From d24e8eadb190e226030d4cccb8287c2112b957fb Mon Sep 17 00:00:00 2001 From: Camille Begnis Date: Thu, 6 Jan 2000 13:24:02 +0000 Subject: Added friendly level names Corrected a mistake --- doc/msec.lyx | 92 +++++++++- doc/msec.ps | 592 ++++++++++++++++++++++++++++++----------------------------- 2 files changed, 388 insertions(+), 296 deletions(-) (limited to 'doc') diff --git a/doc/msec.lyx b/doc/msec.lyx index 430fddb..a18f0ad 100644 --- a/doc/msec.lyx +++ b/doc/msec.lyx @@ -1,4 +1,4 @@ -#This file was created by Tue Jan 4 10:45:05 2000 +#This file was created by Thu Jan 6 11:03:16 2000 #LyX 0.12 (C) 1995-1998 Matthias Ettrich and the LyX Team \lyxformat 2.15 \textclass article @@ -137,7 +137,15 @@ Note that whatever the level you chose, your configuration will be stored . \layout Subsection -Level 0 +Level 0 +\begin_inset Quotes eld +\end_inset + +Welcome To Crackers +\begin_inset Quotes erd +\end_inset + + \layout Standard This level is to be used with care. @@ -166,7 +174,15 @@ As we see, this security level shouldn't be set by default because it may result in big problems for your data. \layout Subsection -Level 1 +Level 1 +\begin_inset Quotes eld +\end_inset + +Poor +\begin_inset Quotes erd +\end_inset + + \layout Standard The main security improvement compared with level 0 is that now, the access @@ -176,7 +192,15 @@ The main security improvement compared with level 0 is that now, the access or to a LAN (Local Area Network). \layout Subsection -Level 2 +Level 2 +\begin_inset Quotes eld +\end_inset + +Low +\begin_inset Quotes erd +\end_inset + + \layout Standard Few improvements for this security level, the main one is that there are @@ -184,7 +208,15 @@ Few improvements for this security level, the main one is that there are It is more secure for multi-users use. \layout Subsection -Level 3 +Level 3 +\begin_inset Quotes erd +\end_inset + +Medium +\begin_inset Quotes erd +\end_inset + + \layout Standard This is the standard security recommended for a computer that will be used @@ -204,7 +236,15 @@ From the user's point of view, the system is now a little bit more closed, or previous Mandrake distribution. \layout Subsection -Level 4 +Level 4 +\begin_inset Quotes eld +\end_inset + +High +\begin_inset Quotes erd +\end_inset + + \layout Standard With this security level, the use of this system as a server becomes possible. @@ -220,7 +260,15 @@ Security checks will warn system administrator of possible security holes or intrusions on the system. \layout Subsection -Level 5 +Level 5 +\begin_inset Quotes eld +\end_inset + +Paranoid +\begin_inset Quotes erd +\end_inset + + \layout Standard We take level 4 features, but now the system is entirely closed. @@ -850,7 +898,15 @@ All system events additionally logged to /dev/tty12 \newline * \newline -Only root can shutdown +Only root can +\begin_inset Quotes eld +\end_inset + +ctrl-alt-del +\begin_inset Quotes erd +\end_inset + + \newline \newline @@ -1187,11 +1243,27 @@ All system events additionally logged to /dev/tty12 *All* system messages directed to syslog are copied to tty12 console. \layout Subsection -Only root can shutdown +Only root can +\begin_inset Quotes eld +\end_inset + +ctrl-alt-del +\begin_inset Quotes erd +\end_inset + + \layout Standard You must be root (or referenced into /etc/shutdown.allow) and logged into - a console to be able to shutdown or reboot the machine. + a console to be able to reboot the machine through key binding +\begin_inset Quotes eld +\end_inset + +ctrl-alt-del +\begin_inset Quotes erd +\end_inset + +. \layout Subsection Services not known disabled diff --git a/doc/msec.ps b/doc/msec.ps index 32f5ae3..0954c5c 100644 --- a/doc/msec.ps +++ b/doc/msec.ps @@ -6,10 +6,10 @@ %%BoundingBox: 0 0 596 842 %%EndComments %DVIPSWebPage: (www.radicaleye.com) -%DVIPSCommandLine: dvips -o /home/camille/devel/CVS/msec/doc/msec.ps +%DVIPSCommandLine: dvips -o /home/camille/Documentation/msec/msec.ps %+ msec.dvi %DVIPSParameters: dpi=600, compressed -%DVIPSSource: TeX output 2000.01.04:1048 +%DVIPSSource: TeX output 2000.01.06:1103 %%BeginProcSet: texc.pro %! /TeXDict 300 dict def TeXDict begin/N{def}def/B{bind def}N/S{exch}N/X{S @@ -149,182 +149,200 @@ EB7F836DB55A130F903801FC7F90C712FF5EEA03C0260FF00190C7FC121F003F495AA24A 