[gentoo-commits] gentoo commit in xml/htdocs/doc/fi/security: security-handbook.xml shb-intrusion.xml shb-limits.xml shb-logging.xml shb-tcp.xml

[Flammie Pirinen (flammie)]

flammie     11/01/30 18:38:10

  Modified:             security-handbook.xml shb-intrusion.xml
                        shb-limits.xml shb-logging.xml shb-tcp.xml
  Log:
  Updated Finnish security handbook: package and file moves

Revision  Changes    Path
1.4                  xml/htdocs/doc/fi/security/security-handbook.xml

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml?r1=1.3&r2=1.4

Index: security-handbook.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- security-handbook.xml	22 Jul 2008 12:57:43 -0000	1.3
+++ security-handbook.xml	30 Jan 2011 18:38:10 -0000	1.4
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml,v 1.3 2008/07/22 12:57:43 flammie Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/security-handbook.xml,v 1.4 2011/01/30 18:38:10 flammie Exp $ -->
 <!DOCTYPE book SYSTEM "/dtd/book.dtd">
 
 <book link="/doc/fi/security/security-handbook.xml" lang="fi">
@@ -38,6 +38,12 @@
 <author title="Toimittaja">
   <mail link="krispykringle@g.o">Dan Margolis</mail>
 </author>
+<author title="Editor">
+  <mail link="nightmorph"/>
+</author>
+<author title="Vastuullinen kääntäjä">
+  <mail link="flammie"/>
+</author>
 
 <abstract>
 Tämä on opas Gentoo Linuxin tietoturvan parantamiseen.
@@ -45,8 +51,8 @@
 
 <license/>
 
-<version>1.0</version>
-<date>2005-05-31</date>
+<version>1.1</version>
+<date>2010-04-02</date>
 
 <!--
 <section>



1.4                  xml/htdocs/doc/fi/security/shb-intrusion.xml

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml?r1=1.3&r2=1.4

Index: shb-intrusion.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- shb-intrusion.xml	22 Jul 2008 12:57:43 -0000	1.3
+++ shb-intrusion.xml	30 Jan 2011 18:38:10 -0000	1.4
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml,v 1.3 2008/07/22 12:57:43 flammie Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-intrusion.xml,v 1.4 2011/01/30 18:38:10 flammie Exp $ -->
 <!DOCTYPE sections SYSTEM "/dtd/book.dtd">
 
 <!-- The content of this document is licensed under the CC-BY-SA license -->
@@ -7,8 +7,8 @@
 
 <sections>
 
-<version>1.3</version>
-<date>2006-11-01</date>
+<version>2</version>
+<date>2005-05-31</date>
 
 <section>
 <title>AIDE (Advanced Intrusion Detection Environment)</title>



1.4                  xml/htdocs/doc/fi/security/shb-limits.xml

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml?r1=1.3&r2=1.4

Index: shb-limits.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- shb-limits.xml	22 Jul 2008 12:57:43 -0000	1.3
+++ shb-limits.xml	30 Jan 2011 18:38:10 -0000	1.4
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml,v 1.3 2008/07/22 12:57:43 flammie Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-limits.xml,v 1.4 2011/01/30 18:38:10 flammie Exp $ -->
 <!DOCTYPE sections SYSTEM "/dtd/book.dtd">
 
 <!-- The content of this document is licensed under the CC-BY-SA license -->
@@ -7,8 +7,8 @@
 
 <sections>
 
-<version>1.4</version>
-<date>2007-07-08</date>
+<version>1.5</version>
+<date>2001-04-26</date>
 
 <section id="limits_conf">
 <title>/etc/security/limits.conf</title>
@@ -182,11 +182,11 @@
 </body>
 </section>
 <section>
-<title>/etc/login.access</title>
+  <title>/etc/security/access.conf</title>
 <body>
 
 <p>
-<path>login.access</path> kuuluu sys-apps/shadowiin, joka määrää
+<path>Access.conf</path> kuuluu sys-apps/pamiin, joka määrää
 käyttöoikeudet. Tässä tiedostossa määritellään mitkä käyttäjät, ryhmät tai
 koneosoitteet voivat kirjautua. Oletusarvoisesti kaikki voivat kirjautua,
 joten tiedosto sisältää aluksi vain kommentteja ja esimerkkejä. Sekä
@@ -195,10 +195,10 @@
 </p>
 
 <note>
-Näillä asetuksilla ei ole vaikutusta rootiin.
+Näillä asetuksilla säädetään myös rootin rajoja.
 </note>
 
-<pre caption="/etc/login.access">
+<pre caption="/etc/security/access.conf">
 -:ALL EXCEPT wheel sync:console
 -:wheel:ALL EXCEPT LOCAL .gentoo.org
 </pre>



1.4                  xml/htdocs/doc/fi/security/shb-logging.xml

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml?r1=1.3&r2=1.4

Index: shb-logging.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- shb-logging.xml	22 Jul 2008 12:57:43 -0000	1.3
+++ shb-logging.xml	30 Jan 2011 18:38:10 -0000	1.4
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml,v 1.3 2008/07/22 12:57:43 flammie Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-logging.xml,v 1.4 2011/01/30 18:38:10 flammie Exp $ -->
 <!DOCTYPE sections SYSTEM "/dtd/book.dtd">
 
 <!-- The content of this document is licensed under the CC-BY-SA license -->
@@ -7,8 +7,8 @@
 
