Securing User Accounts

Managing users is one of the more challenging aspects of IT administration. You need to make sure that users can always access their stuff and that they can perform the required tasks to do their jobs. You also need to ensure that users' stuff is always secure from unauthorized users and that users can't perform any tasks that don't fit their job description. It's a tall order, but we aim to show that it's doable.

In this chapter, we'll cover the following topics:

• The dangers of logging in as the root user
• The advantages of using sudo
• How to set up sudo privileges for full administrative users and for users with only certain delegated privileges
• Advanced tips and tricks to use sudo
• Locking down users' home directories
• Enforcing strong password criteria
• Setting and enforcing password and account expiration
• Preventing brute-force password attacks
• Locking user accounts
• Setting up security banners