Index

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

# Index: S

S/Key codebook scheme : 8.7.3. Code Books
sa command : 10.2. The acct/pacct Process Accounting File
sabotage : (see terrorism; vandalism)
salt
  8.6.2. What Is Salt?
  8.6.3. What the Salt Doesn't Do
sanitizing media : 12.3.2.3. Sanitize your media before disposal
SATAN package
  17.6.1. SATAN
  E.4.7. SATAN
savacct file : 10.2. The acct/pacct Process Accounting File
saved UID : 4.3.2. Saved IDs
saving backup media
  7.1.5. How Long Should You Keep a Backup?
  (see also archiving information; backups)
sbrk command : 23.2. Tips on Avoiding Security-related Bugs
scanf function : 23.2. Tips on Avoiding Security-related Bugs
scanning networks : 17.6. Network Scanning
SCCS (Source Code Control System)
  7.3.2. Building an Automatic Backup System
  17.3. Primary UNIX Network Services
Scherbius, Arthur : 6.3. The Enigma Encryption System
screen savers : 12.3.5.2. X screen savers
screens, multiple : 12.3.4.3. Multiple screens
script command : 24.1.2. Rule #2: DOCUMENT
scripts, CGI : (see CGI, scripts)
scytales : 6.1. A Brief History of Cryptography
search warrants
  26.2.4. Hazards of Criminal Prosecution
  26.2.5. If You or One of Your Employees Is a Target of an Investigation...
searching for .rhosts file : 17.3.18.5. Searching for .rhosts files
Seberry, Jennifer : 6.5.4.3. HAVAL
secrecy, Kerberos : 19.6.1.3. Authentication, data integrity, and secrecy
secret keys : 6.4.6. RSA and Public Key Cryptography
Secret Service, U.S.
  26.2.2. Federal Jurisdiction
  F.3.3. U.S. Secret Service (USSS)
Secure Hash Algorithm (SHA)
  6.5.3. Digital Signatures
  6.5.4.2. SHA
Secure HTTP : 18.4.1. Eavesdropping Over the Wire
Secure NFS : 19.3.2.4. Using Secure NFS
-secure option
  19.3.2.4. Using Secure NFS
  19.4.4.5. Spoofing NIS
secure option for /etc/exports : 20.2.1.1. /etc/exports
Secure RPC
  19.3. Secure RPC (AUTH_DES)
  19.3.4. Limitations of Secure RPC
  with NIS/NIS+
    19.3.2. Setting Up Secure RPC with NIS
    19.3.4. Limitations of Secure RPC
  NTP and : 19.3.1.3. Setting the window
  reauthentication : 19.3.1.3. Setting the window
  versus Kerberos : 19.6.2. Kerberos vs. Secure RPC
Secure Socket Layer : (see SSL)
secure terminals : 8.5.1. Secure Terminals
SecureID : 8.7.2. Token Cards
SecureNet key : 8.7.2. Token Cards
security
  2.1. Planning Your Security Needs
  9.1.2. Read-only Filesystems
  12.1.1. The Physical Security Plan
  (see also integrity; physical security; system administration; threats)
  of CGI scripts
    18.2.3. Writing Secure CGI Scripts and Programs
    18.2.4.1. Beware mixing HTTP with anonymous FTP
  changed detection
    9.2. Detecting Change
    9.3. A Final Note
  checking arguments : 23.2. Tips on Avoiding Security-related Bugs
  critical messages to log
    10.5.3. syslog Messages
    10.5.3.1. Beware false log entries
  cryptography
    6. Cryptography
    6.7.2. Cryptography and Export Controls
  definition of : 1.1. What Is Computer Security?
  digital signatures : (see digital signatures)
  disabling finger : 17.3.8.2. Disabling finger
  disk quotas : 25.2.2.5. Using quotas
  dormant accounts, finding : 8.4.3. Finding Dormant Accounts
  drills : 24.1.3. Rule #3: PLAN AHEAD
  /etc/passwd : (see /etc/group file; /etc/passwd file)
  firewalls : (see firewalls)
  four steps toward : 2.4.4.7. Defend in depth
  guessable passwords
    3.6.1. Bad Passwords: Open Doors
    3.6.4. Passwords on Multiple Machines
  identification protocol : 17.3.12. Identification Protocol (auth) (TCP Port 113)
  improving DES algorithm
    6.4.5. Improving the Security of DES
    6.4.5.2. Triple DES
  IP
    16.3. IP Security
    16.3.3. Authentication
  laws and : (see laws)
  legal liability
    26.4. Other Liability
    26.4.7. Harassment, Threatening Communication, and Defamation
  levels of NIS+ servers : 19.5.5. NIS+ Limitations
  link-level : 16.3.1. Link-level Security
  message digests : (see message digests)
  modems and
    14.4. Modems and Security
    14.4.4.2. Protection against eavesdropping
  monitoring : (see logging)
  multilevel (defense in depth)
    1.3. History of UNIX
    2.4.4.7. Defend in depth
    2.5.3. Final Words: Risk Management Means Common Sense
    17.2. Controlling Access to Servers
  name service and : 16.3.2. Security and Nameservice
  national : 26.2.2. Federal Jurisdiction
  network services
    17.4. Security Implications of Network Services
    19.1. Securing Network Services
  passwords
    3.2. Passwords
    3.8. Summary
  personnel
    13. Personnel Security
    13.3. Outsiders
    A.1.1.12. Chapter 13: Personnel Security
  policy of
    1.2. What Is an Operating System?
    2. Policies and Guidelines
    2.5.3. Final Words: Risk Management Means Common Sense
  protecting backups
    7.1.6. Security for Backups
    7.1.6.3. Data security for backups
  published resources on
    D. Paper Sources
    D.2. Security Periodicals
  responding to breakins
    24. Discovering a Break-in
    24.7. Damage Control
  restricting login : 8.3. Restricting Logins
  .rhosts : (see .rhosts file)
  sendmail problems : 17.3.4.1. sendmail and security
  Skipjack algorithm : 6.4.1. Summary of Private Key Systems
  SNMP and : 17.3.15. Simple Network Management Protocol (SNMP) (UDP Ports 161 and 162)
  software piracy : 26.4.2.1. Software piracy and the SPA
  standards of : 2.4.2. Standards
  superuser problems : 4.2.1.5. The problem with the superuser
  through obscurity
    2.5. The Problem with Security Through Obscurity
    2.5.3. Final Words: Risk Management Means Common Sense
    8.8.9. Account Names Revisited: Using Aliases for Increased Security
    18.2.4. Keep Your Scripts Secret!
  tools for : 11.1. Programmed Threats: Definitions
  Tripwire package
    9.2.4. Tripwire
    9.2.4.2. Running Tripwire
  UNIX and
    1. Introduction
    1.4. Security and UNIX
    1.4.3. Add-On Functionality Breeds Problems
  user awareness of
    1.4.1. Expectations
    2. Policies and Guidelines
    2.4.4.4. Concentrate on education
    13.2.2. Ongoing Training and Awareness
  UUCP : (see UUCP)
  weakness-finding tools : 11.1.1. Security Tools
  World Wide Web
    18. WWW Security
    18.7. Summary
  X Window System
    17.3.21.2. X security
    17.3.21.3. The xhost facility
Security Emergency Response Team (SERT) : F.3.4.4. Australia: Internet .au domain
security file (UUCP) : 10.3.4. uucp Log Files
security holes
  2.5. The Problem with Security Through Obscurity
  (see also back doors; threats)
  ftpd program : 6.5.2. Using Message Digests
  mailing list for : E.1.3.3. Bugtraq
  reporting : 2.5.1. Going Public
  ruusend in L.cmds file : 15.4.3. L.cmds: Providing Remote Command Execution
  SUID/SGID programs : 5.5.3.1. write: Example of a possible SUID/SGID security hole
  /usr/lib/preserve : 5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
  UUCP : 15.7. Early Security Problems with UUCP
sed scripts : 11.1.4. Trojan Horses
seeds, random number
  23.6. Tips on Generating Random Numbers
  23.8. Picking a Random Seed
select system call : 17.1.3. The /etc/inetd Program
selection lists : 18.2.3.1. Do not trust the user's browser!
