Index

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

# Index: A

absolute pathnames : 5.1.3. Current Directory and Paths
access
  /etc/exports file : 20.2.1.1. /etc/exports
  levels, NIS+ : 19.5.4. Using NIS+
  by non-citizens : 26.4.1. Munitions Export
  tradition of open : 1.4.1. Expectations
  via Web : 18.2.2.2. Additional configuration issues
access control : 2.1. Planning Your Security Needs
  ACLs
    5.2.5. Access Control Lists
    5.2.5.2. HP-UX access control lists
    17.3.13. Network News Transport Protocol (NNTP) (TCP Port 119)
  anonymous FTP : 17.3.2.1. Using anonymous FTP
  Internet servers : 17.2. Controlling Access to Servers
  monitoring employee access : 13.2.4. Auditing Access
  physical : 12.2.3. Physical Access
  restricted filesystems
    8.1.5. Restricted Filesystem
    8.1.5.2. Checking new software
  restricting data availability : 2.1. Planning Your Security Needs
  USERFILE (UUCP)
    15.4.1. USERFILE: Providing Remote File Access
    15.4.2.1. Some bad examples
  Web server files
    18.3. Controlling Access to Files on Your Server
    18.3.3. Setting Up Web Users and Passwords
  X Window System
    17.3.21.2. X security
    17.3.21.3. The xhost facility
access control lists : (see ACLs)
access.conf file : 18.3.1. The access.conf and .htaccess Files
access() : 23.2. Tips on Avoiding Security-related Bugs
access_log file
  10.3.5. access_log Log File
  18.4.2. Eavesdropping Through Log Files
  with refer_log file : 18.4.2. Eavesdropping Through Log Files
accidents
  12.2.2. Preventing Accidents
  (see also natural disasters)
accounting process
  10.2. The acct/pacct Process Accounting File
  10.2.3. messages Log File
  (see also auditing)
accounts : 3.1. Usernames
  aliases for : 8.8.9. Account Names Revisited: Using Aliases for Increased Security
  changing login shell
    8.4.2. Changing the Account's Login Shell
    8.7.1. Integrating One-time Passwords with UNIX
  created by intruders : 24.4.1. New Accounts
  default : 8.1.2. Default Accounts
  defense checklist : A.1.1.7. Chapter 8: Defending Your Accounts
  dormant
    8.4. Managing Dormant Accounts
    8.4.3. Finding Dormant Accounts
  expiring old : 8.4.3. Finding Dormant Accounts
  group : 8.1.6. Group Accounts
  importing to NIS server
    19.4.1. Including or excluding specific accounts:
    19.4.4.2. Using netgroups to limit the importing of accounts
  Joes
    3.6.2. Smoking Joes
    8.8.3.1. Joetest: a simple password cracker
  locking automatically : 3.3. Entering Your Password
  logging changes to : 10.7.2.1. Exception and activity reports
  multiple, same UID : 4.1.2. Multiple Accounts with the Same UID
  names for : (see usernames)
  restricted, with rsh : 8.1.4.5. How to set up a restricted account with rsh
  restricting FTP from : 17.3.2.5. Restricting FTP with the standard UNIX FTP server
  running single command : 8.1.3. Accounts That Run a Single Command
  without passwords : 8.1.1. Accounts Without Passwords
acct file : 10.2. The acct/pacct Process Accounting File
acctcom program
  10.2. The acct/pacct Process Accounting File
  10.2.2. Accounting with BSD
ACEs : (see ACLs)
ACK bit : 16.2.4.2. TCP
acledit command : 5.2.5.1. AIX Access Control Lists
aclget, aclput commands : 5.2.5.1. AIX Access Control Lists
ACLs (access control lists)
  5.2.5. Access Control Lists
  5.2.5.2. HP-UX access control lists
  errors in : 5.2.5.1. AIX Access Control Lists
  NNTP with : 17.3.13. Network News Transport Protocol (NNTP) (TCP Port 119)
ACM (Association for Computing Machinery) : F.1.1. Association for Computing Machinery (ACM)
active FTP : 17.3.2.2. Passive vs. active FTP
aculog file : 10.3.1. aculog File
