Book Home

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Index: P

pacct file : 10.2. The acct/pacct Process Accounting File
pack program : 6.6.1.2. Ways of improving the security of crypt
packet sniffing : 16.3.1. Link-level Security
packet-switching networks : 16.2. IPv4: The Internet Protocol Version 4
packets : (see IP packets)
paper
backups on : 24.5.1. Never Trust Anything Except Hardcopy
copies : 7.3.2. Building an Automatic Backup System
logging on : 10.7. Handwritten Logs
shredders for : 12.3.3. Other Media
throwing out : 12.3.3. Other Media
parent processes : C.2. Creating Processes
partitions : 25.2.2.4. Using partitions to protect your users
backup by : 7.1.3. Types of Backups
root : (see root directory)
pass phrases : (see passwords)
pass phrases for PGP
6.6.3.1. Encrypting files with IDEA
(see also passwords)
passive FTP
17.3.2.2. Passive vs. active FTP
17.3.2.3. FTP passive mode
passwd command
3.4. Changing Your Password
8.6.2. What Is Salt?
as SUID program : 5.5. SUID
-l option
8.4.1. Changing an Account's Password
8.8.8. Disabling an Account by Changing Its Password
-n option : 8.8.6. Password Aging and Expiration
-x option : 8.8.6. Password Aging and Expiration
-f nomemory option : 3.5. Verifying Your New Password
using as superuser : 3.5. Verifying Your New Password
passwd file
1.2. What Is an Operating System?
3.2.1. The /etc/passwd File
3.2.2. The /etc/passwd File and Network Databases
4.2.3. Impact of the /etc/passwd and /etc/group Files on Security
7.1.2. What Should You Back Up?
8.1.1. Accounts Without Passwords
8.6. The UNIX Encrypted Password System
15.1.4. How the UUCP Commands Work
24.4.1. New Accounts
C.5.1. Process #1: /etc/init
(see /etc/passwd file)
Passwd table (NIS+) : 19.5.3. NIS+ Tables
passwd+ package
8.8.2. Constraining Passwords
8.8.4. Password Generators
password coach : 8.8.4. Password Generators
password file : 19.4.4.6. NIS is confused about "+"
password modems : 14.6. Additional Security for Modems
password.adjunct file : 8.8.5. Shadow Password Files
passwords
3.2. Passwords
3.6.1. Bad Passwords: Open Doors
3.8. Summary
23.5. Tips on Using Passwords
accounts without : 8.1.1. Accounts Without Passwords
assigning to users : 8.8.1. Assigning Passwords to Users
avoiding conventional
8.8. Administrative Techniques for Conventional Passwords
8.8.9. Account Names Revisited: Using Aliases for Increased Security
bad choices for
3.6.1. Bad Passwords: Open Doors
3.6.4. Passwords on Multiple Machines
changing
3.4. Changing Your Password
3.5. Verifying Your New Password
8.4.1. Changing an Account's Password
8.8.8. Disabling an Account by Changing Its Password
checklist for : A.1.1.2. Chapter 3: Users and Passwords
constraining : 8.8.2. Constraining Passwords
conventional : 3.2.6. Conventional UNIX Passwords
cracking
8.6.1. The crypt() Algorithm
8.8.3. Cracking Your Own Passwords
8.8.3.2. The dilemma of password crackers
17.3.3. TELNET (TCP Port 23)
encrypting
8.6. The UNIX Encrypted Password System
8.6.4. Crypt16() and Other Algorithms
expiring : 8.8.6. Password Aging and Expiration
federal jurisdiction over : 26.2.2. Federal Jurisdiction
FTP and : 17.3.2. (FTP) File Transfer Protocol (TCP Ports 20 and 21)
generators of : 8.8.4. Password Generators
hit lists of : 3.6.1. Bad Passwords: Open Doors
Kerberos : 19.6.5. Kerberos Limitations
logging changes to : 10.7.2.1. Exception and activity reports
logging failed attempts at : 10.5.3. syslog Messages
for MUDs : 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)
on multiple machines
3.6.4. Passwords on Multiple Machines
3.6.5. Writing Down Passwords
over network connections : 23.3. Tips on Writing Network Programs
with network services : 17.4. Security Implications of Network Services
NIS, with Secure RPC : 19.3.2.1. Creating passwords for users
NIS+, changing : 19.5.4.1. Changing your password
one-time
3.7. One-Time Passwords
8.7. One-Time Passwords
8.7.3. Code Books
17.4. Security Implications of Network Services
with POP : 17.3.10. Post Office Protocol (POP) (TCP Ports 109 and 110)
required for Web use
18.3.2. Commands Within the <Directory> Block
18.3.3. Setting Up Web Users and Passwords
shadow
8.4.1. Changing an Account's Password
8.8.5. Shadow Password Files
sniffing
