16.05.2015 Views

Working with the Unix OS

Working with the Unix OS

Working with the Unix OS

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Unix</strong> Security<br />

- repairs damaged user files and volumes<br />

- updates system software<br />

- sets system configuration parameters<br />

- collects various system statistics<br />

- disables and deletes accounts<br />

- makes periodic system checks<br />

- monitors repeated login attempts<br />

- periodically scans line permissions<br />

- deals <strong>with</strong> invalid su attempts<br />

Limiting SETUID<br />

- use only when absolutely necessary<br />

- make not writable<br />

- use setgid instead of setuid<br />

- periodically search for new setuid programs<br />

- know what <strong>the</strong> setuid and setgid programs do<br />

- write setuid programs so that <strong>the</strong>y can be tested on non-critical data, <strong>with</strong>out setuid attributes, only add setuid<br />

after checking security<br />

- if in doubt remove setuid and rebuild program.<br />

209

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!