Hands-on Lab·LPIC-1
SSH posture, limits, and encrypting a file
Objectives 110.2 and 110.3 cover host hardening and encryption. This guide reads what the SSH daemon is ACTUALLY running with - which is not always what the config file says - looks at the resource limits a user cannot exceed, and finishes by encrypting and decrypting a file with GPG symmetric encryption, leaving no key material behind.
102: Security Guide 24 of 33 Intermediate
- OSUbuntu 26.04 LTS
- Kernel7.0.0-30-generic
- systemd259
- TimeAbout 18 min
| Server Name | IP Address | OS | Roles | CPU | RAM | HDD |
|---|---|---|---|---|---|---|
| LPIC1-A01 | 192.168.0.76 | Ubuntu 26.04 LTS | Debian-family host - dpkg and apt, which objective 102.4 names | 2 Core | 4 GB | 50 GB |
This guide includes
Use this for host hardening and encryption. This matters because sshd -T prints the effective configuration - which is not what the file says, and is what actually applies.
- reading what the SSH server is really running with
- setting limits a user cannot exceed, for the shell and in a file
- encrypting a file with a passphrase, and proving it is unreadable
Before you start
- suid-sudo-and-who-can-do-what
-
What the SSH server is actually running with
-
Limits a user cannot exceed
-
Encrypting a file, and proving it is unreadable