1.4.3. Add-On Functionality Breeds Problems
3. Users and Passwords
8.7. One-Time Passwords
system clock and : 17.3.14. Network Time Protocol (NTP) (UDP Port 123)
token cards with : 8.7.2. Token Cards
unique, number of : 3.6.3. Good Passwords: Locked Doors
usernames as : 8.8.3.1. Joetest: a simple password cracker
UUCP accounts : 15.3.2. Establishing UUCP Passwords
verifying new : 3.5. Verifying Your New Password
wizard's (sendmail) : 17.3.4.1. sendmail and security
writing down : 3.6.5. Writing Down Passwords
patches, logging : 10.7.2.2. Informational material
patents : 26.4.4. Patent Concerns
and cryptography : 6.7.1. Cryptography and the U.S. Patent System
PATH variable
8.1.4.1. Restricted shells under System V UNIX
8.1.4.6. Potential problems with rsh
23.4. Tips on Writing SUID/SGID Programs
attacks via : 11.5.1.1. PATH attacks
pathnames : 23.2. Tips on Avoiding Security-related Bugs
paths : 5.1.3. Current Directory and Paths
trusted : 8.5.3.1. Trusted path
pax program : 7.4.2. Simple Archives
PCERT (Purdue University) : F.3.4.30. Purdue University
PCs
viruses on : 11.1.5. Viruses
web server on : 18.2. Running a Secure Server
PDP-11 processors
1.3. History of UNIX
8.6.1. The crypt() Algorithm
Penn State response team : F.3.4.29. Pennsylvania State University
per-machine logs : 10.7.2. Per-Machine Logs
per-site logs : 10.7.1. Per-Site Logs
performance
compromised
25.2.1. Process-Overload Problems
25.2.1.2. System overload attacks
reviews : 13.2.3. Performance Reviews and Monitoring
with Secure RPC : 19.3.4. Limitations of Secure RPC
using FFS : 25.2.2.6. Reserved space
perimeter, security : 12.1.1. The Physical Security Plan
perl command
-T option
18.2.3.4. Tainting with Perl
23.4. Tips on Writing SUID/SGID Programs
Perl programming language
5.5.3. SUID Shell Scripts
11.1.4. Trojan Horses
11.5.1.2. IFS attacks
random seed generator : 23.9. A Good Random Seed Generator
script for reading lastlog file : 10.1.1. lastlog File
Swatch program
10.6. Swatch: A Log File Tool
10.6.2. The Swatch Configuration File
E.4.9. Swatch
tainting facility : 18.2.3.4. Tainting with Perl
permissions
1.1. What Is Computer Security?
5.1.6. Understanding File Permissions
5.2.4. Using Octal File Permissions
11.1.5. Viruses
11.6.1. File Protections
11.6.1.3. World-readable backup devices
access control lists (ACLs)
5.2.5. Access Control Lists
5.2.5.2. HP-UX access control lists
changing
5.2.1. chmod: Changing a File's Permissions
5.2.4. Using Octal File Permissions
directory : 5.4. Using Directory Permissions
/etc/utmp file : 10.1.2. utmp and wtmp Files
intruder's modifications to : 24.4.1.2. Changes in file and directory protections
modem devices : 14.5.2. Setting Up the UNIX Device
modem files : 14.5.1. Hooking Up a Modem to Your Computer
of NIS+ objects : 19.5.5. NIS+ Limitations
octal
5.2.3. Calculating Octal File Permissions
5.2.4. Using Octal File Permissions
of .rhosts file : 17.3.18.4. The ~/.rhosts file
SUID programs
5.5. SUID
5.5.7. SGID Bit on Files (System V UNIX Only): Mandatory Record Locking
symbolic links and : 5.1.7. File Permissions in Detail
umasks
5.3. The umask
5.3.2. Common umask Values
UUCP : 15.4.1.4. Special permissions
Permissions file
15.5. Security in BNU UUCP
15.5.1. Permissions File
15.5.3. uucheck: Checking Your Permissions File
checking with uucheck : 15.5.3. uucheck: Checking Your Permissions File
personnel : (see employees)
PGP (Pretty Good Privacy)
6.6.3. PGP: Pretty Good Privacy
6.6.3.6. PGP detached signatures
-eat and -seat options : 6.6.3.3. Encrypting a message
encrypting message with : 6.6.3.3. Encrypting a message
encrypting Web documents : 18.4.1. Eavesdropping Over the Wire
-ka option : 6.6.3.2. Creating your PGP public key
-kg option : 6.6.3.2. Creating your PGP public key
-kvc option : 6.6.3.6. PGP detached signatures
-kxaf option : 6.6.3.2. Creating your PGP public key
-o option : 6.6.3.6. PGP detached signatures
-sat option : 6.6.3.4. Adding a digital signature to an announcement
-sb option : 6.6.3.6. PGP detached signatures
software signature : E.4. Software Resources
ph (phonebook) server : 17.3.8.3. Replacing finger
phantom mail : 17.3.4.2. Using sendmail to receive email
physical security
12. Physical Security
12.4.2. "Nothing to Lose?"
access control : 12.2.3. Physical Access
of backups
7.1.6. Security for Backups
7.1.6.3. Data security for backups
checklist for : A.1.1.11. Chapter 12: Physical Security
modems
14.5.4. Physical Protection of Modems
14.6. Additional Security for Modems
read-only filesystems : 9.1.2. Read-only Filesystems
signal grounding : 25.3.3. Signal Grounding
PIDs (process IDs)
C.1.3.1. Process identification numbers (PID)
C.1.3.4. Process groups and sessions
Pieprzyk, Josef : 6.5.4.3. HAVAL
PingWare program : 17.6.3. PingWare
pipe (in Swatch program) : 10.6.2. The Swatch Configuration File
pipes
18.2.3.2. Testing is not enough!
18.2.3.3. Sending mail
pipes (for smoking) : 12.2.1.2. Smoke
piracy of software
26.4.2.1. Software piracy and the SPA
(see also software)
pirated software : (see software)
plaintext attacks : 6.2.3. Cryptographic Strength
.plan file : 17.3.8.1. The .plan and .project files
platforms : (see operating systems)
play accounts : (see open accounts)
playback attacks : 19.6.1.2. Using the ticket granting ticket
plus sign (+)
in hosts.equiv file : 17.3.18.5. Searching for .rhosts files
in NIS
19.4. Sun's Network Information Service (NIS)
19.4.4.6. NIS is confused about "+"
Point-to-Point Protocol (PPP) : 14.5. Modems and UNIX
policy, security
1.2. What Is an Operating System?
2. Policies and Guidelines
2.5.3. Final Words: Risk Management Means Common Sense
A.1.1.1. Chapter 2: Policies and Guidelines
cost-benefit analysis
2.3. Cost-Benefit Analysis
2.3.4. Convincing Management
risk assessment
2.2. Risk Assessment
2.2.2. Review Your Risks
2.5.3. Final Words: Risk Management Means Common Sense
role of
2.4.1. The Role of Policy
2.4.4. Some Key Ideas in Developing a Workable Policy
2.4.4.7. Defend in depth
politics : 11.3. Authors
polyalphabetic ciphers : 6.3. The Enigma Encryption System
polygraph tests : 13.1. Background Checks
POP (Post Office Protocol) : 17.3.10. Post Office Protocol (POP) (TCP Ports 109 and 110)
popen function
18.2.3.2. Testing is not enough!
23.2. Tips on Avoiding Security-related Bugs
pornography : 26.4.5. Pornography and Indecent Material
port numbers
23.3. Tips on Writing Network Programs
G. Table of IP Services
portable computers : 12.2.6.3. Portables
portable I/O library : 1.3. History of UNIX
portmap service
19.2.1. Sun's portmap/rpcbind
19.4.4.4. Spoofing RPC
E.4.6. portmap
portmapper program
17.3.11. Sun RPC's portmapper (UDP and TCP Ports 111)
19.2.1. Sun's portmap/rpcbind
19.4.5. Unintended Disclosure of Site Information with NIS
ports
16.2.4.2. TCP
17.1.1. The /etc/services File
G. Table of IP Services
trusted : (see trusted, ports)
positivity : 2.4.4.2. Be positive
POSIX
1.3. History of UNIX
1.4.2. Software Quality
C.1.3.4. Process groups and sessions
chown command and : 5.7. chown: Changing a File's Owner
Post Office Protocol : (see POP)
postmaster, contacting : 24.2.4.2. How to contact the system administrator of a computer you don't know
PostScript files : 11.1.5. Viruses
power outages, logging : 10.7.1.1. Exception and activity reports
power surges
12.2. Protecting Computer Hardware
12.2.1.8. Electrical noise
(see also lightning)
PPP (Point-to-Point Protocol)
14.5. Modems and UNIX
16.2. IPv4: The Internet Protocol Version 4
preserve program : 5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
Pretty Good Privacy : (see PGP)
prevention, cost of
2.3. Cost-Benefit Analysis
2.3.4. Convincing Management
primary group : 4.1.3. Groups and Group Identifiers (GIDs)
principals, NIS+ : 19.5.1. What NIS+ Does
print through process : 12.3.2.1. Verify your backups
printers
buffers : 12.3.4.1. Printer buffers
/etc/hosts.lpd file : 17.3.18.6. /etc/hosts.lpd file
logging to : 10.5.2.1. Logging to a printer
output from : 12.3.4.2. Printer output
ports for : 12.3.1.4. Auxiliary ports on terminals
priority of processes : C.1.3.3. Process priority and niceness
