Pass the RedHat RHCE RH302 Questions and answers with ExamsMirror

Do the following steps as:

1.vi /etc/hosts.deny

dovecot:ALL EXCEPT .example.com, .my133t.org

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/vsftpd/vsftpd.conf

anon_upload_enable=yes

chown_uploads=yes

chown_username=username

2.service vsftpd start| restart

3.directory owner should be ftp user: chown ftp directory path allowedto upload files.

4.Write permission should be set to owner user.

By default anonymous user can only download files from the ftp. Should write anon_upload_enable=yes to enable anonymous upload files. Default Directory for anonymous is /var/ftp.

At exam Lab example.com domain resides on 172.24.0.0/16 Network and my133t.org resides on 172.25.0.0/16 Network.

1.vi /etc/squid/squid.conf

#detault:

http_port8080

#Recommended minimum configuration:

# Near the src acl src section

acl allownet src 172.24.0.0/255.255.0.0

acl denynet src 172.25.0.0/255.255.0.0

#Default:

# http_access deny all

#Under Herehttp_access allow allownet

http_access deny denynet

2.service squid start

3.chkconfig squid on

squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.

Do the following steps as:

1.vi /etc/squid/squid.conf

#detault:

http_port8080

#Recommended minimum configuration:

# Near the src acl src section

acl allownet src 192.168.0.0/255.255.255.0

acl denynet src 192.168.1.0/255.255.255.0

#Default:

# http_access deny all

#Under Herehttp_access allow allownet

http_access deny denynet

2.service squid start

3.chkconfig squid on

squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.

To block or allow the Internet access to hosts, we should create the acl (Access Control List). In this file we can specify only the IP address.

Example: acl aclname src IP/NetmaskAfter creating acl we can block or allow the internet to specified acl.

http_access allow | deny alcname

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user1|user2|user3;Al0900-1700

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

hostname station?.example.comThis will set the host name only for current session. To set hostname permanently.

vi /etc/sysconfig/network

HOSTNAME=station?.example.com

service network restart

Very Easy question, nameserver is specified in question,

1.vi /etc/resolv.conf

nameserver 192.168.0.254

2.host server1.example.com

By Default system accept the logs only generated from local host. To accept the Log from other host configure:

vi /etc/sysconfig/syslog

SYSLOGD_OPTIONS="-m 0 -r"

Where

-m 0 disables 'MARK' messages.

-r enables logging from remote machines

-x disables DNS lookups on messages recieved with -r

service syslog restart

We can control the services for current session and for next reboot time. For current Session, we use service servicename start or restart or stop or status. For automatically at next reboot time:

chkconfig servicename on or off

eg: chkconfig nfs on

chkconfig portmap on

or

ntsysv

Select the nfs and portmap services.

Reboot the system and identify whether services are running or not.

When root unable to login into the system think:

Is password correct?

Is account expired?

Is terminal Blocked?

Do these Steps:

Boot the System on Single user mode.

Change the password

Check the account expire date by using chage –l root command.

If account is expired, set net expire date: chage –E “NEVER” root

Check the file /etc/securettyWhich file blocked to root login from certain terminal.

If terminal is deleted or commented write new or uncomment.

Reboot the system and login as a root.