21 Apr 2024
Posts: 5100
Location: Centah Bahnstead Nuh Ham-shuh
|
| Posted: Mon Dec 01, 2024 5:34 am Post subject: |
|
|
So, getting back onto bluwulfs topic, would security certification help any? I figure that Linux security is fairly straightforward: close ports, complex passwords, expire passwords frequently, keep up with security issues in Linux software, avoid software that has weak support.
What else could an admin person need?
_________________
Slackware 10.2 with stock kernel
|
|
| Back to top |
|
geeshock
Moderator
Joined: 02 Nov 2024
Posts: 933
Location: Hertford, NC
|
| Posted: Mon Dec 01, 2024 8:33 am Post subject: |
|
|
| mmmna wrote: | So, getting back onto bluwulfs topic, would security certification help any? I figure that Linux security is fairly straightforward: close ports, complex passwords, expire passwords frequently, keep up with security issues in Linux software, avoid software that has weak support.
What else could an admin person need? |
Emplyers like certs for the same reason they like degrees. They suposedly prove your at least at a certian point. Not saying it's always true, but to them it's the lesser of the evils
|
|
| Back to top |
|
mr_ed
Moderator
Joined: 28 Aug 2024
Posts: 3306
Location: 42 miles north of Ogdensburg, NY
|
| Posted: Mon Dec 01, 2024 3:43 pm Post subject: |
|
|
How about ways to enforce company policy internally?
Say people aren't allowed to surf from such-and-such hours, and are limited to what sites they surf (ie. not porn).
Laptops from home (with worm-infected Windows)
Another thing could be setting up spam blocking.
Just a couple of thoughts.
_________________
Desktop: Ubuntu 6.06 "Dapper Drake"
Server: Ubuntu 5.10 "Breezy Badger"
Laptop: Ubuntu 6.10 "Edgy Eft"
|
|
| Back to top |
|
geeshock
Moderator
Joined: 02 Nov 2024
Posts: 933
Location: Hertford, NC
|
| Posted: Tue Dec 02, 2024 4:50 am Post subject: |
|
|
| mr_ed wrote: | How about ways to enforce company policy internally?
Say people aren't allowed to surf from such-and-such hours, and are limited to what sites they surf (ie. not porn). |
As long as it's out there they will find a way. About the best you can do is set up some basic filters and monitor the traffic and set up some strict security rules. IE, logging on from only YOUR computer. Don't leave your computer without logging off, don't write your password somewere where it'll be found, don't use weak passwords, etc.
| Quote: | | Laptops from home (with worm-infected Windows) |
As long as they go to those pornsites they are at risk. Don't they know those are hackers favorite targets? Well, those and the security patch sites if they can break in.
| Quote: | | Another thing could be setting up spam blocking. |
It depends on the bussiness you are in. As a webhost we have some filters set up that our clients can use but if I set the filters to high I can miss valuble e-mail from a potential client.
|
|
| Back to top |
|
mmmna
. . . . . . .
Joined: 21 Apr 2024
Posts: 5100
Location: Centah Bahnstead Nuh Ham-shuh
|
| Posted: Tue Dec 02, 2024 3:39 pm Post subject: |
|
|
| mr_ed wrote: | How about ways to enforce company policy internally?
Say people aren't allowed to surf from such-and-such hours, and are limited to what sites they surf (ie. not porn). |
I see security as guarding a two-way street. Inside must be allowed to get outside, within reasn, and outside must be able to get inside, again, within reason. I'm definitely not IT material, but I do know that road warriors want a certain 'depth of access' when they are logging in from outside the firewall. OTOH, opening FTP ports is not always necessary, since unintended data flow becomes one step more possible when FTP is opened. The brunt of the matter is, IMO, being well planned before implementing the access for anyone in a company.
_________________
Slackware 10.2 with stock kernel
|
|
| Back to top |
|
mr_ed
Moderator
Joined: 28 Aug 2024
Posts: 3306
Location: 42 miles north of Ogdensburg, NY
|
| Posted: Tue Dec 02, 2024 6:42 pm Post subject: |
|
|
| And making the rules clear.
_________________
Desktop: Ubuntu 6.06 "Dapper Drake"
Server: Ubuntu 5.10 "Breezy Badger"
Laptop: Ubuntu 6.10 "Edgy Eft"
|
|
| Back to top |
|
|
