Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: P
- pacct file
: 10.2. The acct/pacct Process Accounting File
- pack program : 6.6.1.2. Ways of improving the security of crypt
- packet sniffing : 16.3.1. Link-level Security
- packet-switching networks : 16.2. IPv4: The Internet Protocol Version 4
- packets : (see IP packets)
- paper
- pack program : 6.6.1.2. Ways of improving the security of crypt
- backups on
: 24.5.1. Never Trust Anything Except Hardcopy
- copies : 7.3.2. Building an Automatic Backup System
- logging on : 10.7. Handwritten Logs
- shredders for : 12.3.3. Other Media
- throwing out : 12.3.3. Other Media
- copies : 7.3.2. Building an Automatic Backup System
- backups on
: 24.5.1. Never Trust Anything Except Hardcopy
- parent processes
: C.2. Creating Processes
- partitions : 25.2.2.4. Using partitions to protect your users
- backup by
: 7.1.3. Types of Backups
- root : (see root directory)
- backup by
: 7.1.3. Types of Backups
- pass phrases
: (see passwords)
- pass phrases for PGP
- 6.6.3.1. Encrypting files with IDEA
- (see also passwords)
- 6.6.3.1. Encrypting files with IDEA
- passive FTP
- passwd command
- 3.4. Changing Your Password
- 8.6.2. What Is Salt?
- as SUID program : 5.5. SUID
- -l option
- 8.6.2. What Is Salt?
- -n option
: 8.8.6. Password Aging and Expiration
- -x option : 8.8.6. Password Aging and Expiration
- -f nomemory option : 3.5. Verifying Your New Password
- using as superuser : 3.5. Verifying Your New Password
- -x option : 8.8.6. Password Aging and Expiration
- 3.4. Changing Your Password
- passwd file
- 1.2. What Is an Operating System?
- 3.2.1. The /etc/passwd File
- 3.2.2. The /etc/passwd File and Network Databases
- 4.2.3. Impact of the /etc/passwd and /etc/group Files on Security
- 7.1.2. What Should You Back Up?
- 8.1.1. Accounts Without Passwords
- 8.6. The UNIX Encrypted Password System
- 15.1.4. How the UUCP Commands Work
- 24.4.1. New Accounts
- C.5.1. Process #1: /etc/init
- (see /etc/passwd file)
- 3.2.1. The /etc/passwd File
- 1.2. What Is an Operating System?
- Passwd table (NIS+)
: 19.5.3. NIS+ Tables
- passwd+ package
- password coach
: 8.8.4. Password Generators
- password file : 19.4.4.6. NIS is confused about "+"
- password modems : 14.6. Additional Security for Modems
- password.adjunct file : 8.8.5. Shadow Password Files
- passwords
- password file : 19.4.4.6. NIS is confused about "+"
- 3.2. Passwords
- 3.6.1. Bad Passwords: Open Doors
- 3.8. Summary
- 23.5. Tips on Using Passwords
- accounts without : 8.1.1. Accounts Without Passwords
- assigning to users : 8.8.1. Assigning Passwords to Users
- avoiding conventional
- 3.6.1. Bad Passwords: Open Doors
- bad choices for
- changing
- checklist for
: A.1.1.2. Chapter 3: Users and Passwords
- constraining : 8.8.2. Constraining Passwords
- conventional : 3.2.6. Conventional UNIX Passwords
- cracking
- constraining : 8.8.2. Constraining Passwords
- encrypting
- expiring
: 8.8.6. Password Aging and Expiration
- federal jurisdiction over : 26.2.2. Federal Jurisdiction
- FTP and : 17.3.2. (FTP) File Transfer Protocol (TCP Ports 20 and 21)
- generators of : 8.8.4. Password Generators
- hit lists of : 3.6.1. Bad Passwords: Open Doors
- Kerberos : 19.6.5. Kerberos Limitations
- logging changes to : 10.7.2.1. Exception and activity reports
- logging failed attempts at : 10.5.3. syslog Messages
- for MUDs : 17.3.23. Other TCP Ports: MUDs and Internet Relay Chat (IRC)
- on multiple machines
- federal jurisdiction over : 26.2.2. Federal Jurisdiction
- over network connections
: 23.3. Tips on Writing Network Programs
- with network services : 17.4. Security Implications of Network Services
- NIS, with Secure RPC : 19.3.2.1. Creating passwords for users
- NIS+, changing : 19.5.4.1. Changing your password
- one-time
- with network services : 17.4. Security Implications of Network Services
- with POP
: 17.3.10. Post Office Protocol (POP) (TCP Ports 109 and 110)
- required for Web use
- shadow
- sniffing
- system clock and
: 17.3.14. Network Time Protocol (NTP) (UDP Port 123)
- token cards with : 8.7.2. Token Cards
- unique, number of : 3.6.3. Good Passwords: Locked Doors
- usernames as : 8.8.3.1. Joetest: a simple password cracker
- UUCP accounts : 15.3.2. Establishing UUCP Passwords
- verifying new : 3.5. Verifying Your New Password
- wizard's (sendmail) : 17.3.4.1. sendmail and security
- writing down : 3.6.5. Writing Down Passwords
- token cards with : 8.7.2. Token Cards
- 3.2. Passwords
- patches, logging
: 10.7.2.2. Informational material
- patents : 26.4.4. Patent Concerns
- and cryptography : 6.7.1. Cryptography and the U.S. Patent System
- PATH variable
- pathnames
: 23.2. Tips on Avoiding Security-related Bugs
- paths : 5.1.3. Current Directory and Paths
- trusted : 8.5.3.1. Trusted path
- pax program
: 7.4.2. Simple Archives
- PCERT (Purdue University) : F.3.4.30. Purdue University
- PCs
- PCERT (Purdue University) : F.3.4.30. Purdue University
- viruses on
: 11.1.5. Viruses
- web server on : 18.2. Running a Secure Server
- viruses on
: 11.1.5. Viruses
- PDP-11 processors
- Penn State response team
: F.3.4.29. Pennsylvania State University
- per-machine logs : 10.7.2. Per-Machine Logs
- per-site logs : 10.7.1. Per-Site Logs
- performance
- per-machine logs : 10.7.2. Per-Machine Logs
- compromised
- reviews
: 13.2.3. Performance Reviews and Monitoring
- with Secure RPC : 19.3.4. Limitations of Secure RPC
- using FFS : 25.2.2.6. Reserved space
- with Secure RPC : 19.3.4. Limitations of Secure RPC
- perimeter, security
: 12.1.1. The Physical Security Plan
- perl command
- Perl programming language
- 5.5.3. SUID Shell Scripts
- 11.1.4. Trojan Horses
- 11.5.1.2. IFS attacks
- random seed generator : 23.9. A Good Random Seed Generator
- script for reading lastlog file : 10.1.1. lastlog File
- Swatch program
- 11.1.4. Trojan Horses
- tainting facility : 18.2.3.4. Tainting with Perl
- 5.5.3. SUID Shell Scripts
- permissions
- 1.1. What Is Computer Security?
- 5.1.6. Understanding File Permissions
- 5.2.4. Using Octal File Permissions
- 11.1.5. Viruses
- 11.6.1. File Protections
- 11.6.1.3. World-readable backup devices
- access control lists (ACLs)
- 5.1.6. Understanding File Permissions
- changing
- directory
: 5.4. Using Directory Permissions
- /etc/utmp file : 10.1.2. utmp and wtmp Files
- intruder's modifications to : 24.4.1.2. Changes in file and directory protections
- modem devices : 14.5.2. Setting Up the UNIX Device
- modem files : 14.5.1. Hooking Up a Modem to Your Computer
- of NIS+ objects : 19.5.5. NIS+ Limitations
- octal
- /etc/utmp file : 10.1.2. utmp and wtmp Files
- of .rhosts file
: 17.3.18.4. The ~/.rhosts file
- SUID programs
- symbolic links and
: 5.1.7. File Permissions in Detail
- umasks
- UUCP : 15.4.1.4. Special permissions
- 1.1. What Is Computer Security?
- Permissions file
- personnel
: (see employees)
- PGP (Pretty Good Privacy)
- 6.6.3. PGP: Pretty Good Privacy
- 6.6.3.6. PGP detached signatures
- -eat and -seat options : 6.6.3.3. Encrypting a message
- encrypting message with : 6.6.3.3. Encrypting a message
- encrypting Web documents : 18.4.1. Eavesdropping Over the Wire
- -ka option : 6.6.3.2. Creating your PGP public key
- -kg option : 6.6.3.2. Creating your PGP public key
- -kvc option : 6.6.3.6. PGP detached signatures
- -kxaf option : 6.6.3.2. Creating your PGP public key
- -o option : 6.6.3.6. PGP detached signatures
- -sat option : 6.6.3.4. Adding a digital signature to an announcement
- -sb option : 6.6.3.6. PGP detached signatures
- software signature : E.4. Software Resources
- 6.6.3.6. PGP detached signatures
- 6.6.3. PGP: Pretty Good Privacy
- ph (phonebook) server
: 17.3.8.3. Replacing finger
- phantom mail : 17.3.4.2. Using sendmail to receive email
- physical security
- phantom mail : 17.3.4.2. Using sendmail to receive email
- 12. Physical Security
- 12.4.2. "Nothing to Lose?"
