Description: Understanding and manipulating file permissions and ownership settings.
Key Knowledge Areas:
File and directory permissions and ownership
The following is a partial list of the used files, terms and utilities:
ls -l, ls -a
chmod, chown
Description: Candidates should be able to control file access through the proper use of permissions and ownerships.
Key Knowledge Areas:
Manage access permissions on regular and special files as well as directories.
Use access modes such as suid, sgid and the sticky bit to maintain security.
Know how to change the file creation mask.
Use the group field to grant file access to group members.
The following is a partial list of the used files, terms and utilities:
chmod
umask
chown
chgrp
Description: Candidates should be able to add, remove, suspend and change user accounts.
Key Knowledge Areas:
User and group commands
User IDs
Add, modify and remove users and groups.
Manage user/group info in password/group databases.
Create and manage special purpose and limited accounts.
The following is a partial list of the used files, terms and utilities:
/etc/passwd
/etc/shadow
/etc/group
/etc/skel/
chage
getent
groupadd
groupdel
groupmod
passwd
useradd
userdel
usermod
Description: Candidates should be thoroughly familiar with the Filesystem Hierarchy Standard (FHS), including typical file locations and directory classifications.
Key Knowledge Areas:
Understand the correct locations of files under the FHS.
Find files and commands on a Linux system.
Know the location and purpose of important file and directories as defined in the FHS.
The following is a partial list of the used files, terms and utilities:
find
locate
updatedb
whereis
which
type
/etc/updatedb.conf
Description: Turning repetitive commands into simple scripts.
Key Knowledge Areas:
Basic shell scripting
Awareness of common text editors (vi and nano)
Use standard sh syntax (loops, tests).
Use command substitution.
Test return values for success or failure or other information provided by a command.
Execute chained commands.
Perform conditional mailing to the superuser.
Correctly select the script interpreter through the shebang (#!) line.
Manage the location, ownership, execution and suid-rights of scripts.
The following is a partial list of the used files, terms and utilities:
#! (shebang)
/bin/bash
Variables
Arguments
for loops
echo
Exit status
for
while
test
if
read
seq
exec
||
&&
Description: Candidates should be able to use cron and systemd timers to run jobs at regular intervals and to use at to run jobs at a specific time.
Key Knowledge Areas:
Manage cron and at jobs.
Configure user access to cron and at services.
Understand systemd timer units.
The following is a partial list of the used files, terms and utilities:
/etc/cron.{d,daily,hourly,monthly,weekly}/
/etc/at.deny
/etc/at.allow
/etc/crontab
/etc/cron.allow
/etc/cron.deny
/var/spool/cron/
crontab
at
atq
atrm
systemctl
systemd-run
Description: Candidates should be able to manage print queues and user print jobs using CUPS and the LPD compatibility interface.
Key Knowledge Areas:
Basic CUPS configuration (for local and remote printers).
Manage user print queues.
Troubleshoot general printing problems.
Add and remove jobs from configured printer queues.
The following is a partial list of the used files, terms and utilities:
CUPS configuration files, tools and utilities
/etc/cups/
lpd legacy interface (lpr, lprm, lpq)
Description: Candidates should be able to create and manage print shares in a mixed environment.
Key Knowledge Areas:
Create and configure printer sharing
Configure integration between Samba and CUPS
Manage Windows print drivers and configure downloading of print drivers
Configure [print$]
Understand security concerns with printer sharing
Uploading printer drivers for Point’n’Print driver installation using ‘Add Print Driver Wizard’ in Windows
Terms and Utilities:
smb.conf
[print$]
CUPS
cupsd.conf
/var/spool/samba/.
smbspool
rpcclient
net