For Teachers · Back to the Module · Print with your browser's Print command.

P1 Worksheet: Linux Server Hardening

Student Worksheet (about 30 minutes, Practitioner level)

Name: ______________________ Class: __________ Date: __________

Read first: F1, F3

Learning Objectives

• [ ] Explain why unsupported releases and pending security updates are high risk.
• [ ] Recognise dangerous account, sudo and permission configurations.
• [ ] Explain what common kernel hardening parameters protect against.

Key Terms

Write each definition in your own words.

• End of Life: ______________________________________________
• Patch Management: ______________________________________________
• Least Privilege: ______________________________________________
• SUID: ______________________________________________
• Sticky Bit: ______________________________________________
• ASLR: ______________________________________________
• Hardening: ______________________________________________

Lab Tasks

Use only the simulated lab or a machine your teacher has authorised.

1. Run: openvapt demo --only HOST- --out p1
2. For each failed HOST check, find the line in internal/lab/lab.go that differs between the vulnerable and hardened server.
3. On a test machine you own: sudo openvapt scan --only HOST- and compare.

Self-Check Questions

1. Why is an operating system past end of life high risk?

• [ ] a) It runs slower
• [ ] b) New vulnerabilities in it will never be fixed
• [ ] c) It cannot run Go programs
• [ ] d) It cannot be backed up

1. An account named backup has UID 0. What does that mean?

• [ ] a) It is a normal user
• [ ] b) It has full root privileges
• [ ] c) It cannot log in
• [ ] d) It is a system account with limited rights

1. What does kernel.randomize_va_space = 2 provide?

• [ ] a) Full address space layout randomisation
• [ ] b) Faster networking
• [ ] c) Disk encryption
• [ ] d) Kernel module signing

1. Why is a sudo rule marked NOPASSWD risky?

• [ ] a) It logs every command
• [ ] b) Anyone who takes over that user gets root without knowing a password
• [ ] c) It disables sudo for that user
• [ ] d) It only works for root

1. What does the sticky bit on /tmp do?

• [ ] a) Makes files in /tmp permanent
• [ ] b) Stops users deleting each other's files
• [ ] c) Stops programs running from /tmp
• [ ] d) Encrypts /tmp

1. Why is a SUID program in a web folder a warning sign?

• [ ] a) It runs with its owner's rights, a classic privilege escalation trick
• [ ] b) It makes the site slower
• [ ] c) The web server cannot read SUID files
• [ ] d) It is the normal way to install web applications

Reflection

Which finding from this module would matter most on a server you are responsible for, and why?

________________________________________________________________

Sources

• NIST SP 800-123, Guide to General Server Security: https://csrc.nist.gov/pubs/sp/800/123/final
• NIST SP 800-40 Rev. 4, Enterprise Patch Management: https://csrc.nist.gov/pubs/sp/800/40/r4/final

Adapted from the OpenVAPT Academy (openvapt.com), built by AI Cybersecurity Engineers, used under the OpenVAPT Source-Available Licence 1.3. Free teaching use under TEACHING.md. Please cite OpenVAPT: see CITING.md or openvapt.com/cite.html. OpenVAPT is not affiliated with, and is not endorsed by, this institution or any third party named in this material. Pre-release versions may be wrong or unstable. Use at your own risk. If you adapt this material, say where you changed it.