3.2 Linux recap
Structure
- Introduction
- Linux System Calls
- File permissions
- Linux capabilities
- Privilege escalation
- Conclusions
Bibliography
(i.e., material that you must read to study the lesson)
- “Container Security”, Liz RIce, Chap. 2
Other useful information and other links
(i.e., material that you may want to read to deepen the comprehension)
- Red Hat documentation on capabilities
- A nice article that explains how capabilities work
- History of Linux - Wikipedia
- Releas notes for Linux 0.01 on the Wayback Machine
Recap Questions
(recap questions that can help you revise the material you studied and that may be also asked at the oral exam 😊 )
- What are system calls in Linux and what is their purpose?
- How do file permissions work in Linux?
- How does the setuid bit works?
- What is the setuid bit purpose?
- Why capabilities were introduced? What is their advantage with respect to setuid?
- What are the security implications of setuid?
- How do capabilities work? What are the commands that are introduced to manage them?
- Why can you add capabilities to files?
- What is privilege escalation?
- Why privilege escalation is important for containers?