privacy
2.1. Planning Your Security Needs
2.5.2. Confidential Information
9. Integrity Management
12.3. Protecting Data
12.3.6. Key Switches
(see also encryption; integrity)
Electronic Communications Privacy Act (ECPA) : 26.2.3. Federal Computer Crime Laws
Secure RPC : 19.3.4. Limitations of Secure RPC
private-key cryptography
6.4. Common Cryptographic Algorithms
6.4.1. Summary of Private Key Systems
privilege testing (modem) : 14.5.3.3. Privilege testing
privileges, file : (see permissions)
privileges, SUID : (see SUID/SGID programs)
processes
C.1. About Processes
C.5.3. Running the User's Shell
accounting
10.2. The acct/pacct Process Accounting File
10.2.3. messages Log File
group IDs
4.3.3. Other IDs
C.1.3.4. Process groups and sessions
overload attacks
25.2.1. Process-Overload Problems
25.2.1.2. System overload attacks
priority of : C.1.3.3. Process priority and niceness
scheduler : C.1.3.3. Process priority and niceness
procmail system : 11.5.2.5. .forward, .procmailrc
.procmailrc file : 11.5.2.5. .forward, .procmailrc
.profile file
8.1.4.1. Restricted shells under System V UNIX
8.1.4.6. Potential problems with rsh
11.5.2.1. .login, .profile, /etc/profile
24.4.1.6. Changes to startup files
programmed threats
11. Protecting Against Programmed Threats
11.6.2. Shared Libraries
authors of : 11.3. Authors
checklist for : A.1.1.10. Chapter 11: Protecting Against Programmed Threats
protection from : 11.5. Protecting Yourself
references on : D.1.4. Computer Viruses and Programmed Threats
programming : 23. Writing Secure SUID and Network Programs
references for : D.1.11. UNIX Programming and System Administration
programs
CGI : (see CGI, scripts)
integrity of : (see integrity, data)
for network services : 23.3. Tips on Writing Network Programs
rabbit
11.1. Programmed Threats: Definitions
11.1.7. Bacteria and Rabbits
running simultaneously : 23.2. Tips on Avoiding Security-related Bugs
secure : 23. Writing Secure SUID and Network Programs
worms : 11.1.6. Worms
Project Athena : (see Kerberos system)
.project file : 17.3.8.1. The .plan and .project files
proprietary ownership notices : 26.2.6. Other Tips
prosecution, criminal
26.2. Criminal Prosecution
26.2.7. A Final Note on Criminal Actions
protocols
16.2.4. Packets and Protocols
(see also under specific protocol)
IP : (see IP protocols)
Protocols table (NIS+) : 19.5.3. NIS+ Tables
proxies, checklist for : A.1.1.21. Chapter 22: Wrappers and Proxies
pruning the wtmp file : 10.1.3.1. Pruning the wtmp file
ps command
6.6.2. des: The Data Encryption Standard
10.1.2. utmp and wtmp Files
19.3.2.3. Making sure Secure RPC programs are running on every workstation
24.2.1. Catching One in the Act
C.1.2. The ps Command
C.1.2.2. Listing processes with Berkeley-derived versions of UNIX
with kill command : 24.2.5. Getting Rid of the Intruder
to stop process overload
25.2.1.1. Too many processes
25.2.1.2. System overload attacks
pseudo-devices : 5.6. Device Files
pseudorandom functions : 23.6. Tips on Generating Random Numbers
PUBDIR= command : 15.5.2. Permissions Commands
public-key cryptography
6.4. Common Cryptographic Algorithms
6.4.2. Summary of Public Key Systems
6.4.6. RSA and Public Key Cryptography
6.4.6.3. Strength of RSA
6.5.3. Digital Signatures
18.3. Controlling Access to Files on Your Server
18.6. Dependence on Third Parties
breaking : 19.3.4. Limitations of Secure RPC
PGP : 6.6.3.2. Creating your PGP public key
proving identity with : 19.3.1.1. Proving your identity
publicity hounds : 11.3. Authors
publicizing security holes : 2.5.1. Going Public
publickey file : 19.3.2.1. Creating passwords for users
Purdue University (PCERT) : F.3.4.30. Purdue University
Purify : 23.2. Tips on Avoiding Security-related Bugs
pwck command : 8.2. Monitoring File Format


Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.