IT Baseline Protection Manual - The Information Warfare Site

Networked Systems UNIX Server
_________________________________________________________________________________________
6.2 UNIX Server
Description
UNIX server consist of computers running on the UNIX
operating system and offering services (as servers) for other
IT systems within a network.
In this chapter, the threats and safeguards described are
specifically for UNIX servers. Additional threats and
safeguards applying to server-supported networks can be
found in chapter 6.1.
Threat Scenario
The following typical threats (T) are assumed as regards IT baseline protection of a UNIX server:
Organisational Shortcomings:
- T 2.15 Loss of confidentiality of sensitive data in the UNIX system
- T 2.23 Security flaws involved in integrating DOS PCs into a server-based network
- T 2.65 Complexity of the SAMBA configuration
Human Error:
- T 3.10 Incorrect export of file systems under UNIX
- T 3.11 Improper configuration of sendmail
Technical Failure:
- T 4.11 Lack of authentication possibilities between NIS Server and NIS Client
- T 4.12 Lack of authentication possibilities between X Server and X Client
Deliberate Acts:
- T 5.40 Monitoring rooms using computers equipped with microphones
- T 5.41 Misuse of a UNIX system with the help of uucp
- T 5.89 Hijacking of network connections
Recommended Countermeasures (S)
To implement IT baseline protection, selection of the required packages of safeguards ("modules"), as
described in Sections 2.3 and 2.4, is recommended.
In the following, the safeguard package for "UNIX servers" is set out.
Some measures refer to the configuration of the various servers; other measures will have to be
implemented by servers and clients in order to become effective. For any clients connected, the
safeguards outlined in chapter 5 must be implemented.
It is advisable to install the server in a separate server room. The appropriate measures are described in
Chapter 4.3.2. If no server room is a available, a server cabinet should be used (c.f. Chapter 4.4).
In addition, the following measures will have to be taken:
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000