Linux-security.pdf

(122 KB) Pobierz
Securing Linux
Presented by: Darren Mobley
Introduction
●
Hello, My name is Darren
Have been supporting and developing cPan-
el for over 4 years.
We'll be covering some steps to take to help
protect servers from common attacks
●
●
Main Topics
●
Local security measures
Protecting against common remote attacks
What to do after an attack, cleanup
Having and following a Security Policy
●
●
●
Local Attacks:
Passwords
Make sure existing users have decent pass-
words
–
–
–
Crack your own users' passwords using JTR,
crack
Preferably run the crackers on a dedicated ma-
chine, not the server, due to load
Any passwords that crack in under a few hours
need to have shell access removed until the
password can be changed. This should be writ-
ten into TOS/AUP which is “signed” by the client.
Local Attacks:
xinetd
●
Turning off unneeded daemons in xinetd
–
–
Check /etc/xinetd.conf
Check /etc/xinetd.d/*
●
●
Common ones are cupsd (printing daemon)
nfs/statd (unless using nfs mounted FS)

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin