# Chapter Securing the Operating System #

[Author](authors.html): KevinDKinsey

<!-- NOTE: not much of writing or "tech" review here, please sign up for a specific topic page instead. Thanks -->

[Reviewer](technical_reviewers.html): _name_ _[[contact]]_ _[[BSD_flavour]]_

[Reviewer](technical_reviewers.html): _name_ _[[contact]]_ _[[BSD_flavour]]_

----


The mark of a good system administrator is the awareness of and adherence
to best security practices. An administrator is expected to be familiar
with common security practices. BSD systems are designed with security
in mind and provide many mechanisms which allow the system administrator
to tune systems to the security requirements of an organization. While
the BSDA candidate won't always be responsible for implementing these
mechanisms, being able to recognize the features
and commands available for securing BSD systems is still an essential aspect of
overall security administration.



- [[Determine_the_system__39__s_security_level]]
- [[Configure_an_SSH_server_according_to_a_set_of_requirements]]
- [[Configure_an_SSH_server_to_use_a_key_pair_for_authentication]]
- [[Preserve_existing_SSH_host_keys_during_a_system_upgrade]]
- [[Recognize_alternate_authentication_mechanisms]]
- [[Recognize_alternate_authorization_schemes]]
- [[Recognize_basic_recommended_access_methods]]
- [[Recognize_BSD_firewalls_and_rulesets]]
- [[Recognize_BSD_mechanisms_for_encrypting_devices]]
- [[Recognize_methods_for_verifying_the_validity_of_binaries]]
- [[Recognize_the_BSD_methods_for_restraining_a_service]]
- [[Change_the_encryption_algorithm_used_to_encrypt_the_password_database]]
- [[Modify_the_system_banner]]
- [[Protect_authentication_data]]
