[B! security][linux] aki77ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

aki77 id:aki77

securityã¨linuxã«é–¢ã™ã‚‹aki77ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (26)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ç’°å¢ƒå¤‰æ•°ã€ãã—ã¦
5/20 é ƒã« å…¬é–‹ã—ãŸ envchain ã¨ã„ã†ãƒ„ãƒ¼ãƒ«ã®ç´¹ä»‹è¨˜äº‹ã‚’ã€ä¼šç¤¾ã®æŠ€è¡“ãƒ–ãƒã‚°ã«æ›¸ã„ãŸã€‚ OS X ã‚ãƒ¼ãƒã‚§ãƒ¼ãƒ³ã‹ã‚‰ç’°å¢ƒå¤‰æ•°ã‚’ã‚»ãƒƒãƒˆã™ã‚‹ãƒ„ãƒ¼ãƒ«ã‚’ä½œã‚Šã¾ã—ãŸ - ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰é–‹ç™ºè€…ãƒ–ãƒã‚° æŠ•ä¸‹æ™‚é–“ã®é–¢ä¿‚ã‚‚ã‚ã‚‹ã¨æ€ã†ã‘ã©ã€æ€ã„ã®ä»–çµæ§‹æ‹¡æ•£ã—ã¦ã³ã£ãã‚Šã—ãŸã€‚ã¾ã‚ã€ãã‚Œã¯ç½®ã„ã¦ãŠã„ã¦ã€æœ¬é¡Œã€‚ ãŠã‚‚ã—ã‚ã„ã€‚ãŒã€ps -Eã§ä»–ãƒ—ãƒã‚»ã‚¹ã§ç’°å¢ƒå¤‰æ•°ãŒè¦‹ãˆã‚‹ã“ã¨ã‚’è€ƒãˆã‚‹ã¨ã€ãã‚‚ãã‚‚ç’°å¢ƒå¤‰æ•°ã«èªè¨¼æƒ…å ±ã‚’å…¥ã‚Œã¦ã‚‹æ™‚ç‚¹ã§â€¦ / â€œOS X ã‚ãƒ¼ãƒã‚§ãƒ¼ãƒ³ã‹ã‚‰ç’°å¢ƒå¤‰æ•°ã‚’ã‚»ãƒƒãƒˆã™ã‚‹ãƒ„ãƒ¼ãƒ«ã‚’ä½œã‚Šã¾ã—ãŸ - ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰é–‹ç™ºè€…ãƒ–ãƒã‚°â€ http://t.co/n1quG3C4Tx â€” Kazuho Oku (@kazuho) June 4, 2014 ã”ã‚‚ã£ã¨ã‚‚ã ã¨æ€ã„ã¾ã™ã€‚ å®Ÿéš›ã®ã¨ã“ã‚ã€ã‚ãŸã—ã¯ãªã‚“ã‹ã€Œç’°å¢ƒå¤‰æ•°ã‚„ã‚ã‚ bot ã‹ã‚ˆã€ã¨è¨€ã‚ã‚Œã‚‹ãƒ¬ãƒ™ãƒ«ã§ã‚ã¾ã‚Šç’°å¢ƒå¤‰æ•°ã«æ©Ÿå¯†æƒ…å ±ã‚’å…¥ã‚Œã‚‹äº‹ã‚’å¥½ã‚“ã§ãªã„ã§ã™ã€‚ ãªã®ã«ã“
aki77 2014/07/14
linux

security
ãƒªãƒ³ã‚¯
LPI-Japanã€ã€ŒLinuxã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¨™æº–æ•™ç§‘æ›¸ã€PDFç‰ˆã¨EPUBç‰ˆã‚’ç„¡æ–™é…å¸ƒã€€
aki77 2013/10/01
linux

security
ãƒªãƒ³ã‚¯
iptablesã§é‰„å£ï¼Ÿã®å®ˆã‚Šã‚’å®Ÿç¾ã™ã‚‹3ã¤ã®Tipsï½œTechRacho by BPSæ ªå¼ä¼šç¤¾
iptablesã§ã‚µãƒ¼ãƒã‚’å®ˆã‚‹ã¨ãã«çŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã“ã¨ã‚’3ã¤ç´¹ä»‹ã—ã¾ã™ 1. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(IPã‚¢ãƒ‰ãƒ¬ã‚¹ã”ã¨) hash_limitã‚’ä½¿ã„ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šç‰¹å®šãƒ›ã‚¹ãƒˆã‹ã‚‰ã®å¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã€DoSæ”»æ’ƒã‚’ç·©å’Œã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ ä¾‹ 2. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨) limitã‚’ä½¿ã£ã¦åˆ¶é™ã—ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šå¤šæ•°ã®ãƒ›ã‚¹ãƒˆã‹ã‚‰ã®æ”»æ’ƒã€DDoSæ”»æ’ƒã‚’ç·©å’Œã—ã¾ã™ limitã‚’ä½¿ã£ãŸåˆ¶é™ã¯å…¨ãƒ›ã‚¹ãƒˆãŒç‰ã—ãåˆ¶é™ã‚’å—ã‘ã‚‹ãŸã‚ã€sshç‰ã«è¨å®šã™ã¹ãã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ï¼ˆæ”»æ’ƒã‚’å—ã‘ã¦ã„ã‚‹é–“ã¯è‡ªåˆ†ãŸã¡ã‚‚åˆ¶é™ã•ã‚Œã‚‹ãŸã‚ï¼‰ Webã‚µãƒ¼ãƒãŒå¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã§è½ã¡ãã†ãªå ´åˆã¯ä½¿ãˆã‚‹ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ä¾‹ 3. æŽ¥ç¶šIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’é™å®šã™ã‚‹ IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®å›½åˆ¥å‰²ã‚Šå½“ã¦ã‚’APNICç‰ã‹ã‚‰å–å¾—ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½œã‚Šã¾ã™ ã“ã®æ‰‹ã®ãƒ«ãƒ¼ãƒ«ã¯é•·ããªã‚‹ã®ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼å®šç¾©ãƒã‚§ã‚¤ãƒ³ã«ã—ãŸã»ã†ãŒè¦‹ã‚„ã™ããªã‚Šã¾ã™ ä¾‹ ã‚ã¨ã¯ã“ã‚“ãªæ„Ÿã˜ã®ã‚¹ã‚¯
aki77 2013/05/02
iptables

security

linux
ãƒªãƒ³ã‚¯
/etc/shadowã«ã¤ã„ã¦å‹‰å¼·ã—ã¦ã¿ãŸ
Linuxã§ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ç®¡ç†ã«ã¤ã„ã¦ /etc/passwdã«ã¤ã„ã¦ /etc/shadowã«ã¤ã„ã¦ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®ãƒãƒƒã‚·ãƒ¥åŒ–ã«ã¤ã„ã¦ Shadowã®é …ç›®ã«ã¤ã„ã¦ Hashæ–¹å¼ã«ã¤ã„ã¦ ãƒãƒƒã‚·ãƒ¥åŒ–ã¨ã¯ï¼Ÿ Saltã«ã¤ã„ã¦ å‚è€ƒæ–‡çŒ® 2012/11/05: è¡¨ç¤ºãŒä¹±ã‚Œã¦ã„ãŸã®ã§ä¿®æ£ã—ãŸã€‚(ä»Šè¦‹ã‚‹ã¨ã€ã‚ã‚“ã¾ã‚Šè¦‹ã‚„ã™ããªã„ãƒšãƒ¼ã‚¸ã â€¦) Linuxã§ãƒ¦ãƒ¼ã‚¶ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’ä¿ç®¡ã—ã¦ã„ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã¨ã„ãˆã°ã€ /etc/passed /etc/shadow ãŒã‚ã‚Šã¾ã™ã€‚ ä»¥ä¸‹ã§ã¯ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®æƒ…å ±ãªã©ã¯ /etc/shadow ã«ä¿ç®¡ã•ã‚Œã¦ã„ã‚‹çŠ¶æ³ã§ã€ãã‚Œãžã‚Œã©ã‚“ãªæƒ…å ±ãŒæ ¼ç´ã•ã‚Œã¦ã„ã‚‹ã‹ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ( /etc/passwdã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¿ç®¡ã—ãªã„ã®ã¯ã€/etc/passwdãŒä»–ã®ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰Readå¯èƒ½ãªãƒ•ã‚¡ã‚¤ãƒ«ã ã‹ã‚‰ã§ã™ã€‚ ãã—ã¦Readæ¨©é™ãŒãªã„ã¨å›°ã‚Šã¾ã™ã€‚/etc/passwdã‚’Read
aki77 2013/04/08
linux

security
ãƒªãƒ³ã‚¯
ã€Œãƒ‹ãƒ•ãƒ†ã‚£rã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ–ãƒã‚°ã€ã¯ã€ç§»è»¢ã—ã¾ã—ãŸã€‚
ã€Œãƒ‹ãƒ•ãƒ†ã‚£ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ–ãƒã‚°ã€ã¯ã€ç§»è»¢ã—ã¾ã—ãŸã€‚ è‡ªå‹•ã§ãƒšãƒ¼ã‚¸ã‚’ç§»å‹•ã—ãªã„å ´åˆã¯ã€ä¸‹è¨˜ã®ãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã€ æ–°ã—ã„ã€Œãƒ‹ãƒ•ãƒ†ã‚£ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ–ãƒã‚°ã€ã‚’ã”è¦§ãã ã•ã„ã€‚ ä»Šå¾Œã¨ã‚‚ã€Œãƒ‹ãƒ•ãƒ†ã‚£ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ–ãƒã‚°ã€ã‚’ã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ï¼ž ãƒ‹ãƒ•ãƒ†ã‚£ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ–ãƒã‚°
aki77 2012/02/23
ã€Žã‚¢ãƒ—ãƒªã®ãƒã‚°ã‚’ç›£è¦–ã—ã¦ç‰¹å®šã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã«å¼•ã£ã‹ã‹ã‚‹å‹•ä½œãŒè¨˜éŒ²ã•ã‚ŒãŸã‚‰ãƒ•ã‚¡ã‚¤ãƒ¤ã‚¦ã‚©ãƒ¼ãƒ«ã«å‹•çš„ã«ãƒ«ãƒ¼ãƒ«ã‚’è¿½åŠ ã—ã¦é€šä¿¡ã‚’ãƒ–ãƒãƒƒã‚¯ã€

