Audit and Security of UNIX

Audit and Security of UNIXByRodney KocotPresidentSystems Control and Security IncorporatedCopyright ©1999, 2001 Rodney Kocot, All rights reservedOutline Part 1Physical SecuritySecurity UtilitiesUser Administration Files and Programs• File Formats And Unix Programs Used To Manipulate Them • User Attributes• Crack ProgramsResource Protection and Management• Types Of Files• Protections For Types Of Files• Resource AdministrationPrivileged Programs• Setuid And Setgid Programs• Programs Executed At Startup And In Other Privileged SituationsOutline Part 2SchedulersSystem Startup and ShutdownNetwork Security• File Formats• Services, Their Uses And Abuses• Scanning SoftwareLogging And Monitoring• Common Logs And Their Formats• Reporting And Review ProceduresPatch ManagementCommon FindingsAudit ApproachScripts and UtilitiesSources Of InformationPre-Test Part 11. Can you do an independent audit of a $1,000.00 cash box by interviewing the manager of the cash box and not count the cash?2. Can you perform an independent audit of a Unix operating system by interviewing the system manager?3. In a Unix environment what command provides a list of files and their attributes?4. What is the name of the most powerful userid on a Unix system?5. What is the batch job scheduler on most Unix systems?6. What is TFTP?7. What command would you use to get a list of all the processes on a Unix system?8. In a Unix system what is the file that contains ...