Ebook SELinux open source security enhanced linux phần 2

... http://opensource.nailabs.com /selinux Russell Coker's SELinux http://www.coker.com.au /selinux SELinux for Debian http://www.microcomaustralia.com.au/debian SELinux for Distributions http:/ /selinux. sourceforge.net SELinux ... and SELinux Tuning Section 4.2 Controlling SELinux Section 4.3 Routine SELinux System Use and Administration Section 4.4 Monitoring SELinux Section 4....

Ngày tải lên: 08/07/2014, 01:42

... Nmap Using Nmap in Interactive Mode Exercise: Using Nmap in Interactive Mode 11 7 12 0 12 0 12 3 12 4 12 5 12 5 12 7 12 7 12 9 13 0 13 1 13 1 13 3 13 4 13 6 13 6 13 7 13 8 13 9 13 9 14 0 14 1 14 2 14 2 14 3 14 3 14 4 14 4 ... Detached and Differential Scans with Nessus Summary Solutions Fast Track Frequently Asked Questions 14 6 14 7 14 7 14 8 15 1 15 3 15...

Ngày tải lên: 08/08/2014, 21:23

... relatively simple to use, and can save administrators a great deal of time because it automatically configures the required files for each selection Administrators not have to manually write to each ... Red Hat Linux and Mandrake Linux. The specific Red Hat/Mandrake content has been generalized, and hard-code filenames are now represented as variables These variables are set automatica...

Ngày tải lên: 08/08/2014, 21:23

... Figure 3. 13 Nmap Tools & Traps… Nmap: A Tool for Hackers or Security Professionals? You may be wondering whether Nmap is actually a “hacker tool” meant to help compromise the security of a network ... GUI that allows you to control almost every aspect of Nmap.You can download NmapFE at www.insecure.org It is available in both a tarball and an RPM (the RPM is available on th...

Ngày tải lên: 08/08/2014, 21:23

... capability by placing additional information into a log file or into a database An IDS often has the ability to send alert messages to the network administrator or responsible party Many IDS applications ... into remote or local databases Snort’s analysis feature is able to read the contents of the captured packets and then inform you about any attacks waged against your network Avai...

Ngày tải lên: 08/08/2014, 21:23

... and creates a database After its database has been created,Tripwire can conduct regular scans of your hard drive and inform you (via e-mail or a log file) about any changes Updating Tripwire to ... such as etherape-0 .5. x-x, you need to download and install EtherApe Once you have verified EtherApe is installed, you are ready to capture packets To open EtherApe, open a command...

Ngày tải lên: 08/08/2014, 21:23

... www.syngress.com 138 _linux_ 06 6/20/01 9:43 AM Page 325 Network Authentication and Encryption • Chapter Creating the Kerberos Database After installing Kerberos, you will have to create a database where all principals ... host to another is unreadable to a third party If a sniffer intercepts the data, it finds the data unusable because the data is encrypted.Therefore, a hacker...

Ngày tải lên: 08/08/2014, 21:23

... completed a “Custom” Red Hat Linux installation with “everything” installed, you can skip this warning—all of the required Red Hat Package Manager (RPM) packages are already installed (you may need to ... FreeS/WAN and will be incorporated into many additional open source programs as they are developed and new versions are released An RSA key pair was created during the FreeS/WAN in...

Ngày tải lên: 08/08/2014, 21:23

... -t andmask xormask The andmask value is usually 01, because this value compares, or “ands” the original TOS value, and then allows you to make a change to the packet.The xormask value can be any ... dynamic database If this database senses a number of ports that have been scanned in a row, the firewall can take action Some actions the firewall can take may include automatic firewall re...

Ngày tải lên: 08/08/2014, 21:23

... is advised that you use Apache Server if you wish to use CGI at all Obtaining Additional Firewall Logging Tools Table 11.5 contains an all-too-brief discussion of additional tools available to ... message has been generated at the same time It is an alert informing the systems administrator that the loopback interface (127.0.0.1) has generated an attack As a result, the loopback interfa...

Ngày tải lên: 08/08/2014, 21:23

... Ipchains and Iptables also allow you to configure your Linux router to masquerade traffic (i.e., to rewrite IP headers so that a packet appears to originate from a certain host), and/or to examine ... enters a username and password, and the authentication mechanism creates a hash of these two values and compares it to the hash values generated from the /etc/passwd and /etc...

Ngày tải lên: 08/08/2014, 21:23

... SELINUX: 1.1 SELinux gì? SeLinux phiên Linux có gia cố thêm hệ thống bảo mật Hệ điều hành Nghĩa phiên linux bình thƣờng nhƣ Redhat hay Fedora Core nhƣng có cài đặt thêm hệ thống Security Enhanced ... thị cho user, role type user thời 2.2 So sánh Linux chuẩn SeLinux Để hiểu rõ SeLinux, ta làm phép so sánh nhỏ security context với Linux chuẩn Trong Linux chuẩn, thuộc tính quản l...

Ngày tải lên: 27/06/2014, 12:24