Chinaunix

标题: AIX System Security:5.File/Directory permissions [打印本页]

作者: jiazf82 时间: 2006-11-07 10:05
标题: AIX System Security:5.File/Directory permissions
1.Verify passwd and group file permissions

chown -R root:security /etc/passwd /etc/group /etc/security
chown -R root:audit /etc/security/audit
chmod 644 /etc/passwd /etc/group
chmod 750 /etc/security
chmod -R go-w,o-r /etc/security

2.World-writable directories should have their sticky bit set

for part in `mount | grep dev | awk '{print $2}' | \
grep -Ev 'cdrom|nfs'`; do
echo "Searching $part"
find $part -xdev -type d $ -perm -0002 -a ! -perm -1000 $ -print
done

3.Find unauthorized world-writable files

for part in `mount | grep dev | awk '{print $2}' | \
egrep -v 'cdrom|nfs'`; do
echo "Searching $part"
find $part -xdev -type f \
$ -perm -0002 -a ! -perm -1000 $ -print
done

4.Find unauthorized SUID/SGID system executables

for part in `mount | grep dev | awk '{print $2}' | \
egrep -v 'cdrom|nfs'`; do
echo "Searching $part"
find $part $ -perm -04000 -o -perm -02000 $ \
-type f -xdev -ls
done

5.Find “unowned” files and directories

find / $ -nouser -o -nogroup $ -ls

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/4031/showart_196577.html

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)