Computer Security

Risks Involved In Conducting A UNIX Security Audit

Of all the security-related incidents that have happened occurred over the years, more have involved an UNIX security audit than any other type of operating system. UNIX releases have generally improved in security capability over the last few years, UNIX is still the most difficult operating system to secure.

UNIX security mechanisms are relevant only if the root account has not been compromised, for example scripts run through crontab can be easily disabled or modified if the attacker has attained root access, and most log files can be manipulated to cover tracks if the intruder has control over the root account.

System hardening is a philosophy of system security that focuses strongly not only on detection, but also on prevention. System administrators point out the specifics of NFS on AIX, while Windows administrators run some alien adaptation of NFS on their servers to share files.

System permissions commonly include account privileges to execute processes and access control lists that provide file access permissions, and as a result forty vulnerabilities were created from incorrectly set permissions could compromise the device and provide users with unauthorized access to configuration settings and data.

Systems supported by the House Information System (HIS ) were vulnerable to external access, where weaknesses were noted throughout all processing environments, including HIS operations and office-level systems (i.e., local area networks, Internet , standalone microcomputers, and other distributed computing systems) and House office locations. System links will be stored on a layer separate from all other map graphics, when the system links need to be modified, this layer can be exported to a DXF format file.

Users that are unsatisfied with the crippled shell are prevented from replacing it, since the replacement doesn't have the required trust. This is regarded as an unacceptable violation of the precept that the entire user-level environment be replaceable on a per-user basis. Users that have never logged on are identified by user accounts that do not have a last login time returned by the 'last' command, where these regular user accounts shall be identified correctly with the appropriate account category. User can specify target on command line, and the user can use -f to preload file owner, group and mode info, which is helpful in terms of speed and avoiding file system 'shadows'.

Access to a resource may be granted to a user based on the discretion of the system administrator, and although there is no formal concept of an UNIX security audit, DAC systems are usually based on some kind of policy that instructs the administrator on how to determine who gets access to what. Access is restricted to authorized personnel and is used for reporting and collecting data, and one session cookie per visit is used to store state information only within a session.