SuSe Linux Hardening Post: 302661929

Sponsored Content

Top Forums UNIX for Advanced & Expert Users SuSe Linux Hardening Post 302661929 by Scrutinizer on Tuesday 26th of June 2012 01:46:38 AM

06-26-2012

Moderator

On SUSE I would use a good ftpd, try AppArmor, leave that firewall on and only allow the required ports and maybe also use TCP_wrappers (it can't hurt).

Last edited by Scrutinizer; 06-26-2012 at 03:43 AM..

This User Gave Thanks to Scrutinizer For This Post:

Scrutinizer

View Public Profile for Scrutinizer

Find all posts by Scrutinizer

2 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

suse linux 6.4-8.1

i need some help from somone familiar with suse linux. i am wanting to update my suse linux 6.4 box to suse linux 8.1. i am trying to do it with yast. and i want to do it via ftp. now, to do this the first thing i need to do is change my source media settings in yast, right now it is the cdrom....

2. SuSE

Suse LINUX

What is the equivalent of sun explorer in suse linux? Thanks

LEARN ABOUT CENTOS

unconfined

UNCONFINED(8)							     AppArmor							     UNCONFINED(8)

NAME

       aa-unconfined - output a list of processes with tcp or udp ports that do not have AppArmor profiles loaded

SYNOPSIS

       aa-unconfined

DESCRIPTION

       aa-unconfined will use netstat(8) to determine which processes have open network sockets and do not have AppArmor profiles loaded into the
       kernel.

BUGS

       aa-unconfined must be run as root to retrieve the process executable link from the /proc filesystem. This program is susceptible to race
       conditions of several flavours: an unlinked executable will be mishandled; an executable started before a AppArmor profile is loaded will
       not appear in the output, despite running without confinement; a process that dies between the netstat(8) and further checks will be
       mishandled. This program only lists processes using TCP and UDP. In short, this program is unsuitable for forensics use and is provided
       only as an aid to profiling all network-accessible processes in the lab.

       If you find any bugs, please report them to bugzilla at <http://bugzilla.novell.com>.

SEE ALSO

       netstat(8), apparmor(7), apparmor.d(5), change_hat(2), and <http://forge.novell.com/modules/xfmod/project/?apparmor>.

NOVELL
/SUSE							    2008-06-11							     UNCONFINED(8)