【正文】 ................................................75 審計和日志 .................................................................................................................................76 開啟系統(tǒng)和文件審核 ..........................................................................................................76 針對注冊表的審核 ..............................................................................................................77 日志文件的管理 ..................................................................................................................77第四章 UNIX 系統(tǒng)通用安全標準 .............................................................................80 身分標識 .......................................................................................................................................80 賬戶設(shè)定 ...............................................................................................................................80 用戶屬性 ...............................................................................................................................81 停用無用的用戶 ...................................................................................................................82 身分鑒別 .......................................................................................................................................83 使用 /etc/passwd 文件 ............................................................................................................83 設(shè)置密碼規(guī)則 ........................................................................................................................85 訪問控制 .......................................................................................................................................85 安全事件審計 ...............................................................................................................................90 數(shù)據(jù)保護 .......................................................................................................................................95 加密 .......................................................................................................................................95 使用 MD5 Checksum 檢查一致性 ......................................................................................97 網(wǎng)絡(luò)服務(wù)設(shè)定 ...............................................................................................................................976 / 259 網(wǎng)絡(luò)監(jiān)視和入侵檢測 ...................................................................................................................99 備份/恢復(fù) ....................................................................................................................................100第五章 SOLARIS 系統(tǒng)安全配置 ............................................................................101 身分識別 .....................................................................................................................................101 賬戶設(shè)定 .............................................................................................................................101 配置 umask 設(shè)置 .................................................................................................................101 停用無用的賬戶 .................................................................................................................102 身分驗證 .....................................................................................................................................102 設(shè)定 BIOS 口令 ..................................................................................................................102 設(shè)定賬戶口令規(guī)則 .............................................................................................................103 訪問控制 .....................................................................................................................................104 特權(quán)程序配置 ......................................................................................................................104 更改登錄屏幕的歡迎消息 .................................................................................................107 強制自動注銷 .....................................................................................................................107 限制 Root 只可從控制臺存取 ...........................................................................................108 數(shù)據(jù)保護 .....................................................................................................................................109 安全事件審計 .......................................................................................................................117 設(shè)定事件審計 .....................................................................................................................117 檢視 Cron 檔案 ..........................................................................................................119 網(wǎng)絡(luò)服務(wù)設(shè)定 .......................................................................................................................120 設(shè)置 OpenBoot 的安全 ........................................................................................................120 設(shè)置堆棧溢出保護 ..............................................................................................................121 設(shè)置 id 的啟動方式 ........................................................................................................122 增強 TCP 序列號強度 ........................................................................................................122 調(diào)整網(wǎng)絡(luò)參數(shù) ......................................................................................................................123 關(guān)閉不必要的服務(wù) .............................................................................................................125 關(guān)閉 BSD R 系列服務(wù) ......................................................................................................127 關(guān)閉 RPC 服務(wù) .........................................................