self-destruct sequences : 27.2.1. Hardware Bugs
SENDFILES= command
  15.5.1.3. A Sample Permissions file
  15.5.2. Permissions Commands
sendmail
  11.1.2. Back Doors and Trap Doors
  11.5.2.5. .forward, .procmailrc
  11.5.3.3. /usr/lib/aliases, /etc/aliases, /etc/sendmail/aliases, aliases.dir, or aliases.pag
  17.3.4. Simple Mail Transfer Protocol (SMTP) (TCP Port 25)
  17.3.4.3. Improving the security of Berkeley sendmail V8
  24.2.4.2. How to contact the system administrator of a computer you don't know
  (see also mail)
  aliases : 11.5.3.3. /usr/lib/aliases, /etc/aliases, /etc/sendmail/aliases, aliases.dir, or aliases.pag
  determining version of : 17.3.4.1. sendmail and security
  .forward file : 24.4.1.6. Changes to startup files
  improving Version 8 : 17.3.4.3. Improving the security of Berkeley sendmail V8
  logging to syslog : 17.3.4.3. Improving the security of Berkeley sendmail V8
  same Internet/NIS domain : 19.4.3. NIS Domains
  security problems with : 17.3.4.1. sendmail and security
sendmail.cf file : 17.3.4. Simple Mail Transfer Protocol (SMTP) (TCP Port 25)
sensors : (see detectors)
separation of duties : 13.2.5. Least Privilege and Separation of Duties
sequence of commands : 23.2. Tips on Avoiding Security-related Bugs
serial interfaces : 14.2. Serial Interfaces
Serial Line Internet Protocol (SLIP) : 14.5. Modems and UNIX
serial numbers, logging : 10.7.1.2. Informational material
SERT (Security Emergency Response Team) : F.3.4.4. Australia: Internet .au domain
server-side includes
  18.2.2.2. Additional configuration issues
  18.3.2. Commands Within the <Directory> Block
servers
  16.2.5. Clients and Servers
  17.1. Understanding UNIX Internet Servers
  17.1.3. The /etc/inetd Program
  backing up : 7.2.2. Small Network of Workstations and a Server
  checklist for bringing up : 17.4. Security Implications of Network Services
  controlling access to : 17.2. Controlling Access to Servers
  ftp : (see FTP)
  http : (see http server)
  load shedding : 23.3. Tips on Writing Network Programs
  master/slave : (see NIS)
  NIS+, security levels of : 19.5.5. NIS+ Limitations
  overloading with requests : 25.3.1. Service Overloading
  setting up for FTP
    17.3.2.4. Setting up an FTP server
    17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
  web : (see web servers)
  WN : 18.3. Controlling Access to Files on Your Server
  Xauthority : 17.3.21.4. Using Xauthority magic cookies
service overloading : 25.3.1. Service Overloading
services file : 17.1.1. The /etc/services File
Services table (NIS+) : 19.5.3. NIS+ Tables
SESAME (Secure European System for Applications in a Multivendor Environment) : 19.7.2. SESAME
session
  hijacking : 17.3.3. TELNET (TCP Port 23)
  IDs
    4.3.3. Other IDs
    C.1.3.4. Process groups and sessions
  keys
    6.4. Common Cryptographic Algorithms
    19.3.1.1. Proving your identity
setgid function
  4.3.3. Other IDs
  23.4. Tips on Writing SUID/SGID Programs
setpgrp function : C.1.3.4. Process groups and sessions
setrlimit function : 23.2. Tips on Avoiding Security-related Bugs
setsid function : C.1.3.4. Process groups and sessions
setuid file : 4.3.1. Real and Effective UIDs
setuid function : 23.4. Tips on Writing SUID/SGID Programs
setuid/setgid : (see SUID/SGID programs)
SGID bit
  5.5.1. SUID, SGID, and Sticky Bits
  5.5.7. SGID Bit on Files (System V UNIX Only): Mandatory Record Locking
  (see also SUID/SGID programs)
  clearing with chown : 5.7. chown: Changing a File's Owner
  on directories : 5.5.6. SGID and Sticky Bits on Directories
  on files : 5.5.7. SGID Bit on Files (System V UNIX Only): Mandatory Record Locking
SGID files : B.3.2.2. SGID files
sh (Bourne shell)
  11.5.1. Shell Features
  C.5.3. Running the User's Shell
  (see also shells)
sh program : 5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
  SUID and : 5.5.2. Problems with SUID
SHA (Secure Hash Algorithm)
  6.5.3. Digital Signatures
  6.5.4.2. SHA
shadow file
  8.1.1. Accounts Without Passwords
  8.8.5. Shadow Password Files
shadow passwords
  3.2.1. The /etc/passwd File
  8.4.1. Changing an Account's Password
  8.8.5. Shadow Password Files
Shamir, Adi
  6.4.2. Summary of Public Key Systems
  6.4.6. RSA and Public Key Cryptography
shar format file : 11.1.4. Trojan Horses
shareware : 27.2.2. Viruses on the Distribution Disk
shell escapes
  8.1.3. Accounts That Run a Single Command
  8.1.4.6. Potential problems with rsh
  in L.cmds list : 15.4.3. L.cmds: Providing Remote Command Execution
shell scripts, SUID
  5.5.3. SUID Shell Scripts
  5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
shells
  1.2. What Is an Operating System?
  3.2.1. The /etc/passwd File
  11.1.4. Trojan Horses
  11.5.1. Shell Features
  11.5.1.4. Filename attacks
  C.2. Creating Processes
  C.5.3. Running the User's Shell
  changing
    8.4.2. Changing the Account's Login Shell
    8.7.1. Integrating One-time Passwords with UNIX
  history files : 10.4.1. Shell History
  one-command accounts : 8.1.3. Accounts That Run a Single Command
  restricted (rsh, ksh)
    8.1.4.1. Restricted shells under System V UNIX
    8.1.4.6. Potential problems with rsh
  UUCP : (see uucico program)
shells file : 8.4.2. Changing the Account's Login Shell
Shimomura, Tsutomu : 23.3. Tips on Writing Network Programs
shoulder surfing
  3.2.4. Passwords Are a Shared Secret
  5.5.2. Problems with SUID
shredders : 12.3.3. Other Media
SHTTP : (see Secure HTTP)
shutdowns and wtmp file : 10.1.3. last Program
SIGHUP signal : C.4. The kill Command
SIGKILL signal : C.4. The kill Command
Signal Ground (SG) : 14.3. The RS-232 Serial Protocol
signal grounding : 25.3.3. Signal Grounding
signals : C.3. Signals
signature : 9.2. Detecting Change
signatures : (see digital signatures)
SIGSTOP signal : C.4. The kill Command
SIGTERM signal : 25.2.1.1. Too many processes
Simple Mail Transfer Protocol (SMTP)
  17.3.4. Simple Mail Transfer Protocol (SMTP) (TCP Port 25)
  17.3.4.3. Improving the security of Berkeley sendmail V8
Simple Network Management Protocol : (see SNMP)
single-user mode : C.5.1. Process #1: /etc/init
Skipjack algorithm : 6.4.1. Summary of Private Key Systems
slash (/)
  IFS separator : 11.5.1.2. IFS attacks
  root directory
    5.1.1. Directories
    (see also root directory)
Slave mode (uucico) : 15.1.4. How the UUCP Commands Work
slave server
  19.4. Sun's Network Information Service (NIS)
  (see also NIS)
SLIP (Serial Line Internet Protocol)
  14.5. Modems and UNIX
  16.2. IPv4: The Internet Protocol Version 4
Small Business Community Nationwide (SBA CERT) : F.3.4.31. Small Business Association (SBA): small business community nationwide
smap program : 17.3.4.1. sendmail and security
smart cards, firewalls : 21.5. Special Considerations
smit tool : 8.8.2. Constraining Passwords
smoke and smoking : 12.2.1.2. Smoke
SMTP (Simple Mail Transfer Protocol)
  17.3.4. Simple Mail Transfer Protocol (SMTP) (TCP Port 25)
  17.3.4.3. Improving the security of Berkeley sendmail V8
SNA (System Network Architecture) : 16.4.2. SNA
SNEFRU algorithm : 6.5.4.4. SNEFRU
sniffers
  1.4.3. Add-On Functionality Breeds Problems
  3. Users and Passwords
  8.7. One-Time Passwords
  17.3.3. TELNET (TCP Port 23)
  (see also eavesdropping)
  network : 16.3. IP Security
  packet : 16.3.1. Link-level Security
SNMP (Simple Network Management Protocol) : 17.3.15. Simple Network Management Protocol (SNMP) (UDP Ports 161 and 162)
snoop program : 24.2.3. Monitoring the Intruder
SOCKS : E.4.8. SOCKS
soft disk quotas : 25.2.2.5. Using quotas
software
  for backups
    7.4. Software for Backups
    7.4.7. inode Modification Times
  bugs in : (see bugs)
  for checking integrity : 19.5.5. NIS+ Limitations
  checking new
    8.1.5.2. Checking new software
    11.1.2. Back Doors and Trap Doors
  consistency of : 2.1. Planning Your Security Needs
  distributing : (see FTP)
  exporting : 26.4.1. Munitions Export
  failure of : 7.1.1.1. A taxonomy of computer failures
  hacker challenges : 27.2.4. Hacker Challenges
  logic bombs : 11.1.3. Logic Bombs
  operating system : (see operating systems)
  patches for, logging : 10.7.2.2. Informational material
  quality of
    1.4.2. Software Quality
    1.4.3. Add-On Functionality Breeds Problems
  stolen (pirated)
    17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
    26.4.2.1. Software piracy and the SPA
  stored via FTP : 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
  testing : 1.4.2. Software Quality
  vendor license agreements : 18.5.2. Trusting Your Software Vendor
  viruses : 11.1.5. Viruses
  worms : 11.1.6. Worms
software patents : 6.7.1. Cryptography and the U.S. Patent System
Software Publishers Association (SPA) : 26.4.2.1. Software piracy and the SPA
Software Security Response Team (SSRT) : F.3.4.9. Digital Equipment Corporation and customers
Solaris
  1.3. History of UNIX
  8.7.1. Integrating One-time Passwords with UNIX
  /etc/logindevperm : 17.3.21.1. /etc/fbtab and /etc/logindevperm
  process limit : 25.2.1.1. Too many processes
  Secure RPC time window : 19.3.1.3. Setting the window
  /var/adm/loginlog file : 10.1.4. loginlog File
  wtmpx file : 10.1.2. utmp and wtmp Files
Source Code Control System (SCCS) : 7.3.2. Building an Automatic Backup System
source code, keeping secret : 2.5. The Problem with Security Through Obscurity
SPA (Software Publishers Association) : 26.4.2.1. Software piracy and the SPA
Spaf's first principle : 2.4.4.5. Have authority commensurate with responsibility
spies
  11.3. Authors
  14.4.4.1. Kinds of eavesdropping
spoofing : 16.3. IP Security
  network connection : 8.5.3.1. Trusted path
