Additional Security Features for Linux and *BSD Systems
Short summary:
mainly all Linux/*BSD/Unix systems. . root is god. . discretionary access control (DAC) model. . applications require root privileges ...
Long summary:
Additional Security Features for Linux and *BSD SystemsPage 1Software DamageReductionSELinuxFreeBSD JailsAdditional Security Featuresfor Linux and *BSD SystemsMarcel Hrry 2007Page 2Software DamageReductionOverview:Introduction common problemsPossible SolutionsSELinux overview technical stuff dis/advantagesdemoFreeBSD Jails overview technical stuff dis/advantagesConclusionPage 3Software DamageReductionCommon security problems of(web)applications and services (I):Shared Hosting/Services (web ftp sshshells):user/applications has access to other users/applications data(noncgi php nonchrooted ftp etc.)and system resources (like /etc/passwd devices sockets etc.)Unknown user code old exploitable codemalicious code uploaded by users etc.Page 4Software DamageReductionCommon security problems of (web)applications and services (II):Exploitable applications:possibility of changing data under service privilegespossibility to execute arbitrary code like a shell > access to the system with service privilegespossibility to gain more access (local root exploits > access to the whole system)insecure authentication and authorisation (weak access to the system)Page 5Software DamageReductionSource of specific problems onmainly all Linux/*BSD/Unix systemsroot is goddiscretionary access control (DAC) modelapplications require root privilegesmultiuser systems with untrusted usersPage 6Software DamageReductionConclusionMultiple data sources multiple users multiple services on one system can be a problem asnormal Operating SystemRestrictions do not takefinegrained care and separation of it.We need more fine grained access restrictionand / or service user resource separation.Page 7Software DamageReductionSeveral solutions securing established operatingsystems to secure against some many or (incombination) nearly all presented security issues are available:Solutions:Security Enhanced Linux (SELinux)GRSecurityPAXChrootingFreeBSD Jails...Page 8Software DamageReductionSELinux (Security E ...
Source: diuf.unifr.ch
Search Terms:
Related
Files under this topic are not filed yet. Please use search bar to find other one
