By the end of this chapter, you will be able to:
Mastering these skills will help you keep Linux systems running smoothly and prevent unexpected storage issues in real-world workplaces.
Linux file system management is a critical skill for cyber security professionals in Kenya, particularly when securing servers and workstations that run Linux-based operating systems. Understanding the Linux file system hierarchy and managing disk storage effectively enables professionals to implement robust security measures, optimize system performance, and ensure data integrity. This chapter focuses on the structure of Linux file systems, the essential commands for disk partitioning and formatting, and how to visualize storage devices, all within the context of safeguarding digital assets in organizations such as county governments, banks, and healthcare institutions.
Linux uses a hierarchical file system structure that organizes files and directories in a tree-like format starting from the root directory. This structure is fundamental for system administration and security because it defines where files reside and how permissions are applied. Cyber security professionals must master this hierarchy to protect sensitive data, configure access controls, and troubleshoot system issues effectively.
The Linux file system contains several standard directories, each serving specific purposes that support system operation and security. Cyber security experts must be familiar with these directories to manage permissions and monitor security-relevant files.
The root directory is the top-level directory in the Linux file system hierarchy. It contains all other directories and files. Protecting the root directory is vital because unauthorized changes here can compromise the entire system.
This directory contains essential executable programs needed for basic system operation, such as commands like ls, cp, and mv. Cyber security professionals must ensure binaries here are not tampered with to prevent malware execution.
The /etc directory holds system-wide configuration files, including network settings, user account information, and security policies. Securing /etc is crucial because attackers often target configuration files to escalate privileges or maintain persistence.
/var stores files that change frequently, such as logs, mail spools, and temporary files. Monitoring /var/log is a standard practice in cyber security for detecting suspicious activities and auditing system events.
Each user has a directory under /home for personal files and settings. Proper permission settings here prevent unauthorized access to user data, which is essential in environments like banks and universities where data privacy is critical.
This directory contains user applications and utilities. It is often mounted as a separate partition to protect system stability and security. Cyber security teams must verify software integrity in /usr to avoid malicious code execution.
/tmp is used for temporary file storage by applications and users. Since it is world-writable, it is a common target for attacks such as symlink races, so setting appropriate permissions and mount options is a recommended security practice.
This directory contains shared libraries needed by programs in /bin and /sbin. Protecting /lib ensures that executable programs have trusted libraries, preventing the system from running malicious code.
/sbin contains essential system binaries used primarily by the system administrator for system maintenance tasks. Restricting access to /sbin commands is important to prevent unauthorized system changes.
/etc directory is critical for maintaining system security in a county government server. (5 marks) Create a free account to open more of this chapter.
Free: practical guides, quick cards, workplace scenarios and more.
Create a free accountThis chapter provided a comprehensive overview of managing file systems and storage in Linux environments. It began by explaining the Linux file system hierarchy, emphasizing the roles and functions of key directories essential for system organization and operation. The discussion then advanced to disk partitioning and formatting, detailing the use of commands such as fdisk for partition management, mkfs for creating file systems, and lsblk for listing block devices. Following this, the chapter covered the processes of mounting and unmounting file systems, distinguishing between manual mounts for temporary access and persistent mounts that ensure file systems are available after system reboots. The concept of Logical Volume Manager (LVM) was introduced, including the creation and management of logical volumes to allow flexible storage allocation. Finally, the chapter explored RAID configuration as a method for improving data redundancy and performance in storage systems. Together, these topics equip students with the foundational skills required to effectively manage Linux storage solutions.
At the start of this chapter we promised you would be able to:
Tick each one you can genuinely do.
So, are you there yet?
You're competent when you can confidently do 50% or more of what this chapter promised.
Sign in to record how you're doing.