  network services : 17.5. Monitoring Your Network with netstat
  NIS : 19.4.4.5. Spoofing NIS
  RPCs : 19.4.4.4. Spoofing RPC
spool file : 15.1.4. How the UUCP Commands Work
spoolers, printer : 12.3.4.1. Printer buffers
sprinkler systems
  12.2.1.1. Fire
  (see also water)
Sprint response team : F.3.4.32. Sprint
sprintf function
  23.1.1. The Lesson of the Internet Worm
  23.2. Tips on Avoiding Security-related Bugs
sscanf function : 23.2. Tips on Avoiding Security-related Bugs
SSL (Secure Socket Layer) : 18.4.1. Eavesdropping Over the Wire
SSRT (Software Security Response Team) : F.3.4.9. Digital Equipment Corporation and customers
Stallman, Richard : 1. Introduction
start bit
  14.1. Modems: Theory of Operation
  14.2. Serial Interfaces
startup command : 10.2.1. Accounting with System V
startup files
  attacks via
    11.5.2. Start-up File Attacks
    11.5.2.7. Other initializations
  intruder's changes to : 24.4.1.6. Changes to startup files
stat function : 5.4. Using Directory Permissions
state law enforcement : 26.2.1. The Local Option
stateless : 20.1.4.3. Connectionless and stateless
static electricity : 12.2.1.8. Electrical noise
static links : 23.4. Tips on Writing SUID/SGID Programs
stdio : (see portable I/O library)
Steele, Guy L. : 1. Introduction
sticky bits : 5.5.1. SUID, SGID, and Sticky Bits
  on directories : 5.5.6. SGID and Sticky Bits on Directories
stolen property : (see theft)
stop bit
  14.1. Modems: Theory of Operation
  14.2. Serial Interfaces
storage
  12.3.4. Protecting Local Storage
  12.3.4.5. Function keys
strcpy routine : 23.1.1. The Lesson of the Internet Worm
streadd function : 23.2. Tips on Avoiding Security-related Bugs
strecpy function : 23.2. Tips on Avoiding Security-related Bugs
strength, cryptographic : 6.2.3. Cryptographic Strength
  of DES algorithm
    6.4.4.3. DES strength
    6.4.5.2. Triple DES
  of RSA algorithm : 6.4.6.3. Strength of RSA
string command : 12.3.5.2. X screen savers
strtrns function : 23.2. Tips on Avoiding Security-related Bugs
su command
  4.2.1.2. Superuser is not for casual use
  4.3. su: Changing Who You Claim to Be
  4.3.8. Other Uses of su
  becoming superuser : 4.3.4. Becoming the Superuser
  log of failed attempts : 4.3.7. The Bad su Log
  sulog file
    10.1. The Basic Log Files
    10.3.2. sulog Log File
  utmp and wtmp files and : 10.1.2.1. su command and /etc/utmp and /var/adm/wtmp files
subnetting : 16.2.1.2. Classical network addresses
substitution (in encryption) : 6.1.2. Cryptography and Digital Computers
SUID/SGID programs
  4.3.1. Real and Effective UIDs
  5.5. SUID
  5.5.7. SGID Bit on Files (System V UNIX Only): Mandatory Record Locking
  B.3. SUID and SGID Files
  back door via : 11.1.2. Back Doors and Trap Doors
  chown command and : 5.7. chown: Changing a File's Owner
  chroot call and : 8.1.5.2. Checking new software
  created by intruders : 24.4.1.3. New SUID and SGID files
  on directories : 5.5.6. SGID and Sticky Bits on Directories
  disabling (turning off) : 5.5.5. Turning Off SUID and SGID in Mounted Filesystems
  finding all files
    5.5.4. Finding All of the SUID and SGID Files
    5.5.4.1. The ncheck command
  shell scripts
    5.5.3. SUID Shell Scripts
    5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
  uucp access : 15.3. UUCP and Security
  writing : 23.4. Tips on Writing SUID/SGID Programs
SUID/SGID programs:writing:programming:writing:zzz] : 23. Writing Secure SUID and Network Programs
suing : (see civil actions)
sulog file
  4.3.7. The Bad su Log
  10.3.2. sulog Log File
sum command
  6.5.5.1. Checksums
  9.2.3. Checksums and Signatures
Sun Microsystem's NIS : (see NIS)
Sun Microsystems : F.3.4.34. Sun Microsystems customers
SUN-DES-1 authentication : 17.3.21.3. The xhost facility
SunOS operating system : 1.3. History of UNIX
  authdes_win variable : 19.3.1.3. Setting the window
  /etc/fbtab file : 17.3.21.1. /etc/fbtab and /etc/logindevperm
  TFTP sand : 17.3.7. Trivial File Transfer Protocol (TFTP) (UDP Port 69)
  trusted hosts and : 17.3.18.5. Searching for .rhosts files
superencryption : 6.4.5. Improving the Security of DES
superuser
  4. Users, Groups, and the Superuser
  4.2.1. The Superuser
  4.2.1.5. The problem with the superuser
  (see also root account)
  abilities of : 27.1.3. What the Superuser Can and Cannot Do
  becoming with su : 4.3.4. Becoming the Superuser
  changing passwords
    8.4.1. Changing an Account's Password
    8.8.8. Disabling an Account by Changing Its Password
  encryption and : 6.2.4. Why Use Encryption with UNIX?
  logging attempts to become : (see sulog file)
  problems with : 4.2.1.5. The problem with the superuser
  restrictions on : 4.2.1.4. What the superuser can't do
  TCB files : 8.5.3.2. Trusted computing base
  using passwd command : 3.5. Verifying Your New Password
  web server as : 18.2.1. The Server's UID
SURFnet : F.3.4.25. Netherlands: SURFnet-connected sites
surges : (see power surges)
SVR4 (System V Release 4) : 1.3. History of UNIX
swap partition : 5.5.1. SUID, SGID, and Sticky Bits
swap space : 25.2.3. Swap Space Problems
Swatch program
  10.6. Swatch: A Log File Tool
  10.6.2. The Swatch Configuration File
  E.4.9. Swatch
SWITCH : F.3.4.35. SWITCH-connected sites
symbolic links and permissions : 5.1.7. File Permissions in Detail
symbolic-link following
  18.2.2.2. Additional configuration issues
  18.3.2. Commands Within the <Directory> Block
SymLinksIfOwnerMatch option : 18.3.2. Commands Within the <Directory> Block
symmetric key : (see private-key cryptography)
SYN bit : 16.2.4.2. TCP
sync system call
  5.6. Device Files
  8.1.3. Accounts That Run a Single Command
sys (user) : 4.1. Users and Groups
syslog facility
  4.3.7. The Bad su Log
  10.5. The UNIX System Log (syslog) Facility
  10.5.3.1. Beware false log entries
  23.1.1. The Lesson of the Internet Worm
  false log entries : 10.5.3.1. Beware false log entries
  where to log
    10.5.2. Where to Log
    10.5.2.3. Logging everything everywhere
syslog file : 17.3.4.3. Improving the security of Berkeley sendmail V8
syslog.conf file : 10.5.1. The syslog.conf Configuration File
systat service : 17.3.1. systat (TCP Port 11)
system
  auditing activity on : 2.1. Planning Your Security Needs
  backing up critical files
    7.3. Backing Up System Files
    7.3.2. Building an Automatic Backup System
  control over : (see access control)
  database files : 1.2. What Is an Operating System?
