 |
|
|
|
|
>> Read No. 11787 article |
|
|
서버운영시 보안상 /etc밑의 퍼미션변경은?
|
 |
|
|
|
등록 2000-11-17 12:58:00
조회 2
이름 초보관리자
|
|
|
/etc밑에 있는 화일및 서브디렉토리을 서버작동에 지장을 주지 않는 범위내
에서 보안상 계정사용자가 볼수없도록 하려면 각각의 화일의 퍼미션을 어떻게
바꿔주는게 좋을까요?
예)passwd 화일빼고는 모두 chmod 끝자리 0을 넣어서 nobody가 못보도록 한다
------------------------------------------------------------------------
drwxr-x--x 27 root root 3072 Nov 15 09:52 ./
drwxr-xr-x 18 root root 1024 Jul 1 15:48 ../
-rw------- 1 root root 0 Jun 30 00:34 .pwd.lock
-rw-r--r-- 1 root root 2434 Mar 8 2000 DIR_COLORS
-rw-r--r-- 1 root root 15 Oct 31 05:14 HOSTNAME
-rw-r--r-- 1 root root 5472 Mar 2 2000 Muttrc
drwxr-xr-x 4 root root 1024 Jun 30 00:34 X11/
-rw-r--r-- 1 root root 45 Nov 8 15:28 adjtime
-rw-r--r-- 1 root root 732 Feb 18 2000 aliases
-rw-r--r-- 1 root root 20480 Nov 11 23:03 aliases.db
-rw-r--r-- 1 root root 370 Mar 4 2000 anacrontab
-rw------- 1 root root 1 Mar 2 2000 at.deny
-rw-r--r-- 1 root root 650 Jun 30 10:45 bashrc
drwxr-xr-x 2 root root 4096 Jun 30 00:35 charsets/
-rw------- 1 root root 285 Nov 2 23:14 conf.linuxconf
-rw-r--r-- 1 root root 87 Jun 30 00:36 conf.modules
drwxr-xr-x 2 root root 1024 Feb 4 2000 cron.d/
drwxr-xr-x 2 root root 1024 Oct 25 21:42 cron.daily/
drwxr-xr-x 2 root root 1024 Aug 27 1999 cron.hourly/
drwxr-xr-x 2 root root 1024 Aug 27 1999 cron.monthly/
drwxr-xr-x 2 root root 1024 Jun 30 00:35 cron.weekly/
-rw-r--r-- 1 root root 255 Aug 27 1999 crontab
-rw-r--r-- 1 root root 220 Jan 13 2000 csh.cshrc
-rw-r--r-- 1 root root 674 Jan 14 2000 csh.login
drwxr-x--- 2 root root 1024 Jun 30 00:34 default/
-rw-rw-r-- 1 root disk 0 Mar 3 2000 dumpdates
-rw-r--r-- 1 root root 0 Jan 13 2000 exports
-rw-r--r-- 1 root root 1246 Mar 7 2000 fdprm
-rw-r--r-- 1 root root 43 Feb 18 2000 filesystems
-rw-r--r-- 1 root root 845 Oct 26 23:49 fstab
-rw-r--r-- 1 root root 473 Jul 6 10:11 ftpusers
-rw-r--r-- 1 root root 2362 Mar 7 2000 gettydefs
-rw-r--r-- 1 root root 1756 Mar 1 2000 gpm-root.conf
-rw-r--r-- 1 root root 408 Nov 14 21:37 group
-rw------- 1 root root 419 Nov 14 21:37 group-
-r-------- 1 root root 322 Nov 14 21:37 gshadow
-rw------- 1 root root 330 Nov 14 21:37 gshadow-
-rw-r--r-- 1 root root 26 Jan 13 2000 host.conf
-rw-r--r-- 1 root root 120 Nov 6 21:43 hosts
-rw-r--r-- 1 root root 161 Jan 13 2000 hosts.allow
-rw-r--r-- 1 root root 347 Jan 13 2000 hosts.deny
---------- 1 root root 0 Jul 6 09:50 hosts.equiv
drwxr-xr-x 3 root root 1024 Jun 30 16:07 httpd/
-rw-r--r-- 1 root root 1758 Feb 23 2000 identd.conf
-rw-r--r-- 1 root root 2968 Oct 24 10:25 inetd.conf
-rw-r--r-- 1 root root 11980 Jun 30 00:36 info-dir
-rw-r--r-- 1 root root 562 Mar 9 2000 initlog.conf
-rw-r--r-- 1 root root 1757 Nov 2 23:08 inittab
-rw-r--r-- 1 root root 413 Feb 6 2000 inputrc
-rw------- 1 root root 60 Oct 31 05:14 ioctl.save
-rw-r--r-- 1 root root 1000 Jan 29 2000 isapnp.gone
-rw-r--r-- 1 root root 14 Oct 31 05:15 issue
-rw-r--r-- 1 root root 9 Jun 30 10:02 issue.net
-rw-r--r-- 1 root root 560 Mar 9 2000 krb5.conf
-rw-r--r-- 1 root root 11746 Jun 30 00:36 ld.so.cache
-rw-r--r-- 1 root root 59 Jun 30 00:35 ld.so.conf
-rw------- 1 root root 315 Nov 2 22:29 lilo.conf
-rw-r--r-- 1 root root 152 Jun 30 00:36 localtime
-rw-r--r-- 1 root root 1180 Feb 17 2000 login.defs
-rw-r--r-- 1 root root 886 Nov 16 12:04 logrotate.conf
drwxr-xr-x 2 root root 1024 Jun 30 16:07 logrotate.d/
-rw-r--r-- 1 root root 5803 Feb 3 2000 ltrace.conf
-rw-r--r-- 1 root root 126891 Feb 8 2000 lynx.cfg
drwxr-xr-x 2 root root 1024 Jun 30 00:36 mail/
-rw-r--r-- 1 root root 112 Feb 4 2000 mail.rc
-rw-r--r-- 1 root root 9415 Feb 8 2000 mailcap
-rw-r--r-- 1 root root 9222 Feb 8 2000 mailcap.vga
-rw-r--r-- 1 root root 3397 Mar 1 2000 man.config
-rw-r--r-- 1 root root 7470 Jun 30 00:34 mime.types
-rw-r--r-- 1 root root 0 Jan 13 2000 motd
-rw-r--r-- 1 root root 237 Oct 31 05:14 mtab
-rw-r--r-- 1 root root 188 Feb 4 2000 named.boot
-rw-r--r-- 1 root root 4011 Nov 8 17:15 named.conf
drwxr-xr-x 2 root root 1024 Jun 30 00:36 nmh/
-rw-r--r-- 1 root root 1744 Jun 30 00:36 nsswitch.conf
drwxr-xr-x 2 root root 1024 Jul 1 11:15 pam.d/
-rw-r--r-- 1 root root 3724 Nov 14 21:41 passwd
-rw-r--r-- 1 root root 3756 Nov 14 21:40 passwd-
-rwxr-xr-x 1 root root 1362 Feb 11 2000 pbm2ppa.conf*
drwxr-xr-x 3 root root 1024 Jun 30 00:35 pcmcia/
-rw-r--r-- 1 root root 13820 Mar 8 2000 pine.conf
-rw-r--r-- 1 root root 427 Mar 8 2000 pine.conf.fixed
-rw-r--r-- 1 root root 2287 Feb 11 2000 pnm2ppa.conf
drwxr-xr-x 2 root root 1024 Jun 30 00:34 ppp/
-rw-r--r-- 1 root root 289 Jan 13 2000 printcap
-rw-r--r-- 1 root root 547 Feb 17 2000 profile
drwxr-xr-x 2 root root 1024 Jun 30 00:36 profile.d/
-rw-r--r-- 1 root root 1752 Nov 15 09:51 proftpd.conf
-rw-r--r-- 1 root root 1567 Jan 13 2000 protocols
-rw-r--r-- 1 root root 134 Feb 3 2000 pwdb.conf
drwxr-xr-x 10 root root 1024 Oct 18 14:55 rc.d/
-rw-r--r-- 1 root root 33 Mar 9 2000 redhat-release
-rw-r--r-- 1 root root 94 Jul 1 16:56 resolv.conf
lrwxrwxrwx 1 root root 11 Jun 30 00:34 rmt -> ../sbin/rmt*
-rw-r--r-- 1 root root 1595 Mar 1 2000 rpc
drwxr-xr-x 2 root root 1024 Mar 2 2000 rpm/
-r--r--r-- 1 root root 3564 Mar 7 2000 screenrc
-rw------- 1 root root 40 Oct 21 01:45 securetty
drwxr-xr-x 3 root root 1024 Jun 30 00:35 security/
-rw-r--r-- 1 root root 32486 Jul 6 13:03 sendmail.cf
-rw-r--r-- 1 root root 847 Nov 8 17:15 sendmail.cw
-rw-r--r-- 1 root root 1275 Feb 18 2000 sendmail.mc
-rw-r--r-- 1 root root 11349 Jun 30 00:35 services
-r-------- 1 root root 3537 Nov 14 21:41 shadow
-r-------- 1 root root 3563 Nov 14 21:40 shadow-
-r-------- 1 root root 628 Jun 29 20:45 shadow-_org
-r-------- 1 root root 673 Jun 29 20:45 shadow_org
-rw-r--r-- 1 root root 66 Jun 30 00:35 shells
drwxr-xr-x 2 root root 1024 Jun 30 00:36 skel/
drwxr-xr-x 2 root root 1024 Feb 18 2000 smrsh/
drwxr-xr-x 2 root root 1024 Jun 30 00:36 snmp/
drwxr-xr-x 2 root root 1024 Nov 7 14:21 ssh2/
drwxr-xr-x 6 root root 1024 Jun 30 00:36 sysconfig/
-rw-r--r-- 1 root root 267 Mar 9 2000 sysctl.conf
-rw-r--r-- 1 root root 686 Feb 4 2000 syslog.conf
-rw-r--r-- 1 root root 625272 Mar 6 2000 termcap
drwxr-xr-x 2 root root 1024 Jun 30 00:36 vga/
-rw-r--r-- 1 root root 17246 Jul 7 09:47 webalizer.conf
-rw-r--r-- 1 root root 17227 Jul 3 12:47 webalizer.conf.sample
-rw-r--r-- 1 root root 361 Jun 30 00:36 yp.conf
-rw-r--r-- 1 root root 1398 Mar 7 2000 ypserv.conf
 | |
|
|
|
|
페이지로딩: [ 1.98 초 ]
작업시간: [ 1.09 초 ]
|
|
|
|
![[TOP]](/images/color///top.gif)
|
|
|
|
|
|
|
Copyleft (C) 1998-2001
Byeong-Chan Kim
. License
|
TIME: 1789716877
|
|
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.
|
![[ 적수네 동네 ]](/images/button/lsn.gif){kind=small}
![[ 리눅스 상표권 독점 반대 ]](/images/button/savelinux.gif){kind=small}
![[ 한글 리눅스 문서 프로젝트 ]](/images/button/kldp1.gif){kind=small}
![[ KrLine ]](/images/button/linux01.gif){kind=small}
![[ 사랑넷 ]](/images/button/sarangnet.jpg){kind=small}
![[ Valid HTML 4.0! ]](/images/button/w3.gif){kind=small}
![[ SlashDot ]](/images/button/slashbutton.gif){kind=small}
![[ Freshmeat ]](/images/button/freshmeat.gif){kind=small}