🚀 go-pugleaf

horde@reed.edu (Mr. Heiji Horde) writes:

>Maximum security? That's easy. Don't take it out of the box. :) :) :)

>For something slightly less secure, take it out of the box, set it up,
>  but don't plug it into the network. :) :) :)

  It's very easy to ridicule somebody who wants to learn something. I
 think its better (and maybe more difficult) to give useful information
 than post some cliche....

  There are lots of places where you can find information about security.

 -- See Alex's monthly FAQ posting in this newsgroup.
 -- Another good place to look is cert.org. There are lots of interesting
    things you can ftp from there, e.g. old CERT advisories.
 -- There are some PD papers about security eg. the excellent security-doc
    by David Curry. Available from ftp.uu.net in the /doc/security directory.
    You can find more interesting things there.
 -- Books. See the FAQ. A good one is "Practical Unix Security" by Garfinkel
    andd Spafford.
 -- Contact your vendor for bugfixes. Some vendors make them available
    through anonymous ftp. If you have Suns, look at ftp.uu.net in the
    sun-fixes or sun-dist directory (/vendor/sun/...).

  Another tip I can give you is ...., read the (friendly) manual pages :-)
 Look what deamons are running on your system (using ps(1)). Also look at
 the ones that are started by inetd. Take a day to just read the manual
 pages that describe these daemons. Also read the ones in the SEE ALSO
 section. Now you should know all configuration files associated  with
 these daemons. Check them all. There are lots of them, and they are all
 important :-)  /etc/exports, /var/yp/securenets, /etc/shells, /etc/ftpusers
 /etc/netgroup, /etc/hosts.equiv to just name a few. Also look at all the
 possible flags of those daemons. Lots of them are important. -s flag of
 in.tftpd, -s flag of ypbind, the -n flag of rpc.mountd (do not use it !), 
 etc.
  Reading all those manual pages may take some time, but it will pay off.

  If you have Sun's, this might be another tip. Look at /etc/rc.local.
 A couple of times there are choices in starting up daemons (rpc.mountd,
 nfsd, etc..), depending on the existence of /etc/security. If you don't
 have the C2 security package installed, this directory does not exist.
  In this case those daemons are started up in a less secure mode.
 Change the checks in /etc/rc.local so the more secure mode is chosen.

    Hope this helps,

                 Henk.

--
Henk Smit                               Vrije Universiteit     Amsterdam
Internet: henk@cs.vu.nl                 Phone:    +31 20 548 6218