linux的安全设置
来源:互联网 发布:python量化投资 视频 编辑:程序博客网 时间:2024/05/22 15:35
linux的安全设置
平台Redhad linux 9.0
1,禁止普通用户使用su
only the user who belongs to the wheel group permits su command.
add following content in /etc/pam.d/su:
“auth required /lib/security/$ISA/pam_wheel.so use_uid “
2,禁止root远程登录
prohibits root user login from remote..
Describe "PermitRootLogin no" in /etc/ssh/sshd_config.
3,禁止telnet
telnet shoud be prohibited.
Add following description in configuration file: /etc/xinetd.d/telnet :
「disable = yes」.
4,禁止IP转发
IP forwarding function should be disabled.
Add description in configuration file /etc/sysctl.conf:
“net.ipv4.ip_forward = 0. “
5,防范IP Spoofing attack
"IP Spoofing attack" protection should be enabled.
Add description in configuration file /etc/sysctl.conf:
“net.ipv4.conf.all.rp_filter = 1.”
6,禁止ICMP redirection packet
OS should not accept ICMP redirection packet..
Add description in configuration file /etc/sysctl.conf:
“net.ipv4.conf.all.accept_redirects = 0.”
7,禁止relay ICMP redirection packet
OS should not relay ICMP redirection packet..
Add description in configuration file /etc/sysctl.conf:
“net.ipv4.conf.all.send_redirects = 0.”
8,禁止reply to broadcast ICMP packet.
OS should not reply to broadcast ICMP packet.
Add description in configuration file /etc/sysctl.conf:
“
net.ipv4.icmp_echo_ignore_broadcasts = 1.”
9,禁止时间戳
OS should avoid the time stamp.
Add description in configuration file /etc/sysctl.conf:
“
net.ipv4.tcp_timestamps = 0.”
10,禁止伪造广播帧
OS should restrain the warning of the replying of the imitation to the broadcast frame.
Add description in configuration file /etc/sysctl.conf:
“
net.ipv4.icmp_ignore_bogus_error_responses = 1.”
- linux的安全设置
- Linux的安全设置技巧
- Linux安全方面的设置
- 浅谈Linux的安全设置
- [转]浅谈Linux的安全设置
- [转]浅谈Linux的安全设置
- [转]浅谈Linux的安全设置
- Linux下网络服务的安全设置
- Linux安全设置
- Linux安全设置手册
- Linux 安全设置手册
- linux安全设置手册
- Linux安全设置手册
- Linux安全设置手册
- Linux安全设置手册
- Linux ssh安全设置
- Linux 安全设置
- linux安全设置
- 如何屏蔽掉 php一些函数?
- [号召] 大家去写自己学习SICP的心得呀!!
- 如何在网页中调用论坛帖子
- P,MTHBGWB
- eclipse下编辑国际化资源文件的方法
- linux的安全设置
- C语言:用负数作数组下标?YES!
- 2006_11_2搞定映射模式
- 小结一下在linux下软件安装的方法
- JavaScript方法和技巧大全(转载)
- 如何高亮显示文件中选中的相同变量
- Linux网络安全之经验谈
- 解读Linux系统文件权限的设置方法
- Java与模型驱动架构(MDA)