adaptive modems : (see modems)
adb debugger
  19.3.1.3. Setting the window
  C.4. The kill Command
add-on functionality : 1.4.3. Add-On Functionality Breeds Problems
addresses
  CIDR : 16.2.1.3. CIDR addresses
  commands embedded in : 15.7. Early Security Problems with UUCP
  Internet
    16.2.1. Internet Addresses
    16.2.1.3. CIDR addresses
  IP : (see IP addresses)
Adleman, Leonard
  6.4.2. Summary of Public Key Systems
  6.4.6. RSA and Public Key Cryptography
.Admin directory : 10.3.4. uucp Log Files
administration : (see system administration)
adult material : 26.4.5. Pornography and Indecent Material
Advanced Network & Services (ANS) : F.3.4.2. ANS customers
AFCERT : F.3.4.41. U.S. Air Force
aftpd server : 17.3.2.4. Setting up an FTP server
agent (user) : 4.1. Users and Groups
agent_log file : 18.4.2. Eavesdropping Through Log Files
aging : (see expiring)
air ducts : 12.2.3.2. Entrance through air ducts
air filters : 12.2.1.3. Dust
Air Force Computer Emergency Response Team (AFCERT) : F.3.4.41. U.S. Air Force
AIX
  3.3. Entering Your Password
  8.7.1. Integrating One-time Passwords with UNIX
  access control lists : 5.2.5.1. AIX Access Control Lists
  tftp access : 17.3.7. Trivial File Transfer Protocol (TFTP) (UDP Port 69)
  trusted path : 8.5.3.1. Trusted path
alarms : (see detectors)
aliases
  8.8.9. Account Names Revisited: Using Aliases for Increased Security
  11.1.2. Back Doors and Trap Doors
  11.5.3.3. /usr/lib/aliases, /etc/aliases, /etc/sendmail/aliases, aliases.dir, or aliases.pag
  decode : 17.3.4.2. Using sendmail to receive email
  mail : 17.3.4. Simple Mail Transfer Protocol (SMTP) (TCP Port 25)
aliases file : 11.5.3.3. /usr/lib/aliases, /etc/aliases, /etc/sendmail/aliases, aliases.dir, or aliases.pag
AllowOverride option : 18.3.2. Commands Within the <Directory> Block
American Society for Industrial Security (ASIS) : F.1.2. American Society for Industrial Security (ASIS)
ancestor directories : 9.2.2.2. Ancestor directories
ANI schemes : 14.6. Additional Security for Modems
animals : 12.2.1.7. Bugs (biological)
anlpasswd package : 8.8.2. Constraining Passwords
anon option for /etc/exports : 20.2.1.1. /etc/exports
anonymous FTP
  4.1. Users and Groups
  17.3.2.1. Using anonymous FTP
  17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
  and HTTP : 18.2.4.1. Beware mixing HTTP with anonymous FTP
ANS (Advanced Network & Services, Inc.) : F.3.4.2. ANS customers
ANSI C standards : 1.4.2. Software Quality
answer mode : 14.3.1. Originate and Answer
answer testing : 14.5.3.2. Answer testing
answerback terminal mode : 11.1.4. Trojan Horses
APOP option (POP) : 17.3.10. Post Office Protocol (POP) (TCP Ports 109 and 110)
Apple CORES (Computer Response Squad) : F.3.4.3. Apple Computer worldwide R&D community
Apple Macintosh, Web server on : 18.2. Running a Secure Server
applets : 11.1.5. Viruses
application-level encryption : 16.3.1. Link-level Security
applications, CGI : (see CGI, scripts)
ar program : 7.4.2. Simple Archives
architecture, room : 12.2.3. Physical Access
archiving information
  7.1.1.1. A taxonomy of computer failures
  (see also logging)
arguments, checking : 23.2. Tips on Avoiding Security-related Bugs
ARPA (Advanced Research Projects Agency)
  1.3. History of UNIX
  (see also UNIX, history of)
  ARPANET network : 16.1.1. The Internet
ASIS (American Society for Industrial Security) : F.1.2. American Society for Industrial Security (ASIS)
assert macro : 23.2. Tips on Avoiding Security-related Bugs
assessing risks
  2.2. Risk Assessment
  2.2.2. Review Your Risks
  2.5.3. Final Words: Risk Management Means Common Sense