linux

tool

security

iptables
ãƒªãƒ³ã‚¯
ã“ã‚Œãã‚‰ã„ã‚„ã£ã¨ã‘ã€€ã€œLinuxã‚µãƒ¼ãƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã€œ - nabeã®é›‘è¨˜å¸³
ç®¡ç†ä¸ã®ã‚µãƒ¼ãƒã§è¡Œã£ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’å…¬é–‹ã—ã¾ã™ã€‚æœ¬å½“ã¯ã“ã†ã„ã†ã“ã¨ã‚’å…¬é–‹ã™ã‚‹ã®ã¯ã‚ˆã‚ã—ããªã„ã®ã§ã™ãŒã€è„†å¼±ã‚µãƒ¼ãƒãŒæ°¾æ¿«ã—ã¦ã„ã‚‹ç¾çŠ¶ãã“ãŒè¸ã¿å°ã¨ãªã£ã¦sshã‚¢ã‚¿ãƒƒã‚¯ã•ã‚Œã‚‹ã®ã‚‚è¿·æƒ‘æ¥µã¾ã‚Šãªã„ã®ã§ã€æœ€ä½Žé™ã‚„ã£ã¨ã‘ã¨ã„ã†å†…å®¹ã§ã¾ã¨ã‚ã¾ã—ãŸã€‚*1 èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ iptables/Firewallã®è¨å®š iptablesã®ä¸èº« limit-burstã«ã¤ã„ã¦ hashlimitã«ã¤ã„ã¦ hosts.allow/hosts.deny(TCP Wrapper)ã®è¨å®š sshdã®è¨å®š ãã®ä»–ã®è¨å®š Apacheã®è¨å®š Postfixã®è¨å®š Dovecotã®è¨å®š ã¾ã¨ã‚ èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ Apache (www) sshd smtp/pop bind (DNS) ntpd ã„ãã¤ã‹ã®æ³¨æ„ç‚¹ã€‚ sftpã§ååˆ†ãªã®ã§ftpdã¯ä½¿ã‚ãªã„ã€‚WinSCPç‰ã‚’ä½¿ãˆã°ffftpã«ä¾å˜ã™ã‚‹å¿…è¦ã¯ãªã„ã€‚*2
aki77 2011/04/28
security

iptables

server

linux
ãƒªãƒ³ã‚¯
ç‰¹å®šIPã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é®æ–ã™ã‚‹æ–¹æ³• - satoru.netã®è‡ªç”±å¸³
Apacheã®Denyã§æ‹’å¦ã£ã¦ã‚‚ãã‚ŠãŒãªã„æ™‚ãªã©ã¯ã€Apacheã‚ˆã‚Šå‰ã®ãƒ¬ã‚¤ãƒ¤ãƒ¼ã§æ‹’å¦ã£ã¦ã—ã¾ãŠã†ã€‚ ç‰¹å®šã®IPã‹ã‚‰ã®80ãƒãƒ¼ãƒˆã¸ã®æŽ¥ç¶šã‚’é®æ– iptables -A OUTPUT -p tcp --sport 80 -d xxx.xxx.xxx.xxx -j DROPå®Œå…¨ã«é®æ–ã—ã¦ã—ã¾ã†ã¨ç›¸æ‰‹ã‚‚ã™ãæ°—ã¥ã‹ã›ã¦ã—ã¾ã†ã®ã§æ³¨æ„ã€‚ ç‰¹å®šã®IPã‹ã‚‰ã®80ãƒãƒ¼ãƒˆã¸ã®æŽ¥ç¶šã‚’1åˆ†é–“ã«10å›žé®æ– iptables -A OUTPUT -p tcp --sport 80 -d xxx.xxx.xxx.xxx -m limit --limit 10/minute -j DROPã‚¯ãƒ¬ãƒ¼ãƒžçš„ãªäººã«ã¯ã“ã£ã¡ãŒå‰ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã®æŒ™å‹•çš„ã«ã¯ãŸã¾ãƒ¼ã«ç¹‹ãŒã£ãŸã‚Šç¹‹ãŒã‚‰ãªã‹ã£ãŸã‚Šã™ã‚‹é‡ã„ã‚µã‚¤ãƒˆã‚’å½è£…ã€‚ ã‚ã‹ã‚‰ã•ã¾ã«Access Denyã§æŽ¥ç¶šæ‹’å¦ã«ãªã‚‹ã¨ã€ãƒ ãƒƒã¨ã•ã‚Œã‚‹ã‘ã©ã“ã‚Œã ã¨å¹³å’Œã«çµ‚æˆ¦ã€‚ è¨å®šã—ãŸåˆ¶é™ã‚’æ¶ˆã™ã¨ã ipta
aki77 2010/05/21
ã€Žã‚¯ãƒ¬ãƒ¼ãƒžçš„ãªäººã«ã¯ã“ã£ã¡ãŒå‰ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã®æŒ™å‹•çš„ã«ã¯ãŸã¾ãƒ¼ã«ç¹‹ãŒã£ãŸã‚Šç¹‹ãŒã‚‰ãªã‹ã£ãŸã‚Šã™ã‚‹é‡ã„ã‚µã‚¤ãƒˆã‚’å½è£…ã€‚ ã‚ã‹ã‚‰ã•ã¾ã«Access Denyã§æŽ¥ç¶šæ‹’å¦ã«ãªã‚‹ã¨ã€ãƒ ãƒƒã¨ã•ã‚Œã‚‹ã‘ã©ã“ã‚Œã ã¨å¹³å’Œã«çµ‚æˆ¦ã€‚ã€