6C14FCA36C14F8A26C14F06C14E06C14C0000114006C5BEB1FF01F1F7BA42A>15 D E %EndDVIPSBitmapFont -%DVIPSBitmapFont: Fc ecbx1200 12 48 -/Fc 48 123 df28 D<141FA5ECFFE0010713 -FE013F6D7E4914E048B612F84890389F1FFC3A07FC1F01FED80FF0EB007FD81FE08001C0 -EC1F80003FED0FC001801407007F150F0100EC7FE016FF485CA41380A201C06D13C013E0 -01F0EC3F0001F891C7FCEA7FFCEBFF9F14FF6C14C015F86C14FE6C6E7E16E06C816C81C6 -816D80131F01078001001580141F6F13C0150F81030113E0000680EA3FC0D87FE0147FD8 -FFF0143FA3161FA313E017C01380D87800143F127C17806C157F003FEDFF00D81F80495A -D80FE01303D807F8495AD803FFEB3FF86C90B55A6C15C0013F91C7FC010F13FC010013E0 -021FC8FCA52B517ACA38>36 D46 D<17C0EE01E01603A217C01607A2EE0F80A217005EA2163E -A2163C167CA25EA24B5AA25E1503A24B5AA25E150FA24BC7FCA2151E153EA25DA2157815 -F8A24A5AA25D1403A24A5AA25D140FA24AC8FCA2143EA2143C147CA25CA25C1301A2495A -A25C1307A2495AA291C9FC5BA2133EA2133C137CA25BA25B1201A2485AA2485AA25B120F -A248CAFCA2121E123EA25AA2127812F8A25A12602B647ACA38>IIIII<163FA25E5E5D5DA25D5D5D5DA25D92B5 -FCEC01F7EC03E7140715C7EC0F87EC1F07143E147E147C14F8EB01F0EB03E0130714C0EB -0F80EB1F00133E5BA25B485A485A485A120F5B48C7FC123E5A12FCB91280A5C8000F90C7 -FCAC027FB61280A531417DC038>I<0007150301E0143F01FFEB07FF91B6FC5E5E5E5E5E -16804BC7FC5D15E092C8FC01C0C9FCAAEC3FF001C1B5FC01C714C001DF14F09039FFE03F -FC9138000FFE01FC6D7E01F06D13804915C0497F6C4815E0C8FC6F13F0A317F8A4EA0F80 -EA3FE0487E12FF7FA317F05B5D6C4815E05B007EC74813C0123E003F4A1380D81FC04913 -00D80FF0495AD807FEEBFFFC6CB612F0C65D013F1480010F01FCC7FC010113C02D427BC0 -38>I<4AB47E021F13F0027F13FC49B6FC01079038807F8090390FFC001FD93FF014C049 -48137F4948EBFFE048495A5A1400485A120FA248486D13C0EE7F80EE1E00003F92C7FCA2 -5B127FA2EC07FC91381FFF8000FF017F13E091B512F89039F9F01FFC9039FBC007FE9039 -FF8003FF17804A6C13C05B6F13E0A24915F0A317F85BA4127FA5123FA217F07F121FA200 -0F4A13E0A26C6C15C06D4913806C018014006C6D485A6C9038E01FFC6DB55A011F5C0107 -14C0010191C7FC9038003FF02D427BC038>I<121E121F13FC90B712FEA45A17FC17F817 -F017E017C0A2481680007EC8EA3F00007C157E5E00785D15014B5A00F84A5A484A5A5E15 -1FC848C7FC157E5DA24A5A14035D14074A5AA2141F5D143FA2147F5D14FFA25BA35B92C8 -FCA35BA55BAA6D5A6D5A6D5A2F447AC238>III65 +%DVIPSBitmapFont: Fc ecbx1200 12 53 +/Fc 53 123 df<0118140C017C143E01FC147E48485C4848495A495C4848495A4848495A +001F140F90C75B003E4AC7FCA2003C141E007C143E0078143CA200F8147CA2481478D8F1 +F014F8D8F7FCEB7BFEB46CEB7FFF6D1580028014C0A36C80A36C806C496C13806C486D13 +006C486D5AD801F0EB00F82A2283C427>16 DI28 D<141FA5ECFFE0010713FE013F6D7E4914E048B612 +F84890389F1FFC3A07FC1F01FED80FF0EB007FD81FE08001C0EC1F80003FED0FC0018014 +07007F150F0100EC7FE016FF485CA41380A201C06D13C013E001F0EC3F0001F891C7FCEA +7FFCEBFF9F14FF6C14C015F86C14FE6C6E7E16E06C816C81C6816D80131F010780010015 +80141F6F13C0150F81030113E0000680EA3FC0D87FE0147FD8FFF0143FA3161FA313E017 +C01380D87800143F127C17806C157F003FEDFF00D81F80495AD80FE01303D807F8495AD8 +03FFEB3FF86C90B55A6C15C0013F91C7FC010F13FC010013E0021FC8FCA52B517ACA38> +36 D45 DI<17C0EE01E01603A217C01607A2EE0F80A217005EA216 +3EA2163C167CA25EA24B5AA25E1503A24B5AA25E150FA24BC7FCA2151E153EA25DA21578 +15F8A24A5AA25D1403A24A5AA25D140FA24AC8FCA2143EA2143C147CA25CA25C1301A249 +5AA25C1307A2495AA291C9FC5BA2133EA2133C137CA25BA25B1201A2485AA2485AA25B12 +0FA248CAFCA2121E123EA25AA2127812F8A25A12602B647ACA38>IIIII<163FA25E5E5D5DA25D5D5D5DA25D92 +B5FCEC01F7EC03E7140715C7EC0F87EC1F07143E147E147C14F8EB01F0EB03E0130714C0 +EB0F80EB1F00133E5BA25B485A485A485A120F5B48C7FC123E5A12FCB91280A5C8000F90 +C7FCAC027FB61280A531417DC038>I<0007150301E0143F01FFEB07FF91B6FC5E5E5E5E +5E16804BC7FC5D15E092C8FC01C0C9FCAAEC3FF001C1B5FC01C714C001DF14F09039FFE0 +3FFC9138000FFE01FC6D7E01F06D13804915C0497F6C4815E0C8FC6F13F0A317F8A4EA0F +80EA3FE0487E12FF7FA317F05B5D6C4815E05B007EC74813C0123E003F4A1380D81FC049 +1300D80FF0495AD807FEEBFFFC6CB612F0C65D013F1480010F01FCC7FC010113C02D427B +C038>I<4AB47E021F13F0027F13FC49B6FC01079038807F8090390FFC001FD93FF014C0 +4948137F4948EBFFE048495A5A1400485A120FA248486D13C0EE7F80EE1E00003F92C7FC +A25B127FA2EC07FC91381FFF8000FF017F13E091B512F89039F9F01FFC9039FBC007FE90 +39FF8003FF17804A6C13C05B6F13E0A24915F0A317F85BA4127FA5123FA217F07F121FA2 +000F4A13E0A26C6C15C06D4913806C018014006C6D485A6C9038E01FFC6DB55A011F5C01 +0714C0010191C7FC9038003FF02D427BC038>I<121E121F13FC90B712FEA45A17FC17F8 +17F017E017C0A2481680007EC8EA3F00007C157E5E00785D15014B5A00F84A5A484A5A5E +151FC848C7FC157E5DA24A5A14035D14074A5AA2141F5D143FA2147F5D14FFA25BA35B92 +C8FCA35BA55BAA6D5A6D5A6D5A2F447AC238>III65 DI71 DI76 D<923807FFC092B512FE0207ECFFC0021F15F091267FFE0013FC902601FFF0 -EB1FFF01070180010313C04990C76C7FD91FFC6E6C7E49486F7E49486F7E01FF8348496F -7E48496F1380A248496F13C0A24890C96C13E0A24819F04982003F19F8A3007F19FC4917 -7FA400FF19FEAD007F19FC6D17FFA3003F19F8A26D5E6C19F0A26E5D6C19E0A26C6D4B13 -C06C19806E5D6C6D4B13006C6D4B5A6D6C4B5A6D6C4B5A6D6C4A5B6D01C001075B6D01F0 -011F5B010101FE90B5C7FC6D90B65A023F15F8020715C002004AC8FC030713C047467AC4 -54>79 DI83 D<003FBA12E0A59026FE000FEB8003D87FE09338003FF049171F90C71607A2 -007E1803007C1801A300781800A400F819F8481978A5C81700B3B3A20107B8FCA545437C -C24E>II87 D<007FB6D8C003B61280A5D8000F01E0C7D801F8 -C7FC6D4C5A6F14076D6D5D6D6D4A5A4E5A6D6D143F6E6C92C8FC6E157E705B6EEBC0016E -01E05B4D5A6E6D485A6EEBF80F6E01FC5B4D5A6E6D48C9FC6F6C5A6F137E5F6F5B815F81 -6F7F81836F7F707E93B5FC844B805D4B8004E77FDB0FC37FED1F83DB3F817F04007F037E -137F4B8002016E7F4B6D7F4A5A4A486D7F020F6E7F4B7F4A48814AC76C7F717F147E4A6F -7E0101707F4A8149488349486F7F010F707FB600E00103B612FCA54E447DC355>I<9038 -01FFE0011F13FE017F6D7E48B612E03A03FE007FF84848EB1FFC6D6D7E486C6D7EA26F7F -A36F7F6C5A6C5AEA00F090C7FCA40203B5FC91B6FC1307013F13F19038FFFC01000313E0 -481380381FFE00485A5B127F5B12FF5BA35DA26D5B6C6C5B4B13F0D83FFE013EEBFFC03A -1FFF80FC7F0007EBFFF86CECE01FC66CEB8007D90FFCC9FC322F7DAD36>97 -DIIII103 -DI< -137C48B4FC4813804813C0A24813E0A56C13C0A26C13806C1300EA007C90C7FCAAEB7FC0 -EA7FFFA512037EB3AFB6FCA518467CC520>I107 DI<90277F8007FEEC0FFCB590263FFFC090387FFF8092B5D8F001B512E002 -816E4880913D87F01FFC0FE03FF8913D8FC00FFE1F801FFC0003D99F009026FF3E007F6C -019E6D013C130F02BC5D02F86D496D7EA24A5D4A5DA34A5DB3A7B60081B60003B512FEA5 -572D7CAC5E>I<90397F8007FEB590383FFF8092B512E0028114F8913987F03FFC91388F -801F000390399F000FFE6C139E14BC02F86D7E5CA25CA35CB3A7B60083B512FEA5372D7C -AC3E>II<90397FC00FF8B5 -90B57E02C314E002CF14F89139DFC03FFC9139FF001FFE000301FCEB07FF6C496D13804A -15C04A6D13E05C7013F0A2EF7FF8A4EF3FFCACEF7FF8A318F017FFA24C13E06E15C06E5B -6E4913806E4913006E495A9139DFC07FFC02CFB512F002C314C002C091C7FCED1FF092C9 -FCADB67EA536407DAC3E>I<90387F807FB53881FFE0028313F0028F13F8ED8FFC91389F -1FFE000313BE6C13BC14F8A214F0ED0FFC9138E007F8ED01E092C7FCA35CB3A5B612E0A5 -272D7DAC2E>114 D<90391FFC038090B51287000314FF120F381FF003383FC00049133F -48C7121F127E00FE140FA215077EA27F01E090C7FC13FE387FFFF014FF6C14C015F06C14 -FC6C800003806C15806C7E010F14C0EB003F020313E0140000F0143FA26C141F150FA27E -A26C15C06C141FA26DEB3F8001E0EB7F009038F803FE90B55A00FC5CD8F03F13E026E007 -FEC7FC232F7CAD2C>IIIII121 -D<001FB71280A49026FC001F130001E0495A5B49495A90C7485A48495B123E4A5B4A5B00 -3C495BA24A90C7FC4A5A4A5AC7FC4A5A495B495BA2495B499038800780491300A2495A49 -48130F49481400A2485B48495B485BA248495B4890C75A48485C15034848EB1FFEB7FCA4 -292C7DAB32>I E +4A160F485B19074890CAFC19035A5BA2007F1801A34994C7FC12FFAE127F7F1AF0A2123F +A27F6C18011AE06C7F19036C6D17C06E16077E6C6DEE0F806C6DEE1F006D6C5E6D6C167E +6D6C6C5D6D6D4A5A6D01F0EC07F0010101FEEC1FE06D903AFFF001FF80023F90B6C7FC02 +0715FC020115F0DA001F1480030001F8C8FC44467AC451>I71 DI76 +DI<923807FFC092B5 +12FE0207ECFFC0021F15F091267FFE0013FC902601FFF0EB1FFF01070180010313C04990 +C76C7FD91FFC6E6C7E49486F7E49486F7E01FF8348496F7E48496F1380A248496F13C0A2 +4890C96C13E0A24819F04982003F19F8A3007F19FC49177FA400FF19FEAD007F19FC6D17 +FFA3003F19F8A26D5E6C19F0A26E5D6C19E0A26C6D4B13C06C19806E5D6C6D4B13006C6D +4B5A6D6C4B5A6D6C4B5A6D6C4A5B6D01C001075B6D01F0011F5B010101FE90B5C7FC6D90 +B65A023F15F8020715C002004AC8FC030713C047467AC454>79 DI83 +D<003FBA12E0A59026FE000FEB8003D87FE09338003FF049171F90C71607A2007E180300 +7C1801A300781800A400F819F8481978A5C81700B3B3A20107B8FCA545437CC24E>II87 D<007FB6D8C003B61280A5D8000F01E0C7D801F8C7FC6D4C5A +6F14076D6D5D6D6D4A5A4E5A6D6D143F6E6C92C8FC6E157E705B6EEBC0016E01E05B4D5A +6E6D485A6EEBF80F6E01FC5B4D5A6E6D48C9FC6F6C5A6F137E5F6F5B815F816F7F81836F +7F707E93B5FC844B805D4B8004E77FDB0FC37FED1F83DB3F817F04007F037E137F4B8002 +016E7F4B6D7F4A5A4A486D7F020F6E7F4B7F4A48814AC76C7F717F147E4A6F7E0101707F +4A8149488349486F7F010F707FB600E00103B612FCA54E447DC355>I<903801FFE0011F +13FE017F6D7E48B612E03A03FE007FF84848EB1FFC6D6D7E486C6D7EA26F7FA36F7F6C5A +6C5AEA00F090C7FCA40203B5FC91B6FC1307013F13F19038FFFC01000313E0481380381F +FE00485A5B127F5B12FF5BA35DA26D5B6C6C5B4B13F0D83FFE013EEBFFC03A1FFF80FC7F +0007EBFFF86CECE01FC66CEB8007D90FFCC9FC322F7DAD36>97 DIIII103 DI<137C48B4FC4813804813C0A24813E0A5 +6C13C0A26C13806C1300EA007C90C7FCAAEB7FC0EA7FFFA512037EB3AFB6FCA518467CC5 +20>I +107 DI<90277F8007FEEC0FFC +B590263FFFC090387FFF8092B5D8F001B512E002816E4880913D87F01FFC0FE03FF8913D +8FC00FFE1F801FFC0003D99F009026FF3E007F6C019E6D013C130F02BC5D02F86D496D7E +A24A5D4A5DA34A5DB3A7B60081B60003B512FEA5572D7CAC5E>I<90397F8007FEB59038 +3FFF8092B512E0028114F8913987F03FFC91388F801F000390399F000FFE6C139E14BC02 +F86D7E5CA25CA35CB3A7B60083B512FEA5372D7CAC3E>II<90397FC00FF8B590B57E02C314E002CF14F89139DFC03F +FC9139FF001FFE000301FCEB07FF6C496D13804A15C04A6D13E05C7013F0A2EF7FF8A4EF +3FFCACEF7FF8A318F017FFA24C13E06E15C06E5B6E4913806E4913006E495A9139DFC07F +FC02CFB512F002C314C002C091C7FCED1FF092C9FCADB67EA536407DAC3E>I<90387F80 +7FB53881FFE0028313F0028F13F8ED8FFC91389F1FFE000313BE6C13BC14F8A214F0ED0F +FC9138E007F8ED01E092C7FCA35CB3A5B612E0A5272D7DAC2E>114 +D<90391FFC038090B51287000314FF120F381FF003383FC00049133F48C7121F127E00FE +140FA215077EA27F01E090C7FC13FE387FFFF014FF6C14C015F06C14FC6C800003806C15 +806C7E010F14C0EB003F020313E0140000F0143FA26C141F150FA27EA26C15C06C141FA2 +6DEB3F8001E0EB7F009038F803FE90B55A00FC5CD8F03F13E026E007FEC7FC232F7CAD2C +>IIIII121 D<001FB71280A49026FC001F13 +0001E0495A5B49495A90C7485A48495B123E4A5B4A5B003C495BA24A90C7FC4A5A4A5AC7 +FC4A5A495B495BA2495B499038800780491300A2495A4948130F49481400A2485B48495B +485BA248495B4890C75A48485C15034848EB1FFEB7FCA4292C7DAB32>I +E %EndDVIPSBitmapFont %DVIPSBitmapFont: Fd ecrm1000 10 80 /Fd 80 123 df<486C1360000314E039070001C0000EEB038048EB070000181306003813 @@ -563,27 +581,26 @@ EB07F00038EB0FE012300070EB1FC0EC3F800060137F150014FE495AA2C6485A495AA249 48C7127C48EB03FC90B5FCA21F247EA325>I E %EndDVIPSBitmapFont %DVIPSBitmapFont: Fe ecbx1000 10 29 -/Fe 29 122 df<141E143E14FE1307137FB5FCA3138FEA000FB3B3A5007FB61280A42136 -79B530>49 DIII<001C15C0D81F80130701F8 -137F90B61280A216005D5D15F05D15804AC7FC14F090C9FCA7EB03FE90381FFFE0017F13 -F89038FE07FC9038F003FFD9C0011380496C13C090C7FC000E15E0C8127F16F0A216F8A3 -121FEA3FC0487E12FF7FA316F05B15FFD87F8014E0007EC713C0003E5B003F4913806C6C -481300390FF01FFE6CB512F8000114E06C6C1380D90FF8C7FC25377BB530>I57 D48 D<141E143E14FE1307137FB5FCA3138FEA000F +B3B3A5007FB61280A4213679B530>IIII<00 +1C15C0D81F80130701F8137F90B61280A216005D5D15F05D15804AC7FC14F090C9FCA7EB +03FE90381FFFE0017F13F89038FE07FC9038F003FFD9C0011380496C13C090C7FC000E15 +E0C8127F16F0A216F8A3121FEA3FC0487E12FF7FA316F05B15FFD87F8014E0007EC713C0 +003E5B003F4913806C6C481300390FF01FFE6CB512F8000114E06C6C1380D90FF8C7FC25 +377BB530>I65 @@ -979,101 +996,101 @@ TeXDict begin 1 0 bop 520 872 a Fi(msec)43 b Fh([Mandrake)k(SECurity)g(tools])738 1214 y Fg(Camille)30 b(B\351gnis)i()1479 1466 y(22/12/1999)291 1881 y Ff(Con)l(ten)l(ts)291 2116 -y Fe(1)76 b(In)m(tro)s(ducing)32 b(msec)1966 b(1)291 -2351 y(2)76 b(Installation)2217 b(1)415 2502 y Fd(2.1)84 -b(Lev)n(el)27 b(0)f(.)42 b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f -(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.) -f(.)h(.)g(.)131 b(2)415 2653 y(2.2)84 b(Lev)n(el)27 b(1)f(.)42 -b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g -(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 -b(2)415 2805 y(2.3)84 b(Lev)n(el)27 b(2)f(.)42 b(.)g(.)f(.)h(.)f(.)h(.) -f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h -(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(2)415 2956 y(2.4)84 -b(Lev)n(el)27 b(3)f(.)42 b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f -(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.) -f(.)h(.)g(.)131 b(3)415 3107 y(2.5)84 b(Lev)n(el)27 b(4)f(.)42 -b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g -(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 -b(3)415 3259 y(2.6)84 b(Lev)n(el)27 b(5)f(.)42 b(.)g(.)f(.)h(.)f(.)h(.) -f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h -(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(3)291 3493 y -Fe(3)76 b(Securit)m(y)33 b(lev)m(els)e(features)1729 -b(3)415 3645 y Fd(3.1)84 b(Global)27 b(securit)n(y)g(c)n(hec)n(k)93 +y Fe(1)76 b(In)m(tro)s(ducing)32 b(msec)1966 b(2)291 +2351 y(2)76 b(Installation)2217 b(3)415 2502 y Fd(2.1)84 +b(Lev)n(el)27 b(0)g(\020W)-7 b(elcome)27 b(T)-7 b(o)27 +b(Crac)n(k)n(ers\021)60 b(.)42 b(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.) +g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(3)415 2653 y(2.2)84 +b(Lev)n(el)27 b(1)g(\020P)n(o)r(or\021)i(.)41 b(.)h(.)f(.)h(.)g(.)f(.)h +(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.) +h(.)f(.)h(.)g(.)131 b(4)415 2805 y(2.3)84 b(Lev)n(el)27 +b(2)g(\020Lo)n(w\021)50 b(.)41 b(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.) +h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g +(.)131 b(4)415 2956 y(2.4)84 b(Lev)n(el)27 b(3)g(\021Medium\021)34 +b(.)41 b(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.) +f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(4)415 3107 +y(2.5)84 b(Lev)n(el)27 b(4)g(\020High\021)i(.)41 b(.)h(.)f(.)h(.)g(.)f +(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.) +f(.)h(.)f(.)h(.)g(.)131 b(4)415 3259 y(2.6)84 b(Lev)n(el)27 +b(5)g(\020P)n(aranoid\021)67 b(.)42 b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f +(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 +b(4)291 3493 y Fe(3)76 b(Securit)m(y)33 b(lev)m(els)e(features)1729 +b(5)415 3645 y Fd(3.1)84 b(Global)27 b(securit)n(y)g(c)n(hec)n(k)93 b(.)41 b(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) -f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(5)415 3796 y(3.2)84 +f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(7)415 3796 y(3.2)84 b(umask)27 b(users)102 b(.)41 b(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h (.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) -131 b(5)415 3947 y(3.3)84 b(umask)27 b(ro)r(ot)68 b(.)42 +131 b(7)415 3947 y(3.3)84 b(umask)27 b(ro)r(ot)68 b(.)42 b(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f -(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(5)415 +(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(7)415 4099 y(3.4)84 b(shell)28 b(without)f(passw)n(ord)37 b(.)k(.)h(.)f(.)h (.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.) -h(.)g(.)131 b(5)415 4250 y(3.5)84 b(authorized)27 b(to)g(connect)g(to)h +h(.)g(.)131 b(7)415 4250 y(3.5)84 b(authorized)27 b(to)g(connect)g(to)h (X)g(displa)n(y)56 b(.)42 b(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f -(.)h(.)f(.)h(.)g(.)131 b(6)415 4401 y(3.6)84 b(User)27 +(.)h(.)f(.)h(.)g(.)131 b(7)415 4401 y(3.6)84 b(User)27 b(in)h(audio)f(group)79 b(.)42 b(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 -b(6)415 4552 y(3.7)84 b(.)37 b(in)28 b($P)-7 b(A)g(TH)55 +b(7)415 4552 y(3.7)84 b(.)37 b(in)28 b($P)-7 b(A)g(TH)55 b(.)42 b(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.) h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 -b(6)415 4704 y(3.8)84 b(W)-7 b(arning)27 b(in)h(/v)-5 +b(8)415 4704 y(3.8)84 b(W)-7 b(arning)27 b(in)h(/v)-5 b(ar/log/securit)n(y)e(.log)68 b(.)41 b(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h -(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(6)415 4855 y(3.9)84 +(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)131 b(8)415 4855 y(3.9)84 b(W)-7 b(arning)27 b(directly)g(on)g(tt)n(y)72 b(.)42 b(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f -(.)h(.)f(.)h(.)g(.)131 b(6)415 5006 y(3.10)42 b(W)-7 +(.)h(.)f(.)h(.)g(.)131 b(8)415 5006 y(3.10)42 b(W)-7 b(arning)27 b(in)h(syslog)23 b(.)41 b(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h (.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) -131 b(6)1702 5255 y(1)p eop +131 b(8)1702 5255 y(1)p eop %%Page: 2 2 2 1 bop 863 523 a Fd(3.11)42 b(W)-7 b(arning)27 b(sen)n(t)h(b)n(y)f (mail)g(to)h(ro)r(ot)63 b(.)42 b(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.) -f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(6)863 672 y(3.12)42 +f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(8)863 672 y(3.12)42 b(Suid)28 b(ro)r(ot)f(\034le)h(c)n(hec)n(k)41 b(.)g(.)h(.)f(.)h(.)g(.)f (.