HP Tru64 UNIX v5 security management

Prerequisites

Students should be able to log in to an HP Tru64 UNIX system as a system administrator, use an editor to write and debug simple shell programs, and manage files and directories. Students should also be able to install HP Tru64 UNIX software subsets, add and remove users from the system, customize the system configuration file and build a new kernel, and create, mount and backup file systems.

Audience

This course is designed for UNIX system administrators who require experience in the advanced topics of HP Tru64 UNIX system security.

Ways to save

Benefits to you

This course will show students how to use multiple interfaces, and provide the needed practice and preparation for the HP Tru64 UNIX v5 advanced administration, support and performance certification exam.

Course outline

• Security overview
• Security terms and concepts
• Threats to a computer system
• Basic security model
• Orange book
• HP Tru64 UNIX and security
• Improving base level security
• Managing accounts with commands
• Division of privileges
• Managing accounts with CDE
• Security guidelines
• Protecting files
• Checking security issues
• TCP/IP network guidelines
• Workstation guidelines
• Historical security holes
• SUID and SGID programs
• Security concerns
• Security case - Morris
• Access control lists
• ACL overview
• ACL commands
• ACL decision process
• ACL maintenance
• Administering ACLs
• Enhanced security
• Overview
• Setting up system security
• Rebooting files after setup
• Authorization controls and tools
• Protected password database fields
• Using edauth
• Lock file
• Manual add of account
• Protected subsystems
• Time values
• Auditing
• Overview
• Audit records
• Audit data recovery
• Auditing tools
• Setting up auditing
• Audit events
• Enabling auditing
• Object selection and deselection
• Process targeting
• Audit log files
• Audit reports
• Trusted system troubleshooting and recovery
• Backup strategy
• Recovery
• Recovery procedure
• Troubleshooting trusted systems
• Ensuring system integrity
• Appendix A: Miscellaneous security topics
• Hacker articles
• Reference monitor
• Access control
• CDE common desktop environment
• Network security concerns
• Firewalls
• Policy, procedures, and the law
• Security integration architecture (SIA)