LFD440: Linux Kernel Debugging and Security

2,995.00  excl. VAT

Course Code: LFD440

Duration: 4 days;

Delivery dates: TBA;

Instructor: TBA;

Certificate: Yes, upon completion;

Location: TBA.

Description

About

Learn the methods and internal infrastructure of the Linux kernel. This course focuses on the important tools used for debugging and monitoring the kernel, and how security features are implemented and controlled.

Audience

This course is for those interested in learning how to write Linux kernel code and understand security aspects of the Linux kernel.

Course Materials

Authorized printed training materials from The Linux Foundation. As part of your registration, a printed copy of the course manual will be course manual will be provided. If you are attending in person the material will be available onsite on the day the class begins.

Course Description

This course provides experienced programmers with a solid understanding of Linux kernel. debugging techniques and tools. This four day course includes extensive hands-on exercises and demonstrations designed to give you the necessary tools to develop and debug Linux kernel code.

Prerequisites

  • Knowledge of basic kernel interfaces and methods such as how to write, compile, load and unload modules, use synchronization primitives, and the basics of memory allocation and management, such as is provided by LFD420. Pre-class preparation material will be provided before class, an outline of which is provided here.
  • Be proficient in the C programming language.
  • Be familiar with basic Linux (UNIX) utilities such as ls, grep and tar.
  • Be comfortable using any of the available text editors (e.g. emacs, vi, etc.).
  • Experience with any major Linux distribution is helpful but not strictly required.
  • Have experience equivalent to having taken LFD420, the kernel internals course.

Course Outline

  • Introduction
  • Preliminaries
  • Kernel Features
  • Monitoring and Debugging
  • The proc Filesystem **
  • kprobes
  • Ftrace
  • Perf
  • Crash
  • Kernel Core Dumps
  • Virtualization**
  • QEMU
  • Linux Kernel Debugging Tools
  • Embedded Linux**
  • Notifiers**
  • CPU Frequency Scaling**
  • Netlink Sockets**
  • Introduction to Linux Kernel Security
  • Linux Security Modules (LSM)
  • SELinux
  • AppArmor
  • Netfilter
  • The Virtual File System
  • Flash Memory Filesystems
  • Filesystems in User-Space (FUSE)**
  • Journaling Filesystems**

Why train with The Linux Foundation

The Linux Foundation is the go-to source for training on virtually every aspect of Linux and many other open source technologies. Here are a few things that make The Linux Foundation the right choice for training:

  1. The Linux Foundation is the non-profit organization that hosts Linux and many other open source projects, employs Linux creator Linus Torvalds and hosts kernel.org (where all Linux kernel updates are released).
  2. Being so close to the kernel The Linux Foundation is constantly updating training to ensure that the most up-to-date information is being thought. Linux Foundation Training is unique in that all our training courses are designed to work on all major Linux distributions (including RedHat, Ubuntu and SUSE).
  3. The Linux Foundation does not sell any software or support services so there’s no hidden sales agenda in the training material. The only goal is to help students learn the material.
  4. When you train with The Linux Foundation, you’re learning from instructors who are comfortable across all major Linux distributions and can answer student questions regardless of the distribution you’re using for the class. You are truly learning from the experts.