Xerox FREEFLOW 701P46740 Sicherheitshandbuch - Seite 15
Blättern Sie online oder laden Sie pdf Sicherheitshandbuch für Software Xerox FREEFLOW 701P46740 herunter. Xerox FREEFLOW 701P46740 38 Seiten. Print server
Seite drucken
Solaris file permissions
Disabling secure name service databases
Multicast routing disabled
OS and host information hidden
Security Guide
Secure File Permission options can be enabled or disabled
through the Xerox FreeFlow Print Server interface. Fix-modes
include:
•
fixmodes-xerox: fix file permissions for all packages to
make them more secure. Available under the System tab
under the "Secure File Permissions" drop-down menu.
•
fixmodes-solaris: fix file permissions only for Solaris
packages to make them more secure. Available under the
System tab under the "Secure File Permissions" drop-
down menu.
The fix-modes utility (from the Solaris Security Toolkit) adjusts
group and world write permissions. It is run with the '-s' option to
secure file permissions for Solaris files that were created at install
time only. Customer-generated files are not affected.
NOTE: When this command is run, a file called /var/sadm/install/
content.mods is left. Do not delete this file. It contains valuable
information needed by fix modes to revert the changes to the
system file permissions if the security setting is changed back to
medium.
The following databases are disabled when security is invoked:
•
passwd(4)
•
group(4)
•
exec_attr(4)
•
prof_attr(4)
•
ser_attr(4)
Multicast is used to send data to many systems at the same time
while using one address.
The ftp, telnet and sendmail banners are set to null so that users
in cannot see the hostname and OS level.
11