Solaris CX-310-301 Manual de usuario Pagina 45
- Pagina / 77
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Solaris 9 Security CX-310-301 44
Include Files 35 0 0 0
Man Pages 35 0 0 0
Administrative Binaries 100 0 0 0
* System configuration files 100 1 0 1
System Directories 100 0 0 0
Total objects scanned: 28489
Total violations found: 2
====================================================
Object Detail:
====================================================
-----------------------------------------------------------------------
Section: Unix File System
-----------------------------------------------------------------------
-----------------------------------------------------------------------
Rule Name: System configuration files (/etc)
Severity Level: 100
-----------------------------------------------------------------------
----------------------------------------
Added Objects: 1
----------------------------------------
Added object name: /etc/inet/hosts.JP
----------------------------------------
Modified Objects: 1
----------------------------------------
Modified object name: /etc/passwd
Modify Time Expected Tue, 13 Apr 2004 11:06:04 +0100
* Observed Tue, 13 Apr 2004 16:53:25 +0100
Change Time Expected Tue, 13 Apr 2004 11:06:04 +0100
* Observed Tue, 13 Apr 2004 16:53:25 +0100
====================================================
Error Report:
====================================================
No Errors
-----------------------------------------------------------------------
*** End of report ***
Report generated by:
Tripwire(R) for Servers version 4.1.0.210 for Solaris (SPARC) Operating
Systems
Tripwire is a registered trademark of Tripwire, Inc. All rights
reserved.
Note that the report displayed information on both of the forced changes made immediately prior to
running the check.
- Introduction 2
- Exam Time Tips 2
- Additional Resources 3
- Operating System 11
- Good Security 12
- Security Awareness 13
- Security Policies 13
- Policies and Procedures 13
- Physical Security 14
- Platform Security 14
- Network Security 14
- Insecure Systems 15
- Application Security 15
- Confidentiality 18
- Integrity 18
- Non-repudiation 18
- Attackers 18
- Information Gathering 19
- Gathering Techniques 20
- Evaluation Standards 22
- Invalidating a Certification 23
- System Log Files 25
- /var/adm/messages 25
- SU logging 26
- Using Multiple Files 29
- Process Accounting 30
- Overview 30
- Enabling BSM 31
- Generating an Audit 32
- Interpreting the Results 33
- The audit command 33
- Audit Log Files 33
- Disabling BSM 34
- Device Management 34
- Security Attacks 36
- Preventing DoS Attacks 37
- How DoS Attacks Execute 37
- Privilege Escalation Attacks 38
- Types of Attack 38
- Detecting Attacks 39
- Using File Listings 41
- Using Checksums 41
- Using File Digests 41
- Using the find Command 42
- Using Tripwire 43
- Kernel Trust and OpenBoot 46
- OpenBoot 46
- User Account Protection 47
- Expiring Accounts 47
- Restricting root Logins 49
- Dormant Accounts 49
- Protecting Passwords 50
- Users with No Password 51
- Password Aging 51
- Password Cracking Tools 52
- Non-Login Accounts 54
- User Security with SU 54
- Role Based Access Control 55
- Creating A Profile 56
- Creating a Role 56
- Assigning a Role to a User 56
- Logging in to a Role 57
- Listing Roles for a User 57
- Listing Profiles for a Role 57
- Permissions 57
- Directories and Files 57
- Access Control Lists (ACL) 59
- Identifying an ACL 59
- Setting ACLs 60
- Modifying an ACL 60
- Deleting an ACL 61
- PAM and Kerberos 61
- Add a new PAM Module 62
- Kerberos / SEAM 63
- How Kerberos Works 63
- Limitations of Kerberos 63
- Host and Network Prevention 64
- Network Intrusion 65
- Intrusion Detection 65
- Restricting Network Services 65
- Inetd Services 65
- Run Control Services 66
- Host Hardening 66
- Solaris Security Toolkit 67
- Installing SST 68
- SUNWjass-4.0.1.pkg.Z 68
- Configuring SST 68
- Running SST 69
- Updating an SST Run 70
- Undoing SST 70
- Verifying SST 71
- Encryption 72
- Logging 74
- Validating TCP Wrappers 74
- Cryptology 75
- Terminology 75
- Solaris Secure Shell 75
- Configuring the Client 76
- Configuring the Server 76
- Starting and Stopping SSHD 76
- Generating a Client Key 77
- Using ssh 77
© 2020, manymanuals.es. Todos los derechos reservados | 0.078 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales