📄 00000002.htm

📁 一份很好的linux入门资料
💻 HTM
字号:
<HTML><HEAD>  <TITLE>BBS水木清华站∶精华区</TITLE></HEAD><BODY><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER>发信人:&nbsp;<A HREF="mailto:SoC.bbs@bbs.cs.nthu.edu.tw">SoC.bbs@bbs.cs.nthu.edu.tw</A>&nbsp;(牵线人),&nbsp;看板:&nbsp;Plan&nbsp;<BR>标&nbsp;&nbsp;题:&nbsp;Re:&nbsp;谈谈系统安全&nbsp;<BR>发信站:&nbsp;清华资讯系学会(枫桥驿站)&nbsp;(Thu&nbsp;Sep&nbsp;&nbsp;5&nbsp;23:52:25&nbsp;1996)&nbsp;<BR>转信站:&nbsp;sob!news.cs.nthu!maple&nbsp;<BR>&nbsp;<BR>前面谈了先确定系统上的程式来源&nbsp;&quot;无误&quot;&nbsp;後,&nbsp;<BR>接下来就要开使&nbsp;&quot;攘外安内&quot;&nbsp;了.&nbsp;<BR>&nbsp;<BR>先谈&nbsp;&quot;攘外&quot;&nbsp;的部份好了.&nbsp;<BR>&nbsp;<BR>电子邮件,&nbsp;这确时是很方便的环境,&nbsp;真的是很&nbsp;&quot;方便&quot;,&nbsp;<BR>对许多&nbsp;hacker&nbsp;而言,&nbsp;往往是透过&nbsp;email&nbsp;就可以决胜千&nbsp;<BR>里之外.&nbsp;<BR>&nbsp;<BR>Sendmail&nbsp;在&nbsp;hacker&nbsp;史上占有相当的地位,&nbsp;往往是&nbsp;<BR>hacker&nbsp;们的最爱,&nbsp;因为不需&nbsp;local&nbsp;account&nbsp;就可以取&nbsp;<BR>得相当的讯息,&nbsp;各种千奇百怪的方法都有,&nbsp;甚至有不少&nbsp;<BR>连&nbsp;crack&nbsp;用的&nbsp;&quot;□例&quot;&nbsp;在网路上都找的到&nbsp;(如:&nbsp;8lgm),&nbsp;<BR>因此巩固&nbsp;sendmail&nbsp;的安全性变得十分重要.&nbsp;<BR>&nbsp;<BR>以目前&nbsp;SunOS&nbsp;(4.1.4&nbsp;,最好换成这个版本,&nbsp;比&nbsp;4.1.3_U1&nbsp;<BR>又少了许多&nbsp;hole)&nbsp;而言,&nbsp;最起码要做的是&nbsp;patch&nbsp;sendmail&nbsp;<BR>(102423-04)&nbsp;和&nbsp;libc&nbsp;(102545-04)&nbsp;(这个&nbsp;fix&nbsp;syslog&nbsp;hole),&nbsp;<BR>当然,&nbsp;弟建议装&nbsp;ucb-sendmail&nbsp;8.7.5&nbsp;(8.7.3&nbsp;(含)之前的&nbsp;<BR>(8.6.x)&nbsp;都有&nbsp;hole),&nbsp;然後加装&nbsp;procmail&nbsp;取代&nbsp;/bin/mail&nbsp;<BR>做为&nbsp;local&nbsp;mailer,&nbsp;之後&nbsp;chmod&nbsp;u-s&nbsp;/bin/mail&nbsp;,&nbsp;如此&nbsp;<BR>可减少一些&nbsp;sendmail&nbsp;可能带来的&nbsp;&quot;特殊效果&quot;.&nbsp;<BR>&nbsp;<BR>另外,&nbsp;值得一提的是&nbsp;prog&nbsp;mailer&nbsp;(/bin/sh),&nbsp;这个处理&nbsp;<BR>..forward&nbsp;会用到,&nbsp;也是一个问题点,&nbsp;可以换装&nbsp;smsh.&nbsp;如&nbsp;<BR>果是纯&nbsp;BBS&nbsp;的机器,&nbsp;可以改写&nbsp;sendmail.cf&nbsp;来避开使用&nbsp;<BR>&nbsp;.forward&nbsp;,&nbsp;那&nbsp;/bin/sh&nbsp;就可以不用了.&nbsp;<BR>&nbsp;<BR>Summary:&nbsp;换&nbsp;sendmail-8.7.5&nbsp;(或更新的版本)&nbsp;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;用&nbsp;procmail&nbsp;取代&nbsp;/bin/mail&nbsp;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;必要时加装&nbsp;smsh&nbsp;<BR>&nbsp;<BR>待续...&nbsp;<BR>--&nbsp;<BR>※&nbsp;Origin:&nbsp;枫桥驿站(bbs.cs.nthu.edu.tw)&nbsp;◆&nbsp;From:&nbsp;alpha4&nbsp;<BR><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER></BODY></HTML>
⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -