www.delorie.com/gnu/docs/cfengine/cfengine-Tutorial_77.html

search

	Buy GNU books!

GNU cfengine

[ < ]

[ > ]

[ << ]

[ Up ]

[ >> ]

[Top]

[Contents]

[Index]

[ ? ]

7. Security and cfengine

7.1 What is security?

7.2 A word of warning

7.3 Automation

7.4 Trust

7.5 Why trust cfengine?

7.6 Configuration

7.7 Disabling and replacing software

7.8 Process monitoring

7.9 Monitoring files

7.10 The setuid log

7.11 Suspicious filenames

7.12 Checksums and Tripwire functionality

7.13 FileExtensions

7.14 NonAlphaNumFiles

7.15 Defensive garbage collection

7.16 Anonymous FTP example

7.17 WWW security

7.18 Miscellaneous security of cfengine itself

7.19 Privacy (encryption)

7.20 Trust and key races

7.21 Adaptive locks

7.22 Spoofing

7.23 Race conditions in file copying

7.24 size= in copy

7.25 useshell= and owner= in shellcommands

7.26 Firewalls

Computer security is about protecting the data and availability of an association of hosts. Briefly, the key words are authentication, privacy, integrity and trust. To understand computer security we have to understand the interrelationships between all of the hosts and services on our networks as well as the ways in which those hosts can be accessed. Tools which allow this kind of management are complex and usually expensive.