Flashcards
System Hardening (D-6)
Cards in this deck (28)
- 1What are the 2 primary location in Solaris where network based services are started?/etc/inetd.conf
/etc/rc*d.d - 2What are the 2 ways of starting and stopping network network services on a LINUX system?1) edit the actual service in the /etc/xinitd.d
2) chkconfig commad - 3What is the syntax used to ensure services do not start up at boot time?Simply rename the service
mv /etc/rc2.d/S71rpc /etc/rc2.d/s71rpc - 4this allows you to login on a remote system and starts a shell?Secure Shell (SSH)
- 5what is the syntax execute a ssh session?# ssh jeriel@192.1.1.1
- 6On a Solaris system, how do we ensure that certain network services are not started up at boot time?1) rename the network/service script with a lower case "s" or comment (pound) it out located in the /etc/inetd.conf
- 7The Telnet banner can be secured by hiding or modifying the information displayed. True or FalseTRUE
- 8Where will the administrator create a banner for the telnet service?/etc/default/telnetd
- 9what file stores the system's default banner?/etc/modt
- 10The sendmail banner can be hidden. to modify, edit which file is used?/etc/mail/sendmail.cf
- 11True or False: You can secure the use of the EXPN and VFRY commands in the /etc/mail/sendmail.cfTRUE
- 12This program allows system admins a hig degree of control over incoming TCP connections.TCP Wrappers
(CONDOMS) - 13This program can be setup to monitor incoming requests from telnet, finger, FTP, exec, rsh, rlogin and other services.TCP Wrappers
- 14To apply a TCP Wrapper on a service you go to the /etc/inetd.conf and modify the service line to re-route to tcpd for further filtering true or falsetrue
- 15True or false: Access can be controlled per host, per service, or combinations thereof utilizing access control files.True
- 16What are the 2 access control files?/etc/hosts.allow
/etc/hosts.deny - 17This access control file grants access when a client and service pair matches an entry/etc/hosts.allow
- 18This access control file denies access when a client or service pair does not match/etc/hosts.deny
- 19Daemon: client : optional shell Example of /etc/hosts.allow in.telnetd : 175.45.101.2FYI: just be able to Identify it.
just remeber
DAEMON : CLIENT - 20This command allows for a user to remotely log into another host on the network communication via TCP port 513.rlogin
- 21True or False: with rlogin enabled you can configure the service to only allow connections from specific hosts.True
- 22rlogin allows logins without a password if the remote host appears in the /etc/hosts.equiv file or if the user trying to rlogin has a .rhosts file in their home directory. User must have a valid matching user account on both local and remote systems. True or FalseTrue
- 23this file can be created and configured to allow only trusted hosts and users to login remotely/etc/hosts.equiv
- 24This file can be configured by root or the user to allow their trusted machines and usernames to remotely login to the local machine~/.rhosts
- 25What is the difference with these in regards to trust? /etc/hosts.equiv ~/.rhosts/etc/hosts.equiv = system trust
~/.rhosts = user trust - 26What file is configured by the USER to allow THEIR trusted hosts to login to their machines remotely?~/.rhosts
- 27What file can be created and configured to allow only SYSTEM's trusted hosts and users to login remotely?/etc/hosts.equiv
- 28given an example of the format for access control for allowing a host with an IP address of 10.90.111.71 to connect via FTPin.ftpd: 10.90.111.71
Information
- Description
- College Unix Flashcards on System Hardening (D-6), created by jeriel.juarbe on 23/08/2014.
- Created by
- jeriel.juarbe
- Views
- 17
- Rating
More on Endpoint and Operating System Hardening