Securing and Optimizing Linux RedHat Edition phần 1 pptx

... bison -1. 28 -1 etcskel-2.0 -1 file-3.27-3 findutils-4 .1- 32 gawk-3.0.4 -1 cdecl-2.5-9 gdbm -1. 8.0-2 autoconf-2 .13 -5 glib -1. 2.5 -1 gmp-2.0.2 -10 cpp -1. 1.2-24 gpm -1. 17.9-3 groff -1. 11a-9 gzip -1. 2.4 -14 ... readline-2.2 .1- 5 glibc-devel-2 .1. 2 -11 rootfiles-5.2-5 rpm-3.0.3-2 sash-3.3 -1 make-3.77-6 shapecfg-2.2 .12 -2 slang -1. 2.2-4 slocate-2.0-3 stat -1. 5 -11 sysklogd -1. 3. 31- 12 tar -1. 13 .11 -1 tcp_wrappers-7.6-9 ... setup-2.0.5 -1 filesystem -1. 3.5 -1 basesystem-6.0-4 ldconfig -1. 9.5 -15 glibc-2 .1. 2 -11 shadow-utils -19 990827-2 mktemp -1. 5 -1 termcap-9 .12 .6 -15 libtermcap-2.0.8 -18 bash -1. 14.7 -16 MAKEDEV-2.5-2 SysVinit-2.77-2...

... 208 .16 4 .18 6 .1 PING 208 .16 4 .18 6 .1 (208 .16 4 .18 6 .1) from 208 .16 4 .18 6.2 : 56 data bytes 64 bytes from 208 .16 4 .18 6.2: icmp_seq=0 ttl =12 8 time =1. 0 ms 64 bytes from 208 .16 4 .18 6.2: icmp_seq =1 ttl =12 8 ... icmp_seq =1 ttl =12 8 time =1. 0 ms 64 bytes from 208 .16 4 .18 6.2: icmp_seq=2 ttl =12 8 time =1. 0 ms 64 bytes from 208 .16 4 .18 6.2: icmp_seq=3 ttl =12 8 time =1. 0 ms 208 .16 4 .18 6 .1 ping statistics 4 packets ... 0 localhost :10 33 localhost :10 32 ESTABLISHED tcp 0 0 localhost :10 30 localhost :10 31 ESTABLISHED tcp 0 0 localhost :10 31 localhost :10 30 ESTABLISHED tcp 0 0 localhost :10 28 localhost :10 29 ESTABLISHED...

... Feb 7 11 :25 deep-Sat.tar -rw-r r 1 root root 11 923 013 Feb 7 11 :24 deep-Sun.tar -rw-r r 1 root root 5643 Feb 7 11 :25 deep-Thu.tar -rw-r r 1 root root 315 2 Feb 7 11 :25 deep-Tue.tar -rw-r r 1 root ... total 22 217 -rw-r r 1 root root 10 7 312 88 Feb 7 11 :24 deep-01Feb.tar -rw-r r 1 root root 6879 Feb 7 11 :24 deep-Fri.tar -rw-r r 1 root root 28 31 Feb 7 11 :24 deep-Mon.tar -rw-r r 1 root root ... tapes 1 0 n/a 1 2 3 1 1, 2 3 2 2 1, 3 4 5 1 1, 2, 4 5 4 2 1, 2, 5 Backup and Restore Procedures 2 CHAPTER 2 Copyright 19 99 - 2000 Gerhard Mourani, Open Network Architecture ® and OpenDocs...

... *-r-xr-sr-x 1 root tty 6788 Sep 6 18 :17 /usr/bin/wall -rwsr-xr-x 1 root root 3 315 2 Aug 16 16 :35 /usr/bin/at -rwxr-sr-x 1 root man 34656 Sep 13 20:26 /usr/bin/man -r-s x x 1 root root 22 312 Sep 25 11 :52 ... 14 024 Sep 9 01: 01 /usr/bin/chfn *-rws x x 1 root root 13 768 Sep 9 01: 01 /usr/bin/chsh *-rws x x 1 root root 5576 Sep 9 01: 01 /usr/bin/newgrp *-rwxr-sr-x 1 root tty 8328 Sep 9 01: 01 /usr/bin/write ... -rwsr-xr-x 1 root root 218 16 Sep 10 16 :03 /usr/bin/crontab *-rwsr-xr-x 1 root root 5896 Nov 23 21: 59 /usr/sbin/usernetctl *-rwsr-xr-x 1 root bin 16 488 Jul 2 10 : 21 /usr/sbin/traceroute -rwxr-sr-x 1...

... key is: 10 24 37 14 937757 511 2 519 555336 911 20 318 477293862290049394 715 136 511 14580 610 88700 017 643784946768 31 29757784 315 85322723 612 0 610 062 314 6044053648 718 43677484233240 919 418 48098890786099 717 52444697758964 712 7757030728779973708569993 017 04 314 156353633306888894403 817 84 616 0859248384459020 215 410 275690305584653406336563558489976540 218 1 ... -l #12 6: 011 111 10 - /3 includes 12 7 - need 11 2 -12 6 spelled out ipchains -A input -i $EXTERNAL_INTERFACE -s 11 2.0.0.0/8 -j DENY -l ipchains -A input -i $EXTERNAL_INTERFACE -s 11 3.0.0.0/8 ... input -i $EXTERNAL_INTERFACE -s 12 6.0.0.0/8 -j DENY -l # 217 : 11 011 0 01 - /5 includes 216 - need 217 - 219 spelled out ipchains -A input -i $EXTERNAL_INTERFACE -s 217 .0.0.0/8 -j DENY -l ipchains...

