Advanced Linux safety management skills of ten sword

9, the latest security products and technology as a system administrator, you must always keep track of Linux security technology developments, and the timely introduction of more advanced Linux security tool.

At present, there are many relevant Linux security of research and development projects, currently at least three security Linux project has been started, the goal of each project has its own focus, they are: • Security Linux (SecureLinux) security Linux (www.reseau.nl/securelinux) project aims to provide an Internet Server system security Linux distribution. The project managers are seeking in the products in the integration of strong passwords and some additional Web server functionality. Since it is outside the United States, people are expected to be created to improve the security of your password and will not be subject to United States export control laws of security products. ● BastilleLinuxBastilleLinux (www.bastille-linux.org) projects seek to Linux environment to establish a standard similar to OpenBSD. The avowed aim is for the desktop to create a secure distribution, enables network managers can worry about users secure. ● Kha0sLinuxKha0sLinux (www.kha0s.org) is seeking to create a strong encryption and similar OpenBSD's security policy of minimum security Linux distribution. The group is currently working on its Web site users and manufacturers request global participation and cooperation. In addition, the following two points for administrators to improve Linux security management level is also very useful: access security Linux mailing list now has many Linux security mailing lists, such as & nbspsecuredistros@nl.linux.org, kha0sdev@kha0s.org, frequent visits to these mailing lists can be a lot of security information. There is also another common mailing lists are securityaudit@ferret.lmh.ox.ac.uk, which is devoted to the source code security audit. This list may be related to other mailing lists, there is a wide range of repetition, but if you want to learn the source code audit and related safety problems or is well worth reading. 10. a multi-pronged any a single security measures for its prevention capabilities are limited, a security system must take a variety of security measures, the means to better ensure safety. If a Linux system to take the above security measures, to invade your system, an attacker would have to bypass firewall, avoid intrusion detection system, skip trap program, through the system filters and escape your log monitor, modify file system attributes, undermine the security log on the server to eventually reach the end. Because any one of these links may arouse alarm, so an intruder to intrusion into the system without being discovered almost impossible.