tailieunhanh - Linux all in one desk reference for dummies phần 8

Tham khảo tài liệu 'linux all in one desk reference for dummies phần 8', công nghệ thông tin, hệ điều hành phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | Protecting Files and Directories 491 A default umask of 022 is good for system security because it translates to files that have read and write permission for the owner and read permissions for everyone else. The bottom line is that you don t want a default umask that results in files that are writable by the whole wide world. Checking or set user ID permission Another permission setting can be a security hazard. This permission setting called the set user ID or setuid for short applies to executable files. When the setuid permission is enabled the file executes under the user ID of the file s owner. In other words if an executable program is owned by root and the setuid permission is set no matter who executes that program it runs as if root is executing it. This permission means that the program can do a lot more for example read all files create new files and delete files than what a normal user program can do. Another risk is that if a setuid program file has some security hole crackers can do a lot more damage through such programs than through other vulnerabilities. You can find all setuid programs with a simple find command find -type f -perm 4000 -print You see a list of files such as the following Book VI Chapter 2 Securing a Linux Host usr bin chage usr bin gpasswd usr bin chfn usr bin chsh usr bin newgrp usr bin passwd usr bin at usr bin rcp usr bin rlogin usr bin rsh usr bin sudo usr bin crontab . lines deleted . Many of the programs have the setuid permission because they need it but check the complete list and make sure that there are no strange setuid programs for example setuid programs in a user s home directory . If you want to see how these permissions are listed by the ls command type Is -l usr bin passwd and you see the permission settings -r-s--x--x 1 root root 16128 Jun 5 23 03 usr bin passwd The s in the owner s permission setting r-s tells you that the setuid permission is set. TEAM LinG - Live Informative Non-cost and Genuine 492 .

TỪ KHÓA LIÊN QUAN
crossorigin="anonymous">
Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.