Linux® Hardening in Hostile Networks (Pearson Open Source Software Development Series)

I've not finished it but I have already extracted useful knowledge, especially with practical approaches to hardening servers. As a developer, it's not my area of expertise, and being able to quickly extract synthesized pieces of knowledge so that I don't get completely trashed by, eg, brute force is super useful.Also, my coworkers have stolen it multiple times.

Clearly and concisely written book that provides a solid foundation for anyone looking to increase their knowledge of running services on linux.

I'm revising my appraisal.It's OK.Just very expensive and not very detailed. I expected more.

Well written, using an incremental approach to implementing security.

Clear, concise and easy to follow. Very practical.

And it's better than anything else I've ever seen in that field, which I've been following professionally for nearly two decades. Period.The section on Qubes is the first serious coverage Qubes has had between two covers. And just by itself, it's worth the price of the book.But Rankin also discusses some of the significant improvements in OS-level security that have been developed over the last decade and a half, such as whole-disk encryption, App Armor, Tor, and DNSSEC. He discusses how to harden the open source database tools that are liable to be used on Linux platforms and which aren't usually treated in works on database security. He spends quite a few electrons on the topic of hardening modern Mail Transfer systems. Significantly, he assumes the MTA is Postfix. He doesn't neglect HTTPS either, although the space he can devote to it is limited in a work with the broader focus of general OS security.The only quarrel I have with the work isn't the fault of the author. The publisher saw fit to only provide chapter-level bookmarks in the EPUB edition. But this isn't a problem with the PDF copy, which is supplied with excellent navigational aids. The reader needs to know, at this point, that I bought the electronic versions from the publisher, though their site at informit.com, rather than from an intermediary.And even after the glitches with the EPUB, I still think this is a five star work. I only wish I could give it six.

I am going out of my way to write this review because the content was so well done. The topic, description, reasoning, and approach was reader friendly and covered today’s linux, but relates to MacOS and unix in general. I could search all day for this information or find it in this book. Nice work!

Well written with solid information! Qubes4lyfe!

Like