iptables

linux

security
ãƒªãƒ³ã‚¯
Linux/UNIX ä¸Šã§ã‚³ãƒžãƒ³ãƒ‰ã®å®Ÿè¡Œå±¥æ´ã‚’æ®‹ã™æ–¹æ³•
æœ€è¿‘ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ã®è©±ãŒå¤šã„ãŒèº«ã®å›žã‚Šã§å¤šã„ã®ã§ã™ãŒã€ä»Šå›žã¯ã€Linux / UNIX ç³»ã§èª°ãŒã„ã¤ã©ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ãŸã‹ã£ã¦ã®ã‚’ãƒã‚°ã«ã¨ã‚‹æ–¹æ³•ã®ãŠè©±ã—ã§ã™ã€‚ ã€Œï¼ ITï¼šæ¢ã‚ã‚‰ã‚Œãªã„UNIXã‚µãƒ¼ãƒã®ç®¡ç†å¯¾ç– ç¬¬6å›ž - Page2ã€ã«ã‚‚å‚è€ƒã«ãªã‚‹ãƒã‚®ãƒ³ã‚°ã®è©±ãŒæŽ²è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€å®Ÿè¡Œã‚³ãƒžãƒ³ãƒ‰ã®ãƒã‚°ã‚’ã¨ã‚‹æ–¹æ³•ã¯ä»¥ä¸‹ã®ï¼•ã¤ãŒè€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ sudo ã‚’ä½¿ã£ã¦å®Ÿè¡Œãƒã‚°ã‚’ã¨ã‚‹ .bash_history ã‚’å®šæœŸçš„ã«ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¦å®Ÿè¡Œãƒã‚°ã¨ã—ã¦ä¿å˜ã™ã‚‹ script ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã†ã“ã¨ã§å®Ÿè¡Œãƒã‚°ï¼ˆç”»é¢å‡ºåŠ›ã®ã‚³ãƒ”ãƒ¼ï¼‰ã‚’ã¨ã‚‹ ã‚·ã‚¹ãƒ†ãƒ ã‚¢ã‚«ã‚¦ãƒ³ãƒ†ã‚£ãƒ³ã‚°æ©Ÿèƒ½ï¼ˆpsacctï¼‰ã‚’æœ‰åŠ¹ã«ã—ã¦å®Ÿè¡Œãƒã‚°ã‚’ã¨ã‚‹ å®Ÿè¡Œã‚·ã‚§ãƒ«ã‚’æ”¹é€ ã—ã€ãƒã‚°ã‚’ä¿å˜ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ åƒ•ãŒè€ƒãˆã¤ãã¨ã“ã‚ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«æœ€ã‚‚å¼·å›ºã§ã‚ã‚‹ã®ã¯ã‚·ã‚§ãƒ«ã®æ”¹é€ ã¨æ€ã„ã¾ã™ã€‚ä½†ã—ã€ãã® OS ä¸Šã§ä½¿ãˆã‚‹ Shell ã‚’ãã®æ”¹é€ Shell ã®ã¿ã«é™å®š
aki77 2009/12/12
linux

security

log

shell
ãƒªãƒ³ã‚¯
rootã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¿…è¦ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’æ›¸ãå ´åˆã®æ³¨æ„ç‚¹ - ã‚¹ã‚³ãƒˆãƒ—ãƒªã‚´ãƒ‹ã‚¨ãƒ•ã‚¹ã‚¯é€šä¿¡
MySQLã®rootãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¿…è¦ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’æ›¸ãå ´åˆã€ #!/bin/bash mysqladmin -uroot -ptiger ping ã®ã‚ˆã†ã«ã‚¹ã‚¯ãƒªãƒ—ãƒˆè‡ªä½“ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ›¸ãã®ã§ã¯ãªãã€rootã®HOMEãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®.my.cnf(/root/.my.cnf)ã®ä¸ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ›¸ãã€rootãƒ¦ãƒ¼ã‚¶ã«ã—ã‹èªã‚ãªã„ã‚ˆã†ã«600ã«ã—ã¦ãŠãã€‚ # cat > /root/.my.cnf [client] user = root password = tiger [mysqladmin] user = root password = tiger # chown root:root /root/.my.cnf # chmod 600 /root/.my.cnf ã¨ã€ã“ã“ã¾ã§ã¯ã„ã„ã®ã ãŒã€ãƒ†ã‚¹ãƒˆã¨ã—ã¦ã€ $ sudo mysqladmin ping mysqladmin: co
aki77 2009/11/16
mysql

