1. Introduction to Unix and Security Policies Sandy Bacik Breakwater Security Associates [email_address]

7. man pages

8. /etc/passwd

10. pwck

11. passwd -sa

12. /etc/default/passwd

13. /etc/shadow

14. /etc/group

16. grpck

22. Look at some file lists

23. Changing permissions

24. chmod permission encoding rwx 111 7 rw- 110 6 r-x 101 5 r-- 100 4 -wx 011 3 -w- 010 2 --x 001 1 --- 000 0 Perms Binary Octal

25. umask permission encoding --- 111 7 --x 110 6 -w- 101 5 -wx 100 4 r-- 011 3 r-x 010 2 rw- 001 1 rwx 000 0 Perms Binary Octal

26. What’s running – ps command

28. syslog.conf

29. syslog entries

30. messages file

40. Break anyone?

45. What about exceptions It is easier to write and control exceptions, than it is to write policies custom to situations. With exceptions, the ownership is on the auditors to reconcile policy differences.

46. Let’s look at the check list Upper management IT and middle management IT and individual departments DON’T forget user training

47. Let’s look at some policies Corporate Assets Acceptable Use Network Security

48. Reference Information Security Policies Made Easy, version 7, Charles Cresson Wood, www.baselinesoftware.com

49. Thank you