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.) -f(.)h(.)132 b(6)863 821 y(3.13)42 b(Suid)28 b(ro)r(ot)f(\034le)h +f(.)h(.)132 b(8)863 821 y(3.13)42 b(Suid)28 b(ro)r(ot)f(\034le)h (md5sum)f(c)n(hec)n(k)32 b(.)41 b(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f -(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(7)863 +(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(8)863 970 y(3.14)42 b(W)-7 b(riteable)28 b(\034le)f(c)n(hec)n(k)j(.)41 b(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h -(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(7)863 1120 y(3.15)42 +(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(8)863 1120 y(3.15)42 b(P)n(ermissions)27 b(c)n(hec)n(k)d(.)42 b(.)f(.)h(.)f(.)h(.)g(.)f(.)h (.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.) -h(.)132 b(7)863 1269 y(3.16)42 b(Suid)28 b(group)f(\034le)g(c)n(hec)n +h(.)132 b(9)863 1269 y(3.16)42 b(Suid)28 b(group)f(\034le)g(c)n(hec)n (k)48 b(.)42 b(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h -(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(7)863 1418 +(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(9)863 1418 y(3.17)42 b(Uno)n(wned)28 b(\034le)f(c)n(hec)n(k)44 b(.)d(.)h(.)f(.)h (.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) -f(.)h(.)f(.)h(.)132 b(7)863 1567 y(3.18)42 b(Promiscuous)27 +f(.)h(.)f(.)h(.)132 b(9)863 1567 y(3.18)42 b(Promiscuous)27 b(c)n(hec)n(k)55 b(.)41 b(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f (.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 -b(7)863 1716 y(3.19)42 b(Listening)28 b(p)r(ort)f(c)n(hec)n(k)62 +b(9)863 1716 y(3.19)42 b(Listening)28 b(p)r(ort)f(c)n(hec)n(k)62 b(.)42 b(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.) -h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(7)863 1865 y(3.20)42 +h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(9)863 1865 y(3.20)42 b(P)n(asswd)27 b(\034le)h(in)n(tegrit)n(y)e(c)n(hec)n(k)37 b(.)42 b(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.) -g(.)f(.)h(.)f(.)h(.)132 b(8)863 2014 y(3.21)42 b(Shado)n(w)27 +g(.)f(.)h(.)f(.)h(.)132 b(9)863 2014 y(3.21)42 b(Shado)n(w)27 b(\034le)h(in)n(tegrit)n(y)e(c)n(hec)n(k)f(.)42 b(.)f(.)h(.)f(.)h(.)f (.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 -b(8)863 2163 y(3.22)42 b(System)28 b(securit)n(y)f(c)n(hec)n(k)f(ev)n +b(9)863 2163 y(3.22)42 b(System)28 b(securit)n(y)f(c)n(hec)n(k)f(ev)n (ery)h(midnigh)n(t)82 b(.)41 b(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f -(.)h(.)f(.)h(.)132 b(8)863 2312 y(3.23)42 b(All)28 b(system)g(ev)n(en)n +(.)h(.)f(.)h(.)132 b(9)863 2312 y(3.23)42 b(All)28 b(system)g(ev)n(en)n (ts)e(additionally)h(logged)f(to)i(/dev/tt)n(y12)82 b(.)42 -b(.)g(.)f(.)h(.)f(.)h(.)132 b(8)863 2462 y(3.24)42 b(Only)28 -b(ro)r(ot)e(can)h(sh)n(utdo)n(wn)50 b(.)42 b(.)g(.)f(.)h(.)f(.)h(.)f(.) -h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 -b(8)863 2611 y(3.25)42 b(Services)27 b(not)g(kno)n(wn)g(disabled)103 +b(.)g(.)f(.)h(.)f(.)h(.)90 b(10)863 2462 y(3.24)42 b(Only)28 +b(ro)r(ot)e(can)h(\020ctrl-alt-del\021)87 b(.)41 b(.)h(.)f(.)h(.)f(.)h +(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)90 +b(10)863 2611 y(3.25)42 b(Services)27 b(not)g(kno)n(wn)g(disabled)103 b(.)42 b(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.) -h(.)f(.)h(.)132 b(8)863 2760 y(3.26)42 b(Bo)r(ot)27 b(passw)n(ord)73 +h(.)f(.)h(.)90 b(10)863 2760 y(3.26)42 b(Bo)r(ot)27 b(passw)n(ord)73 b(.)41 b(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.) -f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(8)863 +f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)90 b(10)863 2909 y(3.27)42 b(Gran)n(t)27 b(connection)g(to)71 b(.)42 b(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f(.)h(.)f(.)h(.)g(.)f(.)h(.)f(.)h(.)f -(.)h(.)g(.)f(.)h(.)f(.)h(.)132 b(8)739 3141 y Fe(4)76 -b(T)-8 b(oDo)2465 b(9)739 3373 y(5)76 b(Author)2390 b(9)739 -3697 y Ff(1)131 b(In)l(tro)t(ducing)45 b(msec)739 3928 -y Fd(While)22 b(Lin)n(ux)g(is)g(b)r(eing)g(used)g(for)f(a)h(v)n(ery)f -(wide)h(range)f(of)h(applications,)g(from)f(basic)h(o\036ce)739 +(.)h(.)g(.)f(.)h(.)f(.)h(.)90 b(10)739 3141 y Fe(4)76 +b(T)-8 b(oDo)2418 b(10)739 3373 y(5)76 b(Author)2343 +b(10)739 3697 y Ff(1)131 b(In)l(tro)t(ducing)45 b(msec)739 +3928 y Fd(While)22 b(Lin)n(ux)g(is)g(b)r(eing)g(used)g(for)f(a)h(v)n +(ery)f(wide)h(range)f(of)h(applications,)g(from)f(basic)h(o\036ce)739 4028 y(w)n(ork)28 b(to)h(high)g(a)n(v)-5 b(ailabilit)n(y)28 b(serv)n(ers,)g(came)h(the)g(need)h(for)f(di\033eren)n(t)g(securit)n(y) g(lev)n(els.)41 b(It)739 4128 y(is)27 b(ob)n(vious)g(that)h(constrain)n @@ -1123,12 +1140,13 @@ b(the)g(end,)g(these)g(features)e(will)i(b)r(e)g(applied)g(to)f(y)n (el)f(y)n(ou)f(c)n(hose,)h(y)n(our)f(con\034guration)g(will)h(b)r(e)h (stored)e(in)n(to)291 2906 y(\020/etc/securit)n(y/msec/securit)n(y)-7 b(.conf)6 b(\021.)291 3204 y Fc(2.1)112 b(Lev)m(el)37 -b(0)291 3414 y Fd(This)28 b(lev)n(el)g(is)g(to)g(b)r(e)h(used)f(with)h -(care.)38 b(It)29 b(mak)n(es)e(y)n(our)h(system)g(more)f(easy)h(to)g -(use,)g(but)291 3514 y(v)n(ery)i(sensitiv)n(e)h(at)g(the)h(same)f -(time.)49 b(In)32 b(particular,)f(y)n(ou)g(shouldn't)h(use)f(this)h -(securit)n(y)291 3613 y(lev)n(el)27 b(if)h(y)n(ou)f(answ)n(er)f(y)n(es) -g(to)i(at)f(least)g(one)h(of)f(the)h(follo)n(wing)e(questions:)415 +b(0)g(\020W)-9 b(elcome)36 b(T)-9 b(o)37 b(Crac)m(k)m(ers\021)291 +3414 y Fd(This)28 b(lev)n(el)g(is)g(to)g(b)r(e)h(used)f(with)h(care.)38 +b(It)29 b(mak)n(es)e(y)n(our)h(system)g(more)f(easy)h(to)g(use,)g(but) +291 3514 y(v)n(ery)i(sensitiv)n(e)h(at)g(the)h(same)f(time.)49 +b(In)32 b(particular,)f(y)n(ou)g(shouldn't)h(use)f(this)h(securit)n(y) +291 3613 y(lev)n(el)27 b(if)h(y)n(ou)f(answ)n(er)f(y)n(es)g(to)i(at)f +(least)g(one)h(of)f(the)h(follo)n(wing)e(questions:)415 3858 y Fb(\017)41 b Fd(Is)28 b(m)n(y)f(computer)g(connected)g(to)h(the) g(In)n(ternet?)415 4034 y Fb(\017)41 b Fd(Is)28 b(m)n(y)f(computer)g (connected)g(to)h(other)f(computers)g(b)n(y)g(a)g(net)n(w)n(ork?)415 @@ -1143,9 +1161,9 @@ b(?)291 4907 y(As)29 b(w)n(e)g(see,)h(this)f(securit)n(y)g(lev)n(el)g (result)291 5006 y(in)f(big)h(problems)f(for)g(y)n(our)f(data.)1702 5255 y(3)p eop %%Page: 4 4 -4 3 bop 739 523 a Fc(2.2)112 b(Lev)m(el)37 b(1)739 714 -y Fd(The)30 b(main)g(securit)n(y)g(impro)n(v)n(emen)n(t)f(compared)g -(with)h(lev)n(el)g(0)g(is)g(that)h(no)n(w,)f(the)h(access)739 +4 3 bop 739 523 a Fc(2.2)112 b(Lev)m(el)37 b(1)h(\020P)m(o)s(or\021)739 +714 y Fd(The)30 b(main)g(securit)n(y)g(impro)n(v)n(emen)n(t)f(compared) +g(with)h(lev)n(el)g(0)g(is)g(that)h(no)n(w,)f(the)h(access)739 814 y(to)24 b(one)g(user's)f(stu\033)i(is)f(gran)n(ted)f(via)h (user-name)f(and)h(passw)n(ord.)34 b(So)24 b(it)g(ma)n(y)g(b)r(e)g (used)h(b)n(y)739 913 y(v)-5 b(arious)28 b(p)r(eople,)h(and)g(it)h(is)f @@ -1153,14 +1171,15 @@ y Fd(The)30 b(main)g(securit)n(y)g(impro)n(v)n(emen)n(t)f(compared)g 28 b(it)h(shouldn't)739 1013 y(b)r(e)d(used)g(for)f(a)h(connected)f (computer)h(whether)f(b)n(y)h(mo)r(dem)g(or)f(to)h(a)f(LAN)i(\(Lo)r (cal)e(Area)739 1113 y(Net)n(w)n(ork\).)739 1378 y Fc(2.3)112 -b(Lev)m(el)37 b(2)739 1569 y Fd(F)-7 b(ew)32 b(impro)n(v)n(emen)n(ts)e -(for)h(this)h(securit)n(y)f(lev)n(el,)h(the)g(main)f(one)h(is)f(that)h -(there)f(are)g(more)739 1669 y(securit)n(y)c(w)n(arnings)e(and)j(c)n -(hec)n(ks.)35 b(It)28 b(is)g(more)f(secure)f(for)h(m)n(ulti-users)g -(use.)739 1934 y Fc(2.4)112 b(Lev)m(el)37 b(3)739 2125 -y Fd(This)e(is)g(the)g(standard)f(securit)n(y)g(recommended)h(for)f(a)h -(computer)f(that)i(will)f(b)r(e)g(used)739 2225 y(to)30 -b(connect)g(to)g(the)g(In)n(ternet)g(as)f(a)h(clien)n(t.)44 +b(Lev)m(el)37 b(2)h(\020Lo)m(w\021)739 1569 y Fd(F)-7 +b(ew)32 b(impro)n(v)n(emen)n(ts)e(for)h(this)h(securit)n(y)f(lev)n(el,) +h(the)g(main)f(one)h(is)f(that)h(there)f(are)g(more)739 +1669 y(securit)n(y)c(w)n(arnings)e(and)j(c)n(hec)n(ks.)35 +b(It)28 b(is)g(more)f(secure)f(for)h(m)n(ulti-users)g(use.)739 +1934 y Fc(2.4)112 b(Lev)m(el)37 b(3)h(\021Medium\021)739 +2125 y Fd(This)d(is)g(the)g(standard)f(securit)n(y)g(recommended)h(for) +f(a)h(computer)f(that)i(will)f(b)r(e)g(used)739 2225 +y(to)30 b(connect)g(to)g(the)g(In)n(ternet)g(as)f(a)h(clien)n(t.)44 b(Most)30 b(of)g(securit)n(y)f(c)n(hec)n(ks)g(are)g(p)r(erio)r(dically) 739 2324 y(run,)k(sp)r(eci\034cally)e(one)h(that)g(c)n(hec)n(k)f(for)g (op)r(en)h(p)r(orts)f(on)h(the)g(system.)49 b(Ho)n(w)n(ev)n(er,)31 @@ -1175,8 +1194,8 @@ g(a)h(little)g(bit)g(more)f(closed,)i(so)739 2860 y(it'll)e(need)f n(hiev)n(e)f(some)h(sp)r(ecial)739 2960 y(op)r(erations.)i(The)28 b(securit)n(y)f(here)h(o\033ered)f(is)h(comparable)e(with)i(the)g(one)g (of)g(a)f(standard)739 3059 y(RedHat)h(or)e(previous)h(Mandrak)n(e)f -(distribution.)739 3325 y Fc(2.5)112 b(Lev)m(el)37 b(4)739 -3516 y Fd(With)f(this)f(securit)n(y)f(lev)n(el,)j(the)e(use)g(of)g +(distribution.)739 3325 y Fc(2.5)112 b(Lev)m(el)37 b(4)h(\020High\021) +739 3516 y Fd(With)e(this)f(securit)n(y)f(lev)n(el,)j(the)e(use)g(of)g (this)g(system)g(as)f(a)h(serv)n(er)e(b)r(ecomes)i(p)r(ossible.)739 3615 y(The)h(securit)n(y)e(is)i(no)n(w)f(high)h(enough)f(to)h(use)f (the)h(system)g(as)f(a)g(serv)n(er)f(whic)n(h)i(accept)739 @@ -1191,14 +1210,14 @@ b(adv)-5 b(anced)35 b(services)f(ha)n(v)n(e)g(b)r(een)i(disabled,)h 4151 y(Securit)n(y)40 b(c)n(hec)n(ks)f(will)h(w)n(arn)f(system)h (administrator)f(of)h(p)r(ossible)g(securit)n(y)f(holes)h(or)739 4251 y(in)n(trusions)26 b(on)i(the)g(system.)739 4516 -y Fc(2.6)112 b(Lev)m(el)37 b(5)739 4707 y Fd(W)-7 b(e)23 -b(tak)n(e)e(lev)n(el)h(4)g(features,)h(but)g(no)n(w)f(the)g(system)h -(is)f(en)n(tirely)g(closed.)34 b(Securit)n(y)22 b(features)739 -4807 y(are)34 b(at)i(their)f(maxim)n(um.)61 b(The)35 -b(system)h(administrator)e(has)h(to)g(activ)-5 b(ate)35 -b(p)r(orts,)i(and)739 4907 y(gran)n(t)i(connections)g(to)h(giv)n(e)f -(other)g(computers)g(access)g(to)h(services)f(o\033ered)g(b)n(y)h(this) -739 5006 y(mac)n(hine.)2150 5255 y(4)p eop +y Fc(2.6)112 b(Lev)m(el)37 b(5)h(\020P)m(aranoid\021)739 +4707 y Fd(W)-7 b(e)23 b(tak)n(e)e(lev)n(el)h(4)g(features,)h(but)g(no)n +(w)f(the)g(system)h(is)f(en)n(tirely)g(closed.)34 b(Securit)n(y)22 +b(features)739 4807 y(are)34 b(at)i(their)f(maxim)n(um.)61 +b(The)35 b(system)h(administrator)e(has)h(to)g(activ)-5 +b(ate)35 b(p)r(orts,)i(and)739 4907 y(gran)n(t)i(connections)g(to)h +(giv)n(e)f(other)g(computers)g(access)g(to)h(services)f(o\033ered)g(b)n +(y)h(this)739 5006 y(mac)n(hine.)2150 5255 y(4)p eop %%Page: 5 5 5 4 bop 291 523 a Ff(3)131 b(Securit)l(y)46 b(lev)l(els)f(features)291 899 y Fd(F)-7 b(ollo)n(ws)24 b(the)h(description)g(of)g(the)h @@ -1309,9 +1328,9 @@ b(system)f(ev)n(en)n(ts)g(additionally)789 3196 y(logged)26 b(to)h(/dev/tt)n(y12)p 2018 3226 V 2242 3226 V 2510 3226 V 2778 3226 V 2894 3097 a(*)p 3048 3226 V 228 w(*)p 3318 3226 V 228 w(*)p 3589 3226 V 739 3230 2852 4 v 737 3329 -4 100 v 789 3299 a(Only)g(ro)r(ot)g(can)g(sh)n(utdo)n(wn)p +4 100 v 789 3299 a(Only)g(ro)r(ot)g(can)g(\020ctrl-alt-del\021)p 2018 3329 V 2242 3329 V 2510 3329 V 2778 3329 V 3048 -3329 V 1493 w(*)p 3318 3329 V 228 w(*)p 3589 3329 V 739 +3329 V 1400 w(*)p 3318 3329 V 228 w(*)p 3589 3329 V 739 3333 2852 4 v 737 3432 4 100 v 789 3402 a(Services)f(not)i(kno)n(wn)f (disabled)p 2018 3432 V 2242 3432 V 2510 3432 V 2778 3432 V 3048 3432 V 1352 w(*)p 3318 3432 V 228 w(*)p 3589 @@ -1458,17 +1477,18 @@ eop (additionally)d(logged)i(to)g(/dev/tt)m(y12)739 723 y Fd(*All*)27 b(system)g(messages)f(directed)h(to)h(syslog)e(are)g (copied)i(to)f(tt)n(y12)g(console.)739 1001 y Fc(3.24)112 -b(Only)37 b(ro)s(ot)g(can)h(sh)m(utdo)m(wn)739 1202 y -Fd(Y)-7 b(ou)33 b(m)n(ust)h(b)r(e)g(ro)r(ot)f(\(or)g(referenced)f(in)n -(to)i(/etc/sh)n(utdo)n(wn.allo)n(w\))d(and)i(logged)f(in)n(to)i(a)739 -1301 y(console)26 b(to)i(b)r(e)g(able)f(to)g(sh)n(utdo)n(wn)g(or)g(reb) -r(o)r(ot)g(the)h(mac)n(hine.)739 1579 y Fc(3.25)112 b(Services)37 -b(not)g(kno)m(wn)h(disabled)739 1780 y Fd(All)29 b(services)e(not)h -(con)n(tained)f(in)n(to)i(\020/etc/securit)n(y/msec/init-sh/serv)n(er)o -(.4\021)g(for)f(lev)n(el)g(4)739 1879 y(or)36 b(\020serv)n(er.5\021)41 -b(for)36 b(lev)n(el)g(5)h(will)g(b)r(e)g(disabled.)64 -b(They)37 b(are)e(not)i(remo)n(v)n(ed,)h(but)f(simply)739 -1979 y(not)29 b(started)g(when)h(loading)e(a)h(runlev)n(el.)42 +b(Only)37 b(ro)s(ot)g(can)h(\020ctrl-alt-del\021)739 +1202 y Fd(Y)-7 b(ou)33 b(m)n(ust)h(b)r(e)g(ro)r(ot)f(\(or)g(referenced) +f(in)n(to)i(/etc/sh)n(utdo)n(wn.allo)n(w\))d(and)i(logged)f(in)n(to)i +(a)739 1301 y(console)26 b(to)i(b)r(e)g(able)f(to)g(reb)r(o)r(ot)g(the) +h(mac)n(hine)f(through)g(k)n(ey)g(binding)h(\020ctrl-alt-del\021.)739 +1579 y Fc(3.25)112 b(Services)37 b(not)g(kno)m(wn)h(disabled)739 +1780 y Fd(All)29 b(services)e(not)h(con)n(tained)f(in)n(to)i +(\020/etc/securit)n(y/msec/init-sh/serv)n(er)o(.4\021)g(for)f(lev)n(el) +g(4)739 1879 y(or)36 b(\020serv)n(er.5\021)41 b(for)36 +b(lev)n(el)g(5)h(will)g(b)r(e)g(disabled.)64 b(They)37 +b(are)e(not)i(remo)n(v)n(ed,)h(but)f(simply)739 1979 +y(not)29 b(started)g(when)h(loading)e(a)h(runlev)n(el.)42 b(If)30 b(y)n(ou)f(need)g(some)g(of)h(them,)g(just)g(add)g(them)739 2079 y(again)23 b(with)h(the)h(\020c)n(hk)n(con\034g\021)k(utilit)n(y) 24 b(\(y)n(ou)g(migh)n(t)g(also)f(need)h(to)g(restart)f(them)i(with)g -- cgit v1.2.1