This instructor-led course focuses on the important tools used for debugging and monitoring the kernel, and how security features are implemented and controlled.
INSTRUCTOR-LED COURSE
Linux Kernel Debugging and Security (LFD440)
Who Is It For
This course is for experienced developers who need to understand the methods and internal infrastructure of the Linux kernel.
read less
read more
What You’ll Learn
This four day course includes extensive hands-on exercises and demonstrations designed to give you the necessary tools to develop and debug Linux kernel code.
read less
read more
What It Prepares You For
You will walk away from this course with a solid understanding of Linux kernel. debugging techniques and tools.
read less
read more
Introduction
Who You Are
The Linux Foundation
Linux Foundation Training
Certification Programs and Digital Badging
Linux Distributions
Platforms
Preparing Your System
Using and Downloading a Virtual Machine
Things change in Linux
Documentation and Links
Preliminaries
Kernel Versions
Kernel Sources and Use of git
How to Work in OSS Projects **
Stay Close to Mainline for Security and Quality
Study and Understand the Project DNA
Figure Out What Itch You Want to Scratch
Identify Maintainers and Their Work Flows and Methods
Get Early Input and Work in the Open
Contribute Incremental Bits, Not Large Code Dumps
Leave Your Ego at the Door: Don’t Be Thin-Skinned
Be Patient, Develop Long Term Relationships, Be Helpful
Kernel Features
User-Space vs. Kernel-Space
What are System Calls?
Available System Calls
Scheduling Algorithms and Task Structures
Process Context
Labs
Monitoring and Debugging
Tracing and Profiling
sysctl
SysRq Key
oops Messages
Kernel Debuggers
debugfs
Labs
The proc Filesystem **
Creating and Removing Entries
Reading and Writing Entries
The seq file Interface **
Labs
kprobes
kretprobes
SystemTap **
Labs
Ftrace
ftrace, trace-cmd and kernelshark
Available Tracers
Using ftrace
Files in the Tracing Directory
Tracing Options
Printing with trace printk()
Trace Markers
Dumping the Buffer
trace-cmd
Labs
Perf
perf stat
perf list
perf record
perf report
perf annotate
perf top
Labs
eBPF
eBPF
Installation
bcc Tools
bpftrace
Labs
Crash
Main Commands
Labs
Kernel Core Dumps
kexec
Setting Up Kernel Core Dumps
Labs
Virtualization**
Rings of Virtualization
Hypervisors
QEMU
Emulated Architectures
Image Formats
Third Party Hypervisor Integration
Labs
Linux Kernel Debugging Tools
kdb
qemu+gdb
kgdb: hardware+serial+gdb
Labs
Embedded Linux**
Why Use Linux?
Making a Small Linux Environment
Real Time Linuxes
Notifiers**
Data Structures
Callbacks and Notifications
Creating Notifier Chains
Labs
CPU Frequency Scaling**
Notifiers
Drivers
Governors
Labs
Netlink Sockets**
Opening a netlink Socket
netlink Messages
Labs
Introduction to Linux Kernel Security
Discretionary Access Control (DAC)
POSIX ACLs
POSIX Capabilities
Namespaces
Linux Security Modules (LSM)
Netfilter
Cryptographic Methods
The Kernel Self Protection Project
Linux Security Modules (LSM)
LSM Basics
LSM Choices
How LSM Works
An LSM Example: Tomoyo
SELinux
SELinux Overview
SELinux Modes
SELinux Policies
Context Utilities
SELinux and Standard Command Line Tools
SELinux Context Inheritance and Preservation**
restorecon**
semanage fcontext**
Using SELinux Booleans**
getsebool and setsebool**
Troubleshooting Tools
Labs
AppArmor
Checking Status
Modes and Profiles
Profiles
Utilities
Netfilter
Netfilter Hooks
Netfilter Implementation
Hooking into Netfilter
Iptables
Labs
The Virtual File System
Available Filesystems
Special Filesystems
The tmpfs Filesystem
The ext2/ext3 Filesystem
The ext4 Filesystem
The btrfs Filesystem
Common File Model
VFS System Calls
Files and Processes
Mounting Filesystems
Filesystems in User-Space (FUSE)**
Writing a Filesystem
Labs
Journaling Filesystems**
Available Journaling Filesystems
Contrasting Features
Labs
Closing and Evaluation Survey
Appendices
—
Kernel Architecture I
Monolithic and Micro Kernels
Object-Oriented Methods
Main Kernel Tasks
User-Space and Kernel-Space
Kernel Programming Preview
Task Structure
Memory Allocation
Transferring Data between User and Kernel Spaces
Linked Lists
Jiffies
Labs
Modules
A Trivial Example
Compiling Modules
Modules vs Built-in
Module Utilities
Automatic Loading/Unloading of Modules
Module Usage Count
Module Licensing
Exporting Symbols
Resolving Symbols **
Labs
Kernel Architecture II
Kernel Preemption
Real Time Preemption Patch
Labs
Kernel Configuration and Compilation
Kernel Browsers
Kernel Configuration Files
Kernel Building and Makefiles
initrd and initramfs
Labs
Kernel Style and General Considerations
Using Generic Kernel Routines and Methods
Making a Kernel Patch
sparse
Using likely() and unlikely()
Writing Portable Code, CPU, 32/64-bit, Endianness
Writing for SMP
Writing for High Memory Systems
Power Management
Keeping Security in Mind
Labs
Race Conditions and Synchronization Methods
Atomic Operations
Bit Operations
Spinlocks
Seqlocks
Disabling Preemption
Mutexes
Semaphores
Completion Functions
Read-Copy-Update (RCU)
Reference Counts
Labs
Memory Addressing
Systems With and Without MMU and the TLB
Memory Addresses
High and Low Memory
Memory Zones
Special Device Nodes
NUMA
Paging
Page Tables
page structure
Labs
Memory Allocation
Buddy System
Slabs and Cache Allocations
Memory Pools
kmalloc()
vmalloc()
Early Allocations and bootmem()
Memory Defragmentation
Labs
These sections may be considered in part or in whole as optional. They contain either background reference material, specialized topics, or advanced subjects. The instructor may choose to cover or not cover them depending on classroom experience and time constraints.
Prerequisites
- Be proficient in the C programming language.
- Be familiar with basic Linux (UNIX) utilities such as ls, grep and tar.
- Be comfortable using any of the available text editors (e.g. emacs, vi, etc.).
- Experience with any major Linux distribution is helpful but not strictly required.
- Have experience equivalent to having taken LFD420: Linux Kernel Internals and Development.
Pre-class preparation material will be provided before class.
May 2021
The material is good.
Mar 2021
I like the Labs.
Mar 2021
I've now taken LFD420 and LFD440, and I really like how these courses provide a nice overview of the topic, and then use labs for further
exploration. This provides a nice balance, and an avenue for further self-directed exploration.
Feb 2021
I got a really wide range of knowledge on Linux, and was introduced into unknown technology.
Feb 2021
Besides the material, I loved the insights shared about the maintainers, and how things came to be historically etc. Instructor very often came up with excellent, concise, and more pragmatic explanations, which I thought was really cool, and benefitted from it.
Feb 2021
The training aids (virtual machines etc.) were spot on as usual - they really help to get the most out of the training. The instructor was knowledgeable, and helped reinforce topics with real world experience. A pleasure to have had Behan take the training.
Feb 2021
The instructor was great, very nice and thoughtful.
Feb 2021
Solving the labs together, and live demos.
Feb 2021
Content, labs and trainer expertise.
Dec 2020
John is an excellent teacher, ready to answer any question, open for any kind of interruption, and knows how to handle a virtual class with high
quality.
Dec 2020
I liked the flow of information, and content organization.
Dec 2020
The labs were the best part of the course.
Dec 2020
Really well done with everything.
Nov 2020
The study material is great.
Nov 2020
I liked the labs that involved coding.
Nov 2020
I liked the instructor, loved his jokes and personality.
Nov 2020
I really liked the breakdown of the class, and how much time we were given to work on labs. I also liked that we were provided vms to use that have solutions files. I don't have a strong background in C, so it was nice to go to the solution file, focus on learning what the program was doing and how to utilize it, instead of spending all my time struggling through writing it from scratch if I was a little lost on a particular part of the code. I also really enjoyed the smaller class size, it made it easier to have one on one interaction with our instructor if we had questions. Our instructor was very knowledgeable, and I enjoyed hearing about his experiences in the industry, jokes to break up the material, and some of his other experiences.
Nov 2020
I liked the security aspect of the course.
Aug 2020
The instructor is very knowledgeable.
Aug 2020
It introduced me to all the components, now I know what I don't know well. It was a good way to be introduced to all components.
$3250
Jul, 19 - 22, 2021
9:00 am - 5:00 pm US/Central
Virtual, Instructor-Led
GUARANTEED With Next Enrollment
Classes will be guaranteed to run with next enrollment.
Aug, 23 - 26, 2021
9:00 am - 5:00 pm US/Central
Virtual, Instructor-Led
Sep, 27 - 30, 2021
9:00 am - 5:00 pm US/Central
Virtual, Instructor-Led
GUARANTEED This course has reached its minimum class size and is guaranteed to run on the scheduled date.
Dates don't work? Check out our partner schedule
Pick Your Free Gift!
For a limited time, we are including a free gift from Best Buy when you purchase instructor-led training.
Learn more > 
Live Online (Virtual) or Live (Classroom)
4 days of Instructor-led class time
Hands-on Labs & Assignments
Resources & Course Manual
Certificate of Completion
Digital Badge