... "/home/admin/.ssh2/id_dsa _10 24_a" with comment " ;10 24-bit dsa, admin@deep.openna.com, Tue Oct 19 19 99 14 : 31: 40 -0400": admin's password: Last login: Tue Oct 19 19 99 18 :13 :00 -0400 from ... CHAPTER 2 Copyright 19 99 - 2000 Gerhard Mourani, Open Network Architecture ® and OpenDocs Publishing 216 Linux Tripwire ASR 1. 3 .1 Overview Tripwire ASR 1. 3 .1 is the “Academic Source ... { type master; file "db .12 7.0.0"; }; In the “forwarders” line, 208 .16 4 .18 6 .1 and 208 .16 4 .18 6.2 are the IP addresses of your Primary (Master) and Secondary (Slave) DNS server....

... "db.openna"; masters { 208 .16 4 .18 6 .1; }; }; zone " ;18 6 .16 4.208.in-addr.arpa" in { type slave; file "db.208 .16 4 .18 6"; masters { 208 .16 4 .18 6 .1; }; Server Software (BIND/DNS ... praliases]# cd [root@deep sendmail-8 .10 .1] # ln -fs /usr/sbin/sendmail /usr/lib/sendmail [root@deep sendmail-8 .10 .1] # chmod 511 /usr/sbin/smrsh [root@deep sendmail-8 .10 .1] # install -d -m 755 /var/spool/mqueue ... "/var/named"; fetch-glue no; recursion no; allow-query { 208 .16 4 .18 6/24; 12 7.0.0/8; }; allow-transfer { 208 .16 4 .18 6 .1; }; transfer-format many-answers; }; // These files are not...

... leftrsasigkey=0x 010 395daee1be05f3038ae529ef2668afd79f5ff1b16203c9ceaef801cea9cb74bcfb51a6ecc08890d3eb4b5470c0fc35465c8ba2ce9d 114 5ff07b5427e04cf4a38ef98a7f29edcb4d7689f2da7a6 919 9e4 318 b4c8d0ea25d33e4f08 418 6a2a54f4b4cec12cca1a5deac3b19d561c16a76bab772888f1fd71aa08f08502a141b 611 f rightrsasigkey=0x 010 37631b81f00d5e6f888c542d44dbb784cd3646f084ed96f942d341c7c4686cbd405b805dc728f8697475f11e8b1dd79755 015 3a3f0d4ff0f2b274b70a2ebc88f073748d1c1c8821dc6be6a2f0064f3be7f8e4549f8ab9af64944f829b 014 788dd202cf7d2e320cab666f5e7a197e64efe0bfee94e92ce4dad82d5230c57b89edf ... 0x83cda11b0756e935be328fcebad5f6b36573bcf927a80bf2328facb6c0697c9eff2a9976cade79ea3ec0be1674fff4 512 e8d8e2f29c2888524d 818 df9f5d02ff Exponent2: 0x 815 c66a9f1fefba44b6c2b124627ef94b9 411 f4f9e065c7 618 fb96dc9da05f03ec83e8ec055d7c42ced4ca2e75f0f3231f50 610 86ccd176f37f9e81da1cf8ceb ... 0x63e74967eaea2025c98c69f6ef0753a6a3ff676 415 7dbdf1f50 013 4 713 24dd352366f48805b0b37f232384b2b52ce2ee85d173468b62eaa052381a9588a 317 b3a1324d01a531a41fa7add6c5efbdd88f4 718 feed2bc0246be924e81bb90f03e49ceedf7af0dd48f06f265b 519 600bd082c6e6bd27eaa71cc0288df1ecc3b062b...

... /usr/man/man1/createdb .1 > /usr/man/man1/createuser .1 > /usr/man/man1/destroydb .1 > /usr/man/man1/destroyuser .1 > /usr/man/man1/ecpg .1 > /usr/man/man1/initdb .1 > /usr/man/man1/initlocation .1 ... /usr/man/man1/initlocation .1 > /usr/man/man1/ipcclean .1 > /usr/man/man1/pg_dump .1 > /usr/man/man1/pg_dumpall .1 > /usr/man/man1/pg_passwd .1 > /usr/man/man1/pg_upgrade .1 > /usr/man/man1/postgres .1 ... /usr/man/man1/ud .1 > /usr/man/man1/ldapdelete .1 > /usr/man/man1/ldapmodify .1 > /usr/man/man1/ldapadd .1 > /usr/man/man1/ldapmodrdn .1 > /usr/man/man1/ldappasswd .1 > /usr/man/man1/ldapsearch.1...

... bcast bind interfaces only = True interfaces = eth0 19 2 .16 8 .1. 1 hosts deny = ALL hosts allow = 19 2 .16 8 .1. 4 12 7.0.0 .1 debug level = 1 create mask = 0644 directory mask = 0755 level2 ... (0x40 016 000) libm.so.6 => /lib/libm.so.6 (0x4001f000) libdl.so.2 => /lib/libdl.so.2 (0x4003b000) libcrypt.so .1 => /lib/libcrypt.so .1 (0x4003e000) libnsl.so .1 => /lib/libnsl.so .1 (0x4006b000) ... Step 1 Copy horde -1. 2.0-pre 11. tar.gz to your web server’s DocumentRoot (/home/httpd/), untar it and move the directory from “horde-version” to “horde” by executing the following commands:...