Résumé
The total HP-UX 11i security reference and implementation
guide
3. Disks, File Systems, and Permissions.
4. System Access.
5. Multi-Host Environments.
6. Distributing root Privileges.
7. ServiceControl Manager.
8. Internet Daemon Services.
9. Kerberos.
10. IPSec/9000.
11. Monitoring System Activity.
12. Monitoring System Changes.
13. NetAction.
14. Building a Bastion Host by Kevin Steves.
15. Checklist, Security Patches, and Miscellaneous Topics.
Index.
- Thorough coverage of HP-UX 11i's powerful new host security features
- Monitoring system access, activity, and change
- 10 ways to gain root access-what every system administrator needs to know
- Implementing Kerberos, PAM, IPSec, SCM, SCR, and IDS/9000
No other book offers this much HP-UX-specific security coverage! In this authoritative, comprehensive administrator's guide, leading HP-UX consultant Chris Wong covers every key aspect of HP-UX host security. Wong introduces "hot-off-the-press" HP-UX 11i capabilities and techniques for keeping mission-critical systems safe-even when firewalls fail and backdoors are discovered. Coverage includes:
- Understanding and addressing your key vulnerabilities
- 10 ways to gain root access-and what to do about them
- Managing users, groups, files, and directories from a security perspective
- Controlling access to the system and securing key services
- Safely distributing root privileges
- Using HP-UX software to enhance system security: SCM, SCR, Restricted SAM, IDS/9000, and the Security Patch Check Tool
- Security techniques for the multi-host environment: Berkeley programs, SSH, NIS, NIS+, LDAP, Kerberos, PAM, and IPSec/9000
- Tools and techniques for monitoring system activity and change
- Using public-domain programs: SARA, Tripwire, sudo, and logrotate
HP-UX 11i Security is the essential security resource for every HP-UX system administrator, from novice to advanced level—and for every consultant, manager,specialist, and e-business professional responsible for protecting HP-UX applications and data.
Table of Contents
Foreword.
Preface.
1. Ready or Not, Here I Come! @AHEADS= Attacks. What Is
Needed to Compromise a System? Ten Ways To Become root.
What Can Happen When the System Is Compromised? Protection.
A Letter to the CIO. Policies.
2. Passwords, Users, and Groups.
The password File. The
Group File. Tools. Security Risk of the /etc/passwd File.
Trusted System. Trusted Systems and Tools. Password
Policies. What Makes a Good Password? Passwords and
Multiple Hosts. User Management. Group Maintenance. Writing
Scripts. The /etc/default/security File.
3. Disks, File Systems, and Permissions.
Disks. Logical Volume
Manager. VERITAS Volume Manager. File Systems. The mount
Command. File Permissions. Access Control Lists. The chatr
Command and the Executable Stack. Quotas. The NAS and
SAN.
4. System Access.
The Internet Daemon.
Modems. The /etc/dialups and /etc/d_passwd Files. Secure
Web Console. Physical Access and Boot Authentication.
Guardian Service Processor. Restrictions for Users.
5. Multi-Host Environments.
The “r”
Commands. SSH. NIS. NIS+. LDAP. DNS and BIND. DHCP. NFS.
CIFS/9000.
6. Distributing root Privileges.
SUID/SGID Scripts and
Programs. Restricted SAM. Sudo. ServiceControl Manager.
OpenView. Comparison of Tools.
7. ServiceControl Manager.
Installation of the
Central Management Server. AddingNodes to the SCM Cluster.
ServiceControl Manager Graphical User Interface. Adding
Users. Role Assignments. Tools. Argument Limitations. Web
Interface. SCM Log Files. SCM and Security. Why Use
SCM?
8. Internet Daemon Services.
The Internet Daemon
Startup. /etc/inetd.conf File. /etc/services File.
/etc/protocols File. /var/adm/inetd.sec File. Understanding
Socket Connections. Tcpwrappers. Telnet. File Transfer
Protocol. Anonymous FTP. Trivial FTP. Finger. Other
Internet Services. Running Other Services from inetd.
9. Kerberos.
What is Kerberos Doing?
Installing Kerberos. Configuring Kerberos. Kerberos
Utilities. Kerberos and HP-UX 10.20. Kerberos and rlogin.
Kerberos and the -P Option. More about PAM.
10. IPSec/9000.
IPSec Configuration. What
Is Happening? IPSec Tunnel Mode. Using IPSec/9000 as a
Firewall. IP Number and Mask. Managing Keys on
IPSec/9000.
11. Monitoring System Activity.
syslog Daemon. The syslog
File. The btmp File. The wtmp File. The /etc/utmp File. The
sulog File. The rc.log File. Shell History. Open Source Log
Tools and Utilities. Log Rotation. Auditing. Accounting.
Utilizing Performance Data. Monitoring System Resources.
Managing System Resources.
12. Monitoring System Changes.
System Configuration
Repository. Tripwire.
13. NetAction.
HP VirtualVault. Extranet
VPN. HP Speedcard. HP PKI. Intrusion Detection
System/9000.
14. Building a Bastion Host by Kevin Steves.
What Is a Bastion Host?
Methodology. Sample Blueprint.
15. Checklist, Security Patches, and Miscellaneous Topics.
The Checklist. The HP-UX
Security Patch Check Tool. The HP-UX Security Book Web
Site. Continuing Your Knowledge. Mail. Protecting Your
System Against “Ten Ways to Become root” . The
Bastille Hardening System. IPFilter/9000.
Index.
Caractéristiques techniques
| PAPIER | |
| Éditeur(s) | Prentice Hall |
| Auteur(s) | Chris Wrong |
| Parution | 06/11/2001 |
| Nb. de pages | 458 |
| Format | 17,8 x 23,5 |
| Couverture | Broché |
| Poids | 920g |
| Intérieur | Noir et Blanc |
| EAN13 | 9780130330628 |
Avantages Eyrolles.com
Livraison à partir de 0,01 € en France métropolitaine
Paiement en ligne SÉCURISÉ
Livraison dans le monde
Retour sous 15 jours
+ d'un million et demi de livres disponibles
Consultez aussi
- Les meilleures ventes en Graphisme & Photo
- Les meilleures ventes en Informatique
- Les meilleures ventes en Construction
- Les meilleures ventes en Entreprise & Droit
- Les meilleures ventes en Sciences
- Les meilleures ventes en Littérature
- Les meilleures ventes en Arts & Loisirs
- Les meilleures ventes en Vie pratique
- Les meilleures ventes en Voyage et Tourisme
- Les meilleures ventes en BD et Jeunesse
