Linux Security HOWTO

Kevin Fenzi, kevin@scrye.com

1. Introduction

• 1.1 New versions of this document
• 1.2 Feedback
• 1.3 Disclaimer
• 1.4 Copyright information

2. Overview

3. Physical Security

• 3.1 Computer locks
• 3.2 BIOS Security
• 3.3 Boot loader Security
• 3.4 xlock and vlock
• 3.5 Detecting Physical Security compromises.

4. Local Security

• 4.1 Creating new accounts
• 4.2 File Permissions
• 4.3 Root security
• 4.4 Trojan Horses
• 4.5 Password Security & Encryption
• 4.6 Integrity Checking with Tripwire
• 4.7 CFS - Cryptographic File System and TCFS - transparent cryptographic File System.
• 4.8 X11, SVGA and display security.
• 4.9 identd

5. Network Security

• 5.1 Packet Sniffers
• 5.2 System services and tcp_wrappers
• 5.3 SATAN , ISS, and other network scanners
• 5.4 pgp and public key cryptography
• 5.5 ssh and stelnet
• 5.6 sendmail, qmail and MTA's.
• 5.7 Denial of service attacks.
• 5.8 NFS (Network File System) security.
• 5.9 NIS (Network Information service) (formerly YP).
• 5.10 Firewalls

6. What to do during and after a breakin

• 6.1 Security Compromise under way.
• 6.2 Security Compromise has already happened.

7. Security sources

• 7.1 FTP sites
• 7.2 web sites
• 7.3 mailing lists
• 7.4 Books - printed reading material.

8. Conclusion

9. Thanks to