Re: [TCLUG:2459] TCLUG Meeting topic? Linux Security

[Mark Dalton <mwd@sgi.com>]

I sent a note to a friend of mine that has a ISP running on Linux
(and where they have had problems from time to time)..

There is a list of common security issues at www.cert.org.

Main places to look:
        http://www.linux.org/
        http://www.rootshell.com/
  **    http://www.ecst.csuchico.edu/~jtmurphy/
  **    http://www.linuxhq.com/HOWTO/Security-HOWTO.html
        http://www.linuxhq.com/
           http://www.linuxhq.com/guides/
            http://www.linuxhq.com/guides/NAG/node21.html#SECTION003510000
  **    http://www.cs.purdue.edu/coast/
  **    http://ciac.llnl.gov/

Firewall:
   http://www.tis.com/research/software/
   http://www.tis.com/prodserv/gauntlet/firewalls/index.html
   http://hem.passagen.se/hno/linux/firewall/
   http://www.eup.udl.es/ftp/linux/Firewall/

 (from: http://www.chariott.com/linapp4.html#http )
   http://www.xos.nl/linux/ipfwadm/
   http://www.els.url.es/~si03786/masq.html
   http://www.progressive-systems.com/firewall.html


  Apps again (for lots of applications):
	http://www.chariott.com/linapps.html
     security:
	http://www.nessus.org
        http://www.fish.com/satan/

That should be enough to get people started, and give people a chance to
read up before someone volunteers..


For Linux Specific security issues:
	http://www.cert.org/advisories/
	  (for various platforms this includes imap, sendmail and other problems)
	http://www.cert.org/ftp/cert_bulletins/VB-96.17.linux
		* this includes pointers to distributions and ftp locations
		  for the fixes.
	http://bach.cis.temple.edu/linux/linux-security

New articles:
	http://www.lwn.net/1998/1119/security.phtml
	
The Linux Security:
	http://www.geek-girl.com/bugtraq/index.html
	http://www.lh.umu.se/~bjorn/mhonarc-files/linux-security/
	http://www2.merton.ox.ac.uk/~security/
	http://www.wtfo.com/
	   ftp://ftp.wtfo.com/pub/mirrors/replay/
	http://www.linpeople.org/
	http://NetworkDNA.com/ (and NT 'security')

	Cincinnati Linux Users Group presentation on Security and Linux:
	   http://www.clug.org/presentations/security/index.html

Here are some Trinux (Linux Security toolkit):
	http://www.trinux.org/

-- 
Mark Dalton       CH3-S-CH2 H                      H      O       H
Silicon Graphics, Inc.  |   |                      |       \      |
Eagan, MN 55121         CH2-C-COO    //\ ---C--CH2-C-COO    C-CH2-C-COO
mwd@sgi.com                 |       |  ||   ||     |       //     |
                            NH3      \\/ \ / CH    NH3    O       NH3
                                          NH
My home page: http://www.cbc.umn.edu/~mwd/mwd.html
BEAM Robotics: http://www.webconn.com/~mwd/beam.html
WWW Cell Bio. course: http://www.cbc.umn.edu/~mwd/cell.html