Security Checklist

[Dimitris Kontoudis]

Kalhmera sto koino ths listas,

kai xairetismata se autous pou me thymountai
apo palia (ITE,SGI).

O logos pou grafw einai oti psaxnw, ean yparxei,
gia kapoio security checklist gia Linux systhmata.

Ekshgoumai: O telikos skopos auths ths kinhshs einai
na mporw na sthsw ena Linux systhma kai na kanw
merikes epembaseis wste na diorthwthoun kapoia
problhmata asfaleias (profanh kai mh).

Shmeia pou me endiaferoun einai:

1) IP filtering (kernel level ? yparxei ipfilterd h'
   kati tetoio ?)
   IP forwarding (ginetai by default apo ton kernel ?)
2) Diktyakes yphresies/system yphresies
   (profanws yparxei /etc/services. Yparxoun kapoia
   entries pou PREPEI na einai energa opwsdhpote ?
   Anaferomai se entries pou apaitei to systhma kai
   oxi se ftp/telnet kai ta sxetika...)
3) Kapou eida oti yparxei entolh ''chkconfig''
   (antistoixh tou IRIX). Kai edw, ti mporoume na
   bgaloume off kai ti PREPEI na einai ON logw systhmatos ?
4) Rytmiseis gia thn symperifora tou login,su
5) Rytmiseis gia logging/auditing
6) Ektelesima/alla-files pou egkathistantai by default
   kai exoun problhmata asfaleias, opote kalo einai na
   bgoun/anabatmistoun/rythmistoun ktl.
7) Rytmiseis asfaleias tou X11. Na ypothesw oti isxyoun
   ta standard peri rytmisewn tou XDM (Xaccess, chooser ktl.) ?
8) alla .....

Opws katalabainetai thelw na katalhksw me mia lista
entelws praktikh pou na kanei douleia.

Brhka liga pragmata sta arxeia ths listas (kyriws to
thread ''Problhma security'') alla dysthxws
kalyptoun sto elaxisto ta parapanw.

Eida, epishs, to Security-HOWTO. Se ti bathmo thewreite
oti me kalyptei sta parapanw. Me alla logia loso xrhsimo
einai apo praktikhs apopsews?

Bebaia, tha htan endiaferousa mia koubenta sygkritikh
sxetika me to security diaforwn flavor tou Unix opws
auta diatithentai default sto koino, alla paei makria
h balitsa (to mpaoulo kalytera...)

Auta ta liga. Ean labw kamoia proswpikh apanthsh
tha ta mazepsw kai tha steilw thn souma sthn lista
me prwth eukairia.

Mporeite na steilete kai flames, etsi xabales na ginetai !.

Na 'ste kala,

Dimitris.

--
Dimitris Kontoudis

  P.O. Box 19071,    |   email: kontoudis at hotmail.com
  Koukaki 11701,     |   http://w4u.eexi.gr/~kontoudi
  Athens, Greece.



______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr/archives
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users at hellug.gr
====================================================================