Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Linux auditing checklist, documents

Subject: Re: Linux auditing checklist, documents
Date: Tue, 19 Dec 2006 13:30:58 +0530
On 17/12/06 11:25 +0100, urandom character special device wrote:
I am Linux System Administrator at a telecom provider. Our customer
inform us to send soon independent security auditors to have a look at
our Linux systems. They will have a root password and make an in deep
analysis of the systems.

 am not quite sure I would allow a random third party root access to my
 servers.
 
I wish to prepare. What "commands" and "config files" they will look?
Are there Linux Security Guidelines? They wont use automated tools.

I am not an auditor, so take this with a pinch of salt:

Lots of Linux security guidelines on the net. Personally, I would look at
permissions on config files, up-to-dateness of patches, running
processes, and a comparison of your configuration against your security
policy.

Devdas Bhagat

<Prev in Thread] Current Thread [Next in Thread>