linux

security
ãƒªãƒ³ã‚¯
UNIXç³»OSã®ã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹ã‚¤ã‚¿ã‚ºãƒ©é›† - yuyarinã®æ—¥è¨˜
éšæ™‚è¿½åŠ ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚’ç«‹ã¡ä¸Šã’ãŸã¾ã¾å¸ã‚’é›¢ã‚Œã‚‹ã¨ãƒžã‚·ãƒ³ã«ã‚¤ã‚¿ã‚ºãƒ©ã•ã‚Œã‚‹ã“ã¨ãŒã‚ˆãã‚ã‚‹ï¼Žã¨ã¯ã„ãˆã‚·ãƒ£ãƒ¬ã«ãªã‚‰ãªã„ã‚¤ã‚¿ã‚ºãƒ©ã¯ã—ã¦ã‚‚ç¬‘ãˆãªã„ã®ã§ï¼ŒåŸºæœ¬çš„ã«ã¯æ•™è‚²çš„ã«åŠ¹æžœãŒã‚ã£ã¦è¢«å®³ã®å‡ºãªã„ã‚‚ã®ã—ã‹å®Ÿéš›ã«ã¯ã—ãªã„ï¼Ž ã˜ã‚ƒã‚ï¼ŒãŸã¨ãˆ root ã˜ã‚ƒãªãã¦ã‚‚ã©ã“ã¾ã§ãˆã’ã¤ãªã„ã“ã¨ãŒã§ãã‚‹ã®ã‹*1ï¼Œä»Šå›žã¯ã¡ã‚‡ã£ã¨è€ƒãˆã¦ã¿ãŸãƒ¦ãƒ¼ã‚¶æ¨©é™ã§ã§ãã‚‹é…·ã„ã‚¤ã‚¿ã‚ºãƒ©ã‚’ç´¹ä»‹ã™ã‚‹ï¼Žå¯¾è±¡ã¯ãƒªãƒ¢ãƒ¼ãƒˆãƒã‚°ã‚¤ãƒ³ã™ã‚‹ UNIX ç³» OS ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒï¼Œä¸»ã« Ubuntu ã§ã‚ã‚‹ï¼Ž ls ãŒ sl æ–¹æ³• alias ls=sl sl ã‚’æœŸå¾…ã—ãŸã¨ã„ã†æ„è¦‹ãŒå¤šã‹ã£ãŸã®ã§æŽ²è¼‰ï¼ŽæŽ²è¼‰ã—ãªã‹ã£ãŸã®ã¯ sl ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ãªã„ç’°å¢ƒãŒå¤šãï¼Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¯ root æ¨©é™ãŒå¿…è¦ã«ãªã‚‹ã‹ã‚‰ï¼Žå¾Œè¿°ã®ãƒã‚¤ãƒŠãƒªã‚’æŒã¡è¾¼ã‚“ã§ãƒ‘ã‚¹ã‚’é€šã™æ–¹æ³•ã‚’ä½¿ãˆã°ã§ããªã„ã“ã¨ã¯ãªã„ã‹ã‚‚ï¼Ž ã‚¨ãƒ‡ã‚£ã‚¿ãƒ¼ãŒå…¨éƒ¨ ed æ–¹æ³• alias nano=ed alias
aki77 2009/09/08
linux

neta

security
ãƒªãƒ³ã‚¯
Â» ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨: ã‚¨ã‚¹ã‚ãƒ¥ãƒ¼ãƒ“ã‚ºãƒ ãƒ©ãƒœ Blog
Recent Entries ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨ Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡ºAPIãƒ©ã‚¤ãƒ–ãƒ©ãƒª ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ GoogleAnalyticsAPI on EC-CUBE åœŸæ—¥ã§ä½œã‚‹ã‚³ãƒ³ãƒ‘ã‚¤ãƒ© OPEN ERPã«æŒ‘æˆ¦ï¼“ OPEN ERPã«æŒ‘æˆ¦ï¼’ OPEN ERPã«æŒ‘æˆ¦ ERPã¯ãŸãã•ã‚“ã‚ã‚Œã©ãƒ»ãƒ»ãƒ» OpenGLã§3Dã€ã‚„ã£ã¦ã¿ã‚ˆã† Recent Comments No Responses. Recent Trackbacks ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ 06/11 Â» Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡º... ã¿ãªã•ã‚“ã¯ã‚µãƒ¼ãƒã‚’ç®¡ç†ã™ã‚‹ã¨ãã«ã€ä½•ã‚’ä¸€ç•ªæ°—ã«ã—ã¾ã™ã‹ï¼Ÿ äººã«ã‚ˆã£ã¦ç¨‹åº¦ã®å·®ã¯ã‚ã‚‹ã®ã§ã—ã‚‡ã†ãŒã€èª°ã‚‚ãŒæ°—ã«ãªã‚‹ã®ãŒã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã§ã—ã‚‡
aki77 2009/06/19
security

linux

centos
ãƒªãƒ³ã‚¯
ç’°å¢ƒå¤‰æ•°ã«IDã‚„PASSWORDã‚’è¨å®šã—ãªã‘ã‚Œã°ãªã‚‰ãªã„çŠ¶æ³ã§ã€ID/PASSWORDã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã«å¹³æ–‡ã§ä¿å˜ã—ãŸã‚Šã‚·ã‚§ãƒ«ã®å±¥æ´ã«æ®‹ã—ãŸããªã„ (Kanasansoft Web Lab.)
zshã‚’å‰æã«ã—ã¦ã„ã‚‹ãŒã€å•é¡Œã®è§£æ±ºæ–¹æ³•ãŒé‡è¦ãªã®ã§ã€ã¡ã‚‡ã£ã¨è¨˜è¿°ã‚’å¤‰æ›´ã™ã‚Œã°ä»–ã®ã‚·ã‚§ãƒ«ã§ã‚‚ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã¯ãšã€‚ã¾ãŸã€æš—å·åŒ–ã«ã¯ã€Œgpgã€ã®å…±é€šéµæš—å·åŒ–æ–¹å¼(å¯¾è±¡éµ)ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã€‚
aki77 2009/05/08
gpg, ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰

zsh

linux

security

shell
ãƒªãƒ³ã‚¯
ã¯ã˜ã‚ã¦ã®è‡ªå®…ã‚µãƒ¼ãƒæ§‹ç¯‰ - Fedora/CentOS - yum pluginã€Œyum-securityã€ã®å°Žå…¥
å‹•ä½œç¢ºèªã€€[ Fedora7 / Fedora8 / Fedora9 / Fedora10 / Fedora11 / Fedora12 / Fedora13 / Fedora14 / Fedora15 / Fedora16 / Fedora17 / CentOS5 / CentOS6 ] â– yum-securityã¨ã¯ãƒ»ãƒ»ãƒ» ã€Œyum-securityã€ã¨ã¯ã€å¤šã€…ã‚ã‚‹æ›´æ–°ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®å†…ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã¿å¯¾è±¡ã¨ã™ã‚‹äº‹ãŒã§ãã¾ã™ã€‚ ã‚µãƒ¼ãƒé‹ç”¨ã•ã‚Œã¦ã„ã‚‹ç®¡ç†è€…ã®ä¸ã«ã¯ã€è„†å¼±æ€§ã‚’é™¤ã„ãŸãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®æ›´æ–°ã¯è¡Œã„ãŸããªã„ã¨è¨€ã†æ–¹ãŒãŠã‚‰ã‚Œã‚‹ã¨æ€ã„ã¾ã™ãŒã€ã“ã®ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã¯ã“ã†ã„ã†æ–¹ã€…ã«ã¯æœ€é©ãªã‚‚ã®ã¨è¨€ãˆã‚‹ã§ã—ã‚‡ã†ã€‚ â– yum pluginã€Œyum-securityã€ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã€Œyum-securityã€ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã€Fedora7 ã‹ã‚‰ Fedora10 / CentOS
aki77 2008/09/03
linux

security

yum
ãƒªãƒ³ã‚¯
ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å®Ÿè¡Œæ¨©é™ã‚’æŸ”è»Ÿã«å‰²ã‚Šå½“ã¦ã‚‹sudoã®ãƒªã‚¹ã‚¯ã¨ãƒ¡ãƒªãƒƒãƒˆ
rootãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ãªãã‚¢ã‚¯ã‚»ã‚¹ç¯„å›²ã‚’æœ€å°é™åŒ–ã—ãŸä¸Šã§å¿…è¦ãªæ¨©é™ã‚’ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸Žãˆã‚‰ã‚Œã‚‹sudoã€‚ã“ã“ã§ã¯sudoã«ã¤ã„ã¦ãã®ãƒªã‚¹ã‚¯ã¨ãƒ¡ãƒªãƒƒãƒˆã€ãã—ã¦æŸ”è»Ÿãªã‚·ã‚¹ãƒ†ãƒ é‹ç”¨ã«å½¹ç«‹ã¦ã‚‹ãŸã‚ã®å¹¾ã¤ã‹ã®TIPSã‚’ç´¹ä»‹ã—ã‚ˆã†ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ã®ã‚¸ãƒ§ãƒ–ã«ã„ã•ã•ã‹ã§ã‚‚ã‹ã‹ã‚ã‚Šã‚’æœ‰ã™è€…ã§ã‚ã‚Œã°ã€rootæ¨©é™ãªã„ã—rootãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸Žãˆã‚‹ã®ã¯å¾¡æ³•åº¦ã§ã‚ã‚‹ã¨å¿ƒå¾—ã¦ã„ã‚‹ã¯ãšã ã€‚ã—ã‹ã—ã€æ£å½“ãªç†ç”±ãŒã‚ã£ã¦rootæ¨©é™ä¸‹ã§ã®å‡¦ç†ã‚’å®Ÿè¡Œã™ã‚‹å¿…è¦ã«è¿«ã‚‰ã‚ŒãŸä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå‡ºã¦ããŸå ´åˆã¯ã©ã†ã™ã‚Œã°ã„ã„ã®ã ã‚ã†ã‹ï¼Ÿã€€ãã†ã—ãŸå•é¡Œã«ã¯éžå¸¸ã«ã‚·ãƒ³ãƒ—ãƒ«ãªè§£ç”ãŒå˜åœ¨ã™ã‚‹ã€‚sudoã‚’ä½¿ãˆã°ã€rootãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ãªãã‚¢ã‚¯ã‚»ã‚¹ç¯„å›²ã‚’æœ€å°é™åŒ–ã—ãŸä¸Šã§å¿…è¦ãªæ¨©é™ã‚’ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸Žãˆã‚‹ã“ã¨ãŒã§ãã‚‹ã®ã§ã‚ã‚‹ã€‚ sudoï¼ˆsuperuser doã®ç•¥ï¼‰ã¯ã€ç®¡ç†æ¨©é™ã‚’åˆ¶é™ä»˜ãã§ã»ã‹ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸Žãˆã‚‹ãŸã‚ã®ãƒ—ãƒ
aki77 2008/02/25
sudo

linux

security
ãƒªãƒ³ã‚¯
ä»™çŸ³æµ©æ˜Žã®æ—¥è¨˜: chroot ã•ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‹ã‚‰è„±å‡ºã—ã¦ã¿ã‚‹
è¦ç´„ã™ã‚Œã°ã€ ã€Œchrootãªã‚“ã¦ç°¡å˜ã«æŠœã‘ã‚‰ã‚Œã‚‹ã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›®çš„ã§ä½¿ã£ã¦ã‚‚æ„å‘³ãªã„ã‚ˆã€‚ã€ ã£ã¦ã“ã¨ãã€‚ãã†ã ã£ãŸã®ã‹ã€‚ ãã†ã ã£ãŸã®ã‹ orz Note that this call does not change the current working directory, so that `.' can be outside the tree rooted at `/'. In particular, the super-user can escape from a `chroot jail' by doing `mkdir foo; chroot foo; cd ..'. chroot ã™ã‚‹ã¨ãã¯ã€ãã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ chdir ã—ã¦ãŠãã®ãŒå¸¸è˜ã¨ æ€ã£ã¦ã„ãŸã®ã§æ°—ã¥ã„ã¦ã„ãªã‹ã£ãŸã€‚ ã¤ã¾ã‚Šã€ æ•…æ„ã«ã‚«ãƒ¬ãƒ³ãƒˆãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ chroot å¤–ã¸ã‚‚ã£ã¦ã„ã‘ã°ã€ chroot ã•ã‚ŒãŸ
aki77 2007/09/29
security