assets, identifying : 2.2.1.1. Identifying assets
ASSIST : F.3.4.42. U.S. Department of Defense
Association for Computing Machinery (ACM) : F.1.1. Association for Computing Machinery (ACM)
asymmetric key cryptography : 6.4. Common Cryptographic Algorithms
asynchronous systems : 19.2. Sun's Remote Procedure Call (RPC)
Asynchronous Transfer Mode (ATM) : 16.2. IPv4: The Internet Protocol Version 4
at program
  11.5.3.4. The at program
  25.2.1.2. System overload attacks
AT&T System V : (see System V UNIX)
Athena : (see Kerberos system)
atime
  5.1.2. Inodes
  5.1.5. File Times
ATM (Asynchronous Transfer Mode) : 16.2. IPv4: The Internet Protocol Version 4
attacks : (see threats)
audio device : 23.8. Picking a Random Seed
audit IDs
  4.3.3. Other IDs
  10.1. The Basic Log Files
auditing
  10. Auditing and Logging
  (see also logging)
  C2 audit : 10.1. The Basic Log Files
  checklist for : A.1.1.9. Chapter 10: Auditing and Logging
  employee access : 13.2.4. Auditing Access
  login times : 10.1.1. lastlog File
  system activity : 2.1. Planning Your Security Needs
  user activity : 4.1.2. Multiple Accounts with the Same UID
  who is logged in
    10.1.2. utmp and wtmp Files
    10.1.2.1. su command and /etc/utmp and /var/adm/wtmp files
AUTH_DES authentication : 19.2.2.3. AUTH_DES
AUTH_KERB authentication : 19.2.2.4. AUTH_KERB
AUTH_NONE authentication : 19.2.2.1. AUTH_NONE
AUTH_UNIX authentication : 19.2.2.2. AUTH_UNIX
authd service : 23.3. Tips on Writing Network Programs
authdes_win variable : 19.3.1.3. Setting the window
authentication : 3.2.3. Authentication
  ID services : 16.3.3. Authentication
  Kerberos
    19.6.1. Kerberos Authentication
    19.6.1.4. Kerberos 4 vs. Kerberos 5
  of logins : 17.3.5. TACACS (UDP Port 49)
  message digests
    6.5.2. Using Message Digests
    9.2.3. Checksums and Signatures
    23.5.1. Use Message Digests for Storing Passwords
  NIS+ : 19.5.4. Using NIS+
  RPCs
    19.2.2. RPC Authentication
    19.2.2.4. AUTH_KERB
    Secure RPC : 19.3.1. Secure RPC Authentication
  security standard for : 2.4.2. Standards
  for Web use : 18.3.3. Setting Up Web Users and Passwords
  xhost facility : 17.3.21.3. The xhost facility
authenticators : 3.1. Usernames
AuthGroupFile option : 18.3.2. Commands Within the <Directory> Block
authors of programmed threats : 11.3. Authors
AuthRealm option : 18.3.2. Commands Within the <Directory> Block
AuthType option : 18.3.2. Commands Within the <Directory> Block
AuthUserFile option : 18.3.2. Commands Within the <Directory> Block
Auto_Mounter table (NIS+) : 19.5.3. NIS+ Tables
autologout shell variable : 12.3.5.1. Built-in shell autologout
Automated Systems Incident Response Capability (NASA) : F.3.4.24. NASA: NASA-wide
automatic
  11.5.3. Abusing Automatic Mechanisms
  (see also at program; cron file)
  account lockout : 3.3. Entering Your Password
  backups system : 7.3.2. Building an Automatic Backup System
  cleanup scripts (UUCP) : 15.6.2. Automatic Execution of Cleanup Scripts
  directory listings (Web) : 18.2.2.2. Additional configuration issues
  disabling of dormant accounts : 8.4.3. Finding Dormant Accounts
  logging out : 12.3.5.1. Built-in shell autologout
  mechanisms, abusing
    11.5.3. Abusing Automatic Mechanisms
    11.5.3.6. Other files
  password generation : 8.8.4. Password Generators
  power cutoff : (see detectors)
  sprinkler systems : 12.2.1.1. Fire
  wtmp file pruning : 10.1.3.1. Pruning the wtmp file
auxiliary (printer) ports : 12.3.1.4. Auxiliary ports on terminals
awareness, security : (see security, user awareness of)
awk scripts
  11.1.4. Trojan Horses
  11.5.1.2. IFS attacks

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.