  overload attacks : 25.2.1.2. System overload attacks
  performance : (see performance)
  remote, commands on : 15.1.2. uux Command
  summarizing usage per user : 25.2.2.2. quot command
  transfering files to other : 15.1.1. uucp Command
system (in swatch program) : 10.6.2. The Swatch Configuration File
system administration : 2.4.4.5. Have authority commensurate with responsibility
  avoiding conventional passwords
    8.8. Administrative Techniques for Conventional Passwords
    8.8.9. Account Names Revisited: Using Aliases for Increased Security
  change monitoring : 9.3. A Final Note
  changing passwords
    8.4.1. Changing an Account's Password
    8.8.8. Disabling an Account by Changing Its Password
  cleaning up /tmp directory : 25.2.4. /tmp Problems
  contacting administrator : 24.2.4.2. How to contact the system administrator of a computer you don't know
  controlling UUCP security : 15.3. UUCP and Security
  detached signatures (PGP) : 6.6.3.6. PGP detached signatures
  disabling finger system : 17.3.8.2. Disabling finger
  discovering intruders
    24.2. Discovering an Intruder
    24.2.6. Anatomy of a Break-in
  dual universes and : 5.9.1. Dual Universes
  errors by : 7.1.1.1. A taxonomy of computer failures
  finding largest files : 25.2.2.1. Disk-full attacks
  immutable files and : 9.1.1. Immutable and Append-Only Files
  locked accounts : 3.3. Entering Your Password
  message authentication : 6.5.2. Using Message Digests
  monitoring phantom mail : 17.3.4.2. Using sendmail to receive email
  new passwords : 3.4. Changing Your Password
  read-only filesystems and : 9.1.2. Read-only Filesystems
  references on : D.1.11. UNIX Programming and System Administration
  removing automatic backups : 18.2.3.5. Beware stray CGI scripts
  sanitizing media : 12.3.2.3. Sanitize your media before disposal
  trusting : 27.3.2. Your System Administrator?
  weakness-finding tools : 11.1.1. Security Tools
system call : 5.1.7. File Permissions in Detail
system clock
  changing
    5.1.5. File Times
    9.2.3. Checksums and Signatures
    17.3.14. Network Time Protocol (NTP) (UDP Port 123)
  for random seeds : 23.8. Picking a Random Seed
  Secure RPC timestamp : 19.3.1.3. Setting the window
system files : 11.6.1.2. Writable system files and directories
  initialization files : 11.5.3.5. System initialization files
system function
  5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
  18.2.3.2. Testing is not enough!
  18.2.3.3. Sending mail
  23.2. Tips on Avoiding Security-related Bugs
system functions, checking arguments to : 23.2. Tips on Avoiding Security-related Bugs
System Network Architecture (SNA) : 16.4.2. SNA
System V UNIX
  Which UNIX System?
  1.3. History of UNIX
  accounting with : 10.2.1. Accounting with System V
  chroot in : 8.1.5. Restricted Filesystem
  default umask value : 5.3. The umask
  groups and : 4.1.3.2. Groups and older AT&T UNIX
  inittab program : C.5.1. Process #1: /etc/init
  modems and : 14.5.1. Hooking Up a Modem to Your Computer
  passwords : 8.1.1. Accounts Without Passwords
  ps command with : C.1.2.1. Listing processes with systems derived from System V
  random number generators : 23.7.3. drand48 ( ), lrand48 ( ), and mrand48 ( )
  recent login times : 10.1.1. lastlog File
  Release 4 (SVR4) : 1.3. History of UNIX
  restricted shells : 8.1.4.1. Restricted shells under System V UNIX
  SGI bit on files : 5.5.7. SGID Bit on Files (System V UNIX Only): Mandatory Record Locking
  su command and : 4.3.6. Restricting su
  SUID files, list of : B.3. SUID and SGID Files
  utmp and wtmp files : 10.1.2. utmp and wtmp Files
  UUCP : 15.4.1.3. Format of USERFILE entry without system name
  /var/adm/loginlog file : 10.1.4. loginlog File
  wtmpx file : 10.1.2. utmp and wtmp Files
Systems file : 15.3.3. Security of L.sys and Systems Files

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.