linux
ãƒªãƒ³ã‚¯
ClamAVã®ãƒšãƒ¼ã‚¸
ã“ã®ã‚µã‚¤ãƒˆã«ã¤ã„ã¦ ã“ã®ã‚µã‚¤ãƒˆã¯ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆ Clam Antivirus (ç•¥ç§°ClamAV) ã«ã¤ã„ã¦ã®æ—¥æœ¬èªžã®æƒ…å ±ã‚’é›†ã‚ãŸéžå…¬å¼ã®ã‚µã‚¤ãƒˆã§ã™ã€‚æœ€æ–°ã§æ£å¼ãªæƒ…å ±ã«ã¤ã„ã¦ã¯ClamAVã®ã‚ªãƒªã‚¸ãƒŠãƒ«ã‚µã‚¤ãƒˆ (http://www.clamav.net/) ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ Clam Antivirusã«ã¤ã„ã¦ Clam Antivirusã¯Tomasz Kojmç‰ã«ã‚ˆã£ã¦é–‹ç™ºãƒ»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã•ã‚Œã¦ã„ã‚‹Linuxã‚„BSDã€Mac OS Xãªã©å„ç¨®UNIXç³»ã®ã‚·ã‚¹ãƒ†ãƒ ã§å‹•ä½œã™ã‚‹ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚½ãƒ•ãƒˆã§ã™ã€‚ã‚·ã‚°ãƒãƒãƒ£ã«ã‚ˆã‚‹ãƒ‘ã‚¿ãƒ¼ãƒ³ãƒžãƒƒãƒãƒ³ã‚°æ–¹å¼ã‚’æŽ¡ç”¨ã—ã¦ã„ã¦ã€2004å¹´5æœˆ27æ—¥ã®æ™‚ç‚¹ã§ç´„21,694ç¨®é¡žã®ã‚¦ã‚¤ãƒ«ã‚¹ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚GPLãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã«å¾“ã£ã¦åˆ©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ Clam Antivirusã«ã¤ã„ã¦googleãªã©ã§æ¤œç´¢ã™ã‚‹ã¨ãã¯ã€Œc
aki77 2007/09/29
ã€Žã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆ Clam Antivirus (ç•¥ç§°ClamAV) ã«ã¤ã„ã¦ã®æ—¥æœ¬èªžã®æƒ…å ±ã‚’é›†ã‚ãŸéžå…¬å¼ã®ã‚µã‚¤ãƒˆã€

linux

security
ãƒªãƒ³ã‚¯
gpg ã§æ¨™æº–å…¥åŠ›ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¸¡ã—ã¦ãƒãƒƒãƒå‡¦ç†ã§æš—å·åŒ– - Landscape - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ¡ãƒ¢ 2004-01-08
Landscape ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ | < å‰ã®æ—¥ 2004-01-07 2004-01-08 æ¬¡ã®æ—¥ 2004-01-09 > Landscape - ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ¡ãƒ¢Â 2004-01-08 å½“ã‚µã‚¤ãƒˆå†…ã‚’ Google æ¤œç´¢ã§ãã¾ã™ * gpg ã§æ¨™æº–å…¥åŠ›ã‹ã‚‰ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’æ¸¡ã—ã¦ãƒãƒƒãƒå‡¦ç†ã§æš—å·åŒ–ã“ã®è¨˜äº‹ã®ç›´ãƒªãƒ³ã‚¯URL: Permlink | ã“ã®è¨˜äº‹ãŒå±žã™ã‚‹ã‚«ãƒ†ã‚´ãƒª: [gpg] --batch ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¨ --passphrase-fd ã‚’çµ„ã¿åˆã‚ã›ã‚‹ã“ã¨ã§ã€æ¨™æº–å…¥åŠ›ã‹ã‚‰ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã‚’æ¸¡ã—ã¦æš—å·åŒ–ã§ãã‚‹ã€‚ $ echo passphrase | gpg --passphrase-fd 0 --batch -c data.txt --passphrase-fd ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ã€gpg --help ã«ã¯è¨˜è¼‰ã•ã‚Œã¦ã„ãªã„ã®ã§ man ã‚’å‚ç…§ã®ã“ã¨ã€‚ --passphrase-fd n Re
aki77 2007/09/22
gpg

linux

security
ãƒªãƒ³ã‚¯
sanonosaã€€ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†ã‚³ãƒ©ãƒ é›†: Linuxã§ãã“ãã“å®‰å…¨ã‹ã¤æ¥½ã«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹æ–¹æ³•
ã€1.åˆã‚ã«ã€‘ è¦æœ›ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€ä»Šå›žã¯Linuxï¼ˆå®Ÿéš›ã¯Redhatç³»Linuxï¼‰ã§ãã“ãã“å®‰å…¨ã‹ã¤æ¥½ã«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹éš›ã®æ‰‹é †ã‚’è¨˜ã—ã¦ã¿ã¾ã™ã€‚ â€»ä¸€å¿œæ³¨æ„ï¼šä»Šå›žã¯ã€è©¦ã—ã«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹ç¨‹åº¦ã§ã‚ã‚Œã°ã“ã®ãã‚‰ã„ã§ååˆ†ã§ã¯ãªã„ã‹ã¨æ€ã†ãƒ¬ãƒ™ãƒ«ã‚’æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ã‚µãƒ¼ãƒ“ã‚¹ã«æŠ•å…¥ã™ã‚‹ã‚µãƒ¼ãƒã§ã¯ç§ã¯ã‚‚ã£ã¨ç´°ã‹ã„ã¨ã“ã‚ã¾ã§æ‰‹ã‚’å…¥ã‚Œã¦ã„ã¾ã™ã€‚ ã€2.ãã“ãã“å®‰å…¨ã‹ã¤æ¥½ã«ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹æ‰‹é †ã€‘ ã•ã¦ã€ã„ã‚ˆã„ã‚ˆæœ¬é¡Œã§ã™ã€‚ã‚µãƒ¼ãƒã‚’ç«‹ã¦ã‚‹éš›ã¯ã€ä¸å¿…è¦ãªã‚‚ã®ã‚’å…¨ã¦å–ã‚Šé™¤ã„ã¦ã‹ã‚‰å¿…è¦ãªã‚‚ã®ã‚’è¿½åŠ ã—ã¦ã„ãã¨ã„ã†ã®ãŒåŸºæœ¬ã«ãªã‚Šã¾ã™ã€‚ä»¥ä¸‹ã®æ‰‹é †1ï½ž5ã§ã¯ä¸è¦ãªã‚‚ã®ã®é™¤åŽ»ã€æ‰‹é †6ï½ž7ã§å¿…è¦ãªã‚‚ã®ã‚’è¿½åŠ ã—ç¢ºèªã—ã¦ã„ã¾ã™ã€‚ãã‚Œã‚’è¸ã¾ãˆã¾ã—ã¦ã€‚ â– æ‰‹é †1. OSã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚(ç§ã¯Linuxã§ã‚ã‚Œã°CentOSã‚’å…¥ã‚Œã‚‹ã“ã¨ãŒå¤šã„ã§ã™ã€‚ãã®éš›ç§ã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã®ç¨®é¡žã‚’ã‚«ã‚¹ã‚¿ãƒ ã«ã—ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚°ãƒ«ãƒ¼ãƒ—ã®é¸æŠžã§ã¯é–‹ç™ºãƒ„ãƒ¼ãƒ«ä»¥å¤–å…¨éƒ¨ãƒ
aki77 2007/09/19
server

security

linux
ãƒªãƒ³ã‚¯
ã‚¦ãƒŽã‚¦ãƒ©ãƒœ Unoh Labs: å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã™ã‚‹ã¨ãã«ã¾ãšè¡Œã†ï¼”ã¤ã®è¨å®š
ã“ã‚“ã°ã‚“ã¯ã€æœ€è¿‘å¯’ã„å¤œãŒç¶šã„ã¦ã„ã¦è‡ªè»¢è»Šé€šå‹¤ãŒã¤ã‚‰ããªã£ã¦ããŸ naoya ã§ã™ã€‚ ã‚¦ãƒŽã‚¦ã§ã¯ã€ãƒ•ã‚©ãƒˆè”µã‚„ç¤¾å†…ã‚·ã‚¹ãƒ†ãƒ ãªã©ã¯ã€ã™ã¹ã¦å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã—ã¦é‹ç”¨ã‚’ã—ã¦ã„ã¾ã™ã€‚ ä»Šæ—¥ã¯ã€å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã™ã‚‹ã¨ãã«ã€åƒ•ãŒã‚¦ãƒŽã‚¦ã§å¦ã‚“ã å°‚ç”¨ã‚µãƒ¼ãƒã§ã¾ãšè¡Œã†ï¼”ã¤ã®è¨å®šã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ ãªãŠã€ä»Šå›žã®è¨å®šã¯ã™ã¹ã¦ Fedora Core 5 ã‚’ã‚‚ã¨ã«ã—ã¦ã„ã¾ã™ã€‚ (1) sudo ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ sudo ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚sudo ã‚³ãƒžãƒ³ãƒ‰ã¯ã€åˆ¥ã®ãƒ¦ãƒ¼ã‚¶ã¨ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹ã‚³ãƒžãƒ³ãƒ‰ã§ã™ã€‚ sudo ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€/etc/sudoers ã« sudo ã‚’è¨±å¯ã™ã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ã‚’è¿½åŠ ã—ã¾ã™ã€‚æ¬¡ã®ä¾‹ã¯ã€unoh ã‚°ãƒ«ãƒ¼ãƒ—ã‚’è¿½åŠ ã™ã‚‹ä¾‹ã§ã™ã€‚ %unoh ALL = (ALL) ALL, !/bin/su, /bin/su postgres, /bin/su * postgres
aki77 2007/03/16
linux

security

server
ãƒªãƒ³ã‚¯
mputã®æ—¥è¨˜ã€‚ - , rootã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æ½°ã•ãªã„ã»ã†ãŒã„ã„ã¨æ€ã†ä»¶
aki77 2007/03/15
linux

security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