Chapter 1. Unix Host Security
Hacks #1-20
Section 1.
Secure Mount Points
Section 2.
Scan for SUID and SGID Programs
Section 3.
Scan For World- and Group-Writable Directories
Section 4.
Create Flexible Permissions Hierarchies with POSIX ACLs
Section 5.
Protect Your Logs from Tampering
Section 6.
Delegate Administrative Roles
Section 7.
Automate Cryptographic Signature Verification
Section 8.
Check for Listening Services
Section 9.
Prevent Services from Binding to an Interface
Section 10.
Restrict Services with Sandboxed Environments
Section 11.
Use proftp with a MySQL Authentication Source
Section 12.
Prevent Stack-Smashing Attacks
Section 13.
Lock Down Your Kernel with grsecurity
Section 14.
Restrict Applications with grsecurity
Section 15.
Restrict System Calls with Systrace
Section 16.
Automated Systrace Policy Creation
Section 17.
Control Login Access with PAM
Section 18.
Restricted Shell Environments
Section 19.
Enforce User and Group Resource Limits
Section 20.
Automate System Updates |