 <sections>
 
-<version>1.2</version>
-<date>2005-11-25</date>
+<version>1.3</version>
+<date>2001-04-02</date>
 
 <section>
 <title>Johdanto</title>
@@ -209,6 +209,98 @@
 </p>
 
 <pre caption="/etc/syslog-ng/syslog-ng.conf">
+options {
+        chain_hostnames(no);
+
+        <comment># The default action of syslog-ng is to log a STATS line
+        # to the file every 10 minutes.  That's pretty ugly after a while.
+        # Change it to every 12 hours so you get a nice daily update of
+        # how many messages syslog-ng missed (0).</comment>
+        stats_freq(43200);
+};
+
+source src {
+    unix-stream("/dev/log" max-connections(256));
+    internal();
+};
+
+source kernsrc { file("/proc/kmsg"); };
+
+<comment># define destinations</comment>
+destination authlog { file("/var/log/auth.log"); };
+destination syslog { file("/var/log/syslog"); };
+destination cron { file("/var/log/cron.log"); };
+destination daemon { file("/var/log/daemon.log"); };
+destination kern { file("/var/log/kern.log"); };
+destination lpr { file("/var/log/lpr.log"); };
+destination user { file("/var/log/user.log"); };
+destination mail { file("/var/log/mail.log"); };
+
+destination mailinfo { file("/var/log/mail.info"); };
+destination mailwarn { file("/var/log/mail.warn"); };
+destination mailerr { file("/var/log/mail.err"); };
+
+destination newscrit { file("/var/log/news/news.crit"); };
+destination newserr { file("/var/log/news/news.err"); };
+destination newsnotice { file("/var/log/news/news.notice"); };
+
+destination debug { file("/var/log/debug"); };
+destination messages { file("/var/log/messages"); };
+destination console { usertty("root"); };
+
+<comment># By default messages are logged to tty12...</comment>
+destination console_all { file("/dev/tty12"); };
+
+<comment># ...if you intend to use /dev/console for programs like xconsole
+# you can comment out the destination line above that references /dev/tty12
+# and uncomment the line below.</comment>
+#destination console_all { file("/dev/console"); };
+
+<comment># create filters</comment>
+filter f_authpriv { facility(auth, authpriv); };
+filter f_syslog { not facility(authpriv, mail); };
+filter f_cron { facility(cron); };
+filter f_daemon { facility(daemon); };
+filter f_kern { facility(kern); };
+filter f_lpr { facility(lpr); };
+filter f_mail { facility(mail); };
+filter f_user { facility(user); };
+filter f_debug { not facility(auth, authpriv, news, mail); };
+filter f_messages { level(info..warn)
+        and not facility(auth, authpriv, mail, news); };
+filter f_emergency { level(emerg); };
+
+filter f_info { level(info); };
+filter f_notice { level(notice); };
+filter f_warn { level(warn); };
+filter f_crit { level(crit); };
+filter f_err { level(err); };
+filter f_failed { message("failed"); };
+filter f_denied { message("denied"); };
+
+<comment># connect filter and destination</comment>
+log { source(src); filter(f_authpriv); destination(authlog); };
+log { source(src); filter(f_syslog); destination(syslog); };
+log { source(src); filter(f_cron); destination(cron); };
+log { source(src); filter(f_daemon); destination(daemon); };
+log { source(kernsrc); filter(f_kern); destination(kern); };
+log { source(src); filter(f_lpr); destination(lpr); };
+log { source(src); filter(f_mail); destination(mail); };
+log { source(src); filter(f_user); destination(user); };
+log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); };
+log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); };
+log { source(src); filter(f_mail); filter(f_err); destination(mailerr); };
+
+log { source(src); filter(f_debug); destination(debug); };
+log { source(src); filter(f_messages); destination(messages); };
+log { source(src); filter(f_emergency); destination(console); };
+
+<comment># default log</comment>
+log { source(src); destination(console_all); };
+</pre>
+
+
+<pre caption="/etc/syslog-ng/syslog-ng.conf">
 options { chain_hostnames(off); sync(0); };
 
 #source where to read log



1.3                  xml/htdocs/doc/fi/security/shb-tcp.xml

file : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml?rev=1.3&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml?rev=1.3&content-type=text/plain
diff : http://sources.gentoo.org/viewvc.cgi/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml?r1=1.2&r2=1.3

Index: shb-tcp.xml
===================================================================
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- shb-tcp.xml	22 Jul 2008 12:57:43 -0000	1.2
+++ shb-tcp.xml	30 Jan 2011 18:38:10 -0000	1.3
@@ -1,5 +1,5 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml,v 1.2 2008/07/22 12:57:43 flammie Exp $ -->
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/fi/security/shb-tcp.xml,v 1.3 2011/01/30 18:38:10 flammie Exp $ -->
 <!DOCTYPE sections SYSTEM "/dtd/book.dtd">
 
 <!-- The content of this document is licensed under the CC-BY-SA license -->
@@ -7,8 +7,8 @@
 
 <sections>
 
-<version>1.0</version>
-<date>2005-05-31</date>
+<version>1.1</version>
+<date>2010-04-26</date>
 
 <section>
 <title>TCP-Wrapperit</title>
@@ -34,9 +34,10 @@
 </pre>
 
 <p>
-Tämä on hyvin samankaltainen kuin <path>/etc/login.access</path>. Tcpd koskee
-tiettyjