Skip to main content

Posts

Showing posts from November 21, 2010

Protecting Systems Logs & Controlling User Accounts

Protecting Systems Logs In Linux your log files are located in the “/var/log/*log”. If a hacker does not want leave there tracks they would delete these files after they were done. One way to protect these files is to restrict access to log directories and files by normal users. Use this command “chmod 640 /var/log/*log”. To read more download the PDF Title: Protecting Systems Logs & Controlling User Accounts File Name: PSLCUA.pdf File Type: PDF File Size: 819 KB Download Now

Disabling unnecessary services

Chkconfig Enabling or disabling services on Linux it is simple to do. Like in windows you go to the run command type "msconfig" and go to the service tab and start enabling or disabling services. The only problem with the Microsoft version is that the operating system does not allow selecting which services to start when in safe mode. Linux version of this does allow you select which services to be turned on or off. The chkconfig is used to manipulate the run level links at boot time. It can be thought of as a fron-tend to insserv. Chkconfig can run in six different modes: terse list mode, set mode, edit mode, list mode, add mode and delete mode. The last three modes were added for compatibility reasons. (From: http://man-wiki.net/index.php/8:chkconfig ). Read the PDF to read more about it.     Title: Chkconfig Settings File Name: Chkconfig.pdf File Type: PDF File Size: 1.17 MB  Download Now

Protecting the Kernel

Standard Linux Kernel When installing Linux it comes with the default Linux kernel compiled which is okay for most user, but when it comes to protect your data it is also good idea to build your own secure configuration. To get latest state or beta version of the kernel go to http://www.kernel.org/ Note: if you’re still unsure or feel uneasy if you want to do this then this is not for you. To get full details on compiling Linux Kernel you can visit: http://www.digitalhermit.com/linux/Kernel-Build-HOWTO.html#CONFIGURATION-INTRO http://www.faqs.org/docs/Linux-HOWTO/Kernel-HOWTO.html For security reason the DTS server kernel configuration can not be shown.