پرش به


نکاتی برای ایمن سازی سیستم های لینوکس

Started by Y.P.Y, Aug 23 2009 07:10 PM

1 reply to this topic

#1 Y.P.Y

  • عضو انجمن
  • 6 ارسال ها:

ارسالی 23 August 2009 - 07:10 PM

سلام،
در این مبحث با نکات و اصول مهم برای ایمن سازی سیستم های لینوکس آشنا می شوید:
BIOS
همیشه یک کلمه رمز برای BIOS خود تعریف کنید و امکان بوت شدن از طریق Floppy و CD-ROM/DVD-ROM رو غیرفعال کنید.
این روش سیستم رو برای دستکاری تنظیمات BIOS از افراد غیر مجاز محافظت می کنه.

SSH/Secure shell
این پروتکل بصورت پیشفرض فعال هستش.
با کمک فایل sshd_config قسمت Protocol رو به 2 تغییر بدید و PermitRootLogin رو هم به No تغییر بدید. بعد SSHD رو Restart کنید.
همچنین پورت SSH رو هم تغییر بدید.

Telnet
این سرویس بصورت پیشفرض(معمولاً) فعال هستش.
با کمک xinetd.d/telnet قسمت disable رو به Yes تغییر بدید.

ProFTP
ورودی Root در این سرویس فعال هستش.
با کمک فایل proftpd.conf قسمت RootLogin رو Off کنید. بعد ProFTP رو Restart کنید.

History
خرابکارها بعد از نفوذ/خرابکاری معمولاً ردپا/Track ها رو می پوشونن(از بین میبرن). برای جلوگیری(50%) از این کار دستورات زیر رو برای فایل bash_history اعمال کنید:
chattr +a .bash_history 
chattr +i .bash_history
هم چنین می توانید دسترسی Read only بهش بدید+گروه بندی.

حسابها و گروههای ویژه/misc. رو هم حذف کنید: game, news, lp, uucp, halt...
userdel xxxxx
groupdel yyyyy

جهت ایمنی بیشتر فایلها: تغییر دسترسی:
chmod 700 /bin/ping 
chmod 700 /usr/bin/finger
 chmod 700 /usr/bin/who 
chmod 700 /usr/bin/w 
chmod 700 /usr/bin/locate 
chmod 700 /usr/bin/whereis
 chmod 700 /sbin/ifconfig 
chmod 700 /usr/bin/pico 
chmod 700 /usr/bin/vi 
chmod 700 /usr/bin/which
 chmod 700 /usr/bin/gcc
 chmod 700 /usr/bin/make
 chmod 700 /bin/rpm

غیر فعال کردن سرویس هایی که استفاده نمی شوند.

بستن پورت هایی که استفاده نمی شوند.

حذف RPM هایی که استفاده نمی شوند.

غیر فعال کردن توابع خطرناک زبانهای برنامه نویسی:
PHP: symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,passthru,escapeshellarg, escapeshellcmd


نصب و پیکربندی دیوار های آتشین:
http://www.r-fx.ca/d...ads/apf-current

و در آخر نصب و پیکربندی Detector حملات Brute force:
http://www.r-fx.ca/d...ds/bfd-current.

موفق باشید.

#2 Guest_baboyes_*

  • Guests

ارسالی 10 August 2010 - 01:16 PM

This is an episode from the Three Kingdoms. Zhou Yu ordered Zhuge Liang to manufacture 100，000 arrows within ten days. Zhuge said，
replica sunglasses,
“Give me three days.”]replica sunglasses He also signed a pledge placing himself liable for punishment should he fail to complete the order. Zhou Yu ridiculed that Zhuge Liang was looking for self-destruction. On the one hand， Zhou Yu ordered his troops not to provide Zhuge Liang with materials to make the arrows. He also sent Lu Su to spy on him to find out what was going on. In fact， Zhuge Liang had already realized that this was a plot by room， Zhuge said to Lu Su， “Save me please.” He asked Lu Su to lend him 20boats， each lined with straw-made scarecrows and manned by 30 soldiers. He requested that Lu Su not tell Zhou Yu what was happening.
age of conan gold,
　　When Lu Su came again to see Zhuge Liang，age of conan gold he did not find anything unusual. Nothing happened on the second day either. In the small hours of the third day， Zhuge Liang invited Lu Su for a boat ride. The 20 boats were tied together with strong ropes. Zhuge's fleet sailed toward the camp of Cao Cao. A thick mist had spread over the surface of the river. People could hardly see each other on the river. When Zhuge's fleet got close to the Cao camp before dawn， Zhuge Liang ordered his soldiers to shout and beat drums to fake an attack. Zhuge and Lu Su simply sat inside one of the boats and drank wines to enjoy themselves.
age of conan power leveling,
　　As soon as the Cao camp heard the shouting and drum beating，age of conan power leveling they mistook it for a surprise attack by the Zhou Yu camp. Since they could see nobody on the river， they gathered 3，000 bow men and ordered them to shoot arrows towards where the shouting and drum beating came. The front of the scarecrows was quickly shot full of arrows. After a while， Zhuge Liang had his fleet turned around to expose the other side of the scarecrows. When this side was also shot full of arrows， the day broke. Zhuge Liang ordered his soldiers to return to their base port. The soldiers shouted， “Thank you， Cao Cao， for your arrows.” After they got back to their camp， they collected more than 100，000 arrows from the scarecrows.
aion gold,
This is a story from Three Kingdoms. Zhou Yu， chief commander of Wu，aion gold Was talented and proficient in strategies and tactics but was narrow-minded and intolerant of others. He discussed with Zhuge Liang plans to conquer Cao Cao while simultaneously pondering how to murder Zhuge Liang. Zhou Yu had been wounded by a poisonous arrow when he was attacking Nanjun. Zhou's wound burst when he learned that Zhuge Liang had already taken over Nanjun， Jingzhou and Xiangyang. Zhou Yu， with a healing wound， racked his brains for ways to capture Jingzhou.
maple story mesos,
His strategies，maple story mesos however， were all seen through by Zhuge Liang who even sent him a mocking message. Zhou Yu was vexed again. “Since You(the Heaven) made me， Zhou Yu， why did You make Zhuge Liang too?” Zhou Yu grudgingly asked before he took his last breath. Learning of Zhou Yu's demise， Zhuge Liang decided to go to pay respects.
world of warcraft power leveling,
Fearing that Zhuge Liang might be murdered，world of warcraft power leveling Liu Bei send Zhao Yun with 500warriors to protect him. Before Zhou Yu's coffin， Zhuge Liang personally offered libation， kneeled on the ground， and read his eulogy. Tears of grief gushed forth from Zhuge Liang. All the generals from Wu were moved. When Lu Su saw Zhuge Liang was in such grievance， he said to himself， “Zhou Liang was narrow-minded and he brought on his own death.”
Back to مک و لینوکس


1 کاربر در حال خواندن این تاپیک است

0 کاربر, 1 مهمان, 0 عضو مخفی

  1. صفحه نخست
  2. → دانلود
  3. → مک و لینوکس