UNIX for Dummies Questions & Answers

hi,

what are the Security checks need to be performed and at what frequency ?

thanks

It matters.

Is the system stand-alone, not connected to a network ? Then you only have to worry about physical security (someone walking up to it and messing with it)

Is it production? development? Connected to a lan or wan? Now you have to worry about physical security and connections from the network. You have to look at user accounts, shared disks, insecure services (ftp, telnet, .... ), untested applications/code, ... the list goes on. Is access from the internet allowed?

First, check your logging files - since you didn't post what OS, not all of these may pertain to your situation. Read the man page for each file or service.
/etc/syslog.conf syslogd
/etc/services
/etc/inittab
/etc/inetd.conf inetd
/etc/dfs/dfstab
Check your /etc/rc2.d and /etc/rc3.d startup files for what is being started on your server. Check that syslog is logging messages to files and that those files are being looked at either manually or by a automated script.

Search these forums for key words - including whatever OS you are using to come up with a better idea of what you need in your situation. Also check the FAQ section for reading material.