- access control : 12.2.3. Physical Access
- of backups
- 12.4.2. "Nothing to Lose?"
- checklist for
: A.1.1.11. Chapter 12: Physical Security
- modems
- read-only filesystems
: 9.1.2. Read-only Filesystems
- signal grounding : 25.3.3. Signal Grounding
- 12. Physical Security
- PIDs (process IDs)
- Pieprzyk, Josef
: 6.5.4.3. HAVAL
- PingWare program : 17.6.3. PingWare
- pipe (in Swatch program) : 10.6.2. The Swatch Configuration File
- pipes
- PingWare program : 17.6.3. PingWare
- pipes (for smoking)
: 12.2.1.2. Smoke
- piracy of software
- 26.4.2.1. Software piracy and the SPA
- (see also software)
- 26.4.2.1. Software piracy and the SPA
- pirated software
: (see software)
- plaintext attacks : 6.2.3. Cryptographic Strength
- .plan file : 17.3.8.1. The .plan and .project files
- platforms : (see operating systems)
- play accounts : (see open accounts)
- playback attacks : 19.6.1.2. Using the ticket granting ticket
- plus sign (+)
- plaintext attacks : 6.2.3. Cryptographic Strength
- in hosts.equiv file
: 17.3.18.5. Searching for .rhosts files
- in NIS
- in hosts.equiv file
: 17.3.18.5. Searching for .rhosts files
- Point-to-Point Protocol (PPP)
: 14.5. Modems and UNIX
- policy, security
- 1.2. What Is an Operating System?
- 2. Policies and Guidelines
- 2.5.3. Final Words: Risk Management Means Common Sense
- A.1.1.1. Chapter 2: Policies and Guidelines
- cost-benefit analysis
- 2. Policies and Guidelines
- risk assessment
- role of
- 1.2. What Is an Operating System?
- politics
: 11.3. Authors
- polyalphabetic ciphers : 6.3. The Enigma Encryption System
- polygraph tests : 13.1. Background Checks
- POP (Post Office Protocol) : 17.3.10. Post Office Protocol (POP) (TCP Ports 109 and 110)
- popen function
- polyalphabetic ciphers : 6.3. The Enigma Encryption System
- pornography
: 26.4.5. Pornography and Indecent Material
- port numbers
- portable computers
: 12.2.6.3. Portables
- portable I/O library : 1.3. History of UNIX
- portmap service
- portable I/O library : 1.3. History of UNIX
- portmapper program
- ports
- positivity
: 2.4.4.2. Be positive
- POSIX
- Post Office Protocol
: (see POP)
- postmaster, contacting : 24.2.4.2. How to contact the system administrator of a computer you don't know
- PostScript files : 11.1.5. Viruses
- power outages, logging : 10.7.1.1. Exception and activity reports
- power surges
- postmaster, contacting : 24.2.4.2. How to contact the system administrator of a computer you don't know
- PPP (Point-to-Point Protocol)
- preserve program
: 5.5.3.2. Another SUID example: IFS and the /usr/lib/preserve hole
- Pretty Good Privacy : (see PGP)
- prevention, cost of
- Pretty Good Privacy : (see PGP)
- primary group
: 4.1.3. Groups and Group Identifiers (GIDs)
- principals, NIS+ : 19.5.1. What NIS+ Does
- print through process : 12.3.2.1. Verify your backups
- printers
- principals, NIS+ : 19.5.1. What NIS+ Does
- buffers
: 12.3.4.1. Printer buffers
- /etc/hosts.lpd file : 17.3.18.6. /etc/hosts.lpd file
- logging to : 10.5.2.1. Logging to a printer
- output from : 12.3.4.2. Printer output
- ports for : 12.3.1.4. Auxiliary ports on terminals
- /etc/hosts.lpd file : 17.3.18.6. /etc/hosts.lpd file
- buffers
: 12.3.4.1. Printer buffers
- priority of processes
: C.1.3.3. Process priority and niceness
- privacy
- 2.1. Planning Your Security Needs
- 2.5.2. Confidential Information
- 9. Integrity Management
- 12.3. Protecting Data
- 12.3.6. Key Switches
- (see also encryption; integrity)
- Electronic Communications Privacy Act (ECPA) : 26.2.3. Federal Computer Crime Laws
- Secure RPC : 19.3.4. Limitations of Secure RPC
- 2.5.2. Confidential Information
- 2.1. Planning Your Security Needs
- private-key cryptography
- privilege testing (modem)
: 14.5.3.3. Privilege testing
- privileges, file : (see permissions)
- privileges, SUID : (see SUID/SGID programs)
- processes
- privileges, file : (see permissions)
- C.1. About Processes
- C.5.3. Running the User's Shell
- accounting
- C.5.3. Running the User's Shell
- group IDs
- overload attacks
- priority of
: C.1.3.3. Process priority and niceness
- scheduler : C.1.3.3. Process priority and niceness
- C.1. About Processes
- procmail system
: 11.5.2.5. .forward, .procmailrc
- .procmailrc file : 11.5.2.5. .forward, .procmailrc
- .profile file
- .procmailrc file : 11.5.2.5. .forward, .procmailrc
- programmed threats
- 11. Protecting Against Programmed Threats
- 11.6.2. Shared Libraries
- authors of : 11.3. Authors
- checklist for : A.1.1.10. Chapter 11: Protecting Against Programmed Threats
- protection from : 11.5. Protecting Yourself
- references on : D.1.4. Computer Viruses and Programmed Threats
- 11.6.2. Shared Libraries
- 11. Protecting Against Programmed Threats
- programming : 23. Writing Secure SUID and Network Programs
- references for : D.1.11. UNIX Programming and System Administration
- programs
- CGI
: (see CGI, scripts)
- integrity of : (see integrity, data)
- for network services : 23.3. Tips on Writing Network Programs
- rabbit
- integrity of : (see integrity, data)
- running simultaneously
: 23.2. Tips on Avoiding Security-related Bugs
- secure : 23. Writing Secure SUID and Network Programs
- worms : 11.1.6. Worms
- secure : 23. Writing Secure SUID and Network Programs
- CGI
: (see CGI, scripts)
- Project Athena
: (see Kerberos system)
- .project file : 17.3.8.1. The .plan and .project files
- proprietary ownership notices : 26.2.6. Other Tips
- prosecution, criminal
- .project file : 17.3.8.1. The .plan and .project files
- protocols
- 16.2.4. Packets and Protocols
- (see also under specific protocol)
- IP : (see IP protocols)
- (see also under specific protocol)
- 16.2.4. Packets and Protocols
- Protocols table (NIS+)
: 19.5.3. NIS+ Tables
- proxies, checklist for : A.1.1.21. Chapter 22: Wrappers and Proxies
- pruning the wtmp file : 10.1.3.1. Pruning the wtmp file
- ps command
- proxies, checklist for : A.1.1.21. Chapter 22: Wrappers and Proxies
- 6.6.2. des: The Data Encryption Standard
- 10.1.2. utmp and wtmp Files
- 19.3.2.3. Making sure Secure RPC programs are running on every workstation
- 24.2.1. Catching One in the Act
- C.1.2. The ps Command
- C.1.2.2. Listing processes with Berkeley-derived versions of UNIX
- with kill command : 24.2.5. Getting Rid of the Intruder
- to stop process overload
- 10.1.2. utmp and wtmp Files
- 6.6.2. des: The Data Encryption Standard
- pseudo-devices
: 5.6. Device Files
- pseudorandom functions : 23.6. Tips on Generating Random Numbers
- PUBDIR= command : 15.5.2. Permissions Commands
- public-key cryptography
- pseudorandom functions : 23.6. Tips on Generating Random Numbers
- 6.4. Common Cryptographic Algorithms
- 6.4.2. Summary of Public Key Systems
- 6.4.6. RSA and Public Key Cryptography
- 6.4.6.3. Strength of RSA
- 6.5.3. Digital Signatures
- 18.3. Controlling Access to Files on Your Server
- 18.6. Dependence on Third Parties
- breaking : 19.3.4. Limitations of Secure RPC
- PGP : 6.6.3.2. Creating your PGP public key
- proving identity with : 19.3.1.1. Proving your identity
- 6.4.2. Summary of Public Key Systems
- 6.4. Common Cryptographic Algorithms
- publicity hounds
: 11.3. Authors
- publicizing security holes : 2.5.1. Going Public
- publickey file : 19.3.2.1. Creating passwords for users
- Purdue University (PCERT) : F.3.4.30. Purdue University
- Purify : 23.2. Tips on Avoiding Security-related Bugs
- pwck command : 8.2. Monitoring File Format
- publicizing security holes : 2.5.1. Going Public
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.