Solaris CX-310-301 Bedienungsanleitung Seite 28
- Seite / 77
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Solaris 9 Security CX-310-301 27
*.err;kern.notice;auth.notice /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages
*.alert;kern.err;daemon.err operator
*.alert root
*.emerg *
# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog,
@loghost)
mail.debug ifdef(`LOGHOST', /var/log/syslog,
@loghost)
#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
)
Note the following about the output above:
¾ Multiple facilities and priorities can be assigned to a single entry
¾ The action column on the right hand side can be to write to a file, a device, or to send email to
specified users
¾ Conditions can also be applied to entries, for example, only if LOGHOST is defined (a loghost
entry is present in the /etc/inet/hosts file)
¾ The last six lines define actions to take if LOGHOST is not defined, so that messages are still
written locally if this situation is encountered
¾ By default, the auth.notice entry is commented out. It is a good idea to log all authorization
messages to the file /var/log/authlog, because it makes it easier to spot important login failure
messages
Configuring syslog to Log Centrally
A professional attacker will try to cover his/her tracks by modifying the system logs so that there is no
evidence that an attack even took place. This is done quite easily if the attacker has gained privileged
- Introduction 2
- Exam Time Tips 2
- Additional Resources 3
- Operating System 11
- Good Security 12
- Security Awareness 13
- Security Policies 13
- Policies and Procedures 13
- Physical Security 14
- Platform Security 14
- Network Security 14
- Insecure Systems 15
- Application Security 15
- Confidentiality 18
- Integrity 18
- Non-repudiation 18
- Attackers 18
- Information Gathering 19
- Gathering Techniques 20
- Evaluation Standards 22
- Invalidating a Certification 23
- System Log Files 25
- /var/adm/messages 25
- SU logging 26
- Using Multiple Files 29
- Process Accounting 30
- Overview 30
- Enabling BSM 31
- Generating an Audit 32
- Interpreting the Results 33
- The audit command 33
- Audit Log Files 33
- Disabling BSM 34
- Device Management 34
- Security Attacks 36
- Preventing DoS Attacks 37
- How DoS Attacks Execute 37
- Privilege Escalation Attacks 38
- Types of Attack 38
- Detecting Attacks 39
- Using File Listings 41
- Using Checksums 41
- Using File Digests 41
- Using the find Command 42
- Using Tripwire 43
- Kernel Trust and OpenBoot 46
- OpenBoot 46
- User Account Protection 47
- Expiring Accounts 47
- Restricting root Logins 49
- Dormant Accounts 49
- Protecting Passwords 50
- Users with No Password 51
- Password Aging 51
- Password Cracking Tools 52
- Non-Login Accounts 54
- User Security with SU 54
- Role Based Access Control 55
- Creating A Profile 56
- Creating a Role 56
- Assigning a Role to a User 56
- Logging in to a Role 57
- Listing Roles for a User 57
- Listing Profiles for a Role 57
- Permissions 57
- Directories and Files 57
- Access Control Lists (ACL) 59
- Identifying an ACL 59
- Setting ACLs 60
- Modifying an ACL 60
- Deleting an ACL 61
- PAM and Kerberos 61
- Add a new PAM Module 62
- Kerberos / SEAM 63
- How Kerberos Works 63
- Limitations of Kerberos 63
- Host and Network Prevention 64
- Network Intrusion 65
- Intrusion Detection 65
- Restricting Network Services 65
- Inetd Services 65
- Run Control Services 66
- Host Hardening 66
- Solaris Security Toolkit 67
- Installing SST 68
- SUNWjass-4.0.1.pkg.Z 68
- Configuring SST 68
- Running SST 69
- Updating an SST Run 70
- Undoing SST 70
- Verifying SST 71
- Encryption 72
- Logging 74
- Validating TCP Wrappers 74
- Cryptology 75
- Terminology 75
- Solaris Secure Shell 75
- Configuring the Client 76
- Configuring the Server 76
- Starting and Stopping SSHD 76
- Generating a Client Key 77
- Using ssh 77
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.098 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern