Security Basics mailing list archives

[SuSe Linux] SecCheck tool by Marc Heuse


From: Andre Rodrigues <acastanheira2001 () yahoo com br>
Date: Thu, 2 Jul 2009 03:25:44 -0700 (PDT)


Hi,

I need to understand some issues reported by the seccheck tool that runs on linux boxes.

I´ve searched docs and howto´s on the internet but found anything.

Here are some examples:
_______________

Changes in your daily security configuration:

* Changes (+: new entries, -: removed entries):
+ sunrpc
+ The following NFS mounts haven't got the nosuid option set:
+ vb08:/opt/jboss on /opt/integrador/servidores/vb08 type nfs 
+ (rw,addr=***.***.***.***) 

                      I´ve replaced the real IP address by *.


* Changes (+: new entries, -: removed entries):
- mrtg       root   UDP *:38241 
- mrtg       root   UDP *:38242 
- mrtg       root   UDP *:38243 
- mrtg       root   UDP *:38244 
+ mrtg      root   UDP *:40480 
+ mrtg      root   UDP *:40481 
+ mrtg      root   UDP *:40482 
+ mrtg      root   UDP *:40483 


* Changes (+: new entries, -: removed entries):
- smtpd   postfix   TCP *:25 (LISTEN)

Checking the /etc/shadow file:
Login **** has an unsual password field length

       I´ve replaced the real login by *.

Checking the /etc/group file:
Group bin(1) has got the following members: daemon

The following loadable kernel modules are currently installed:

       There are many entries here.


What can I do about this?



 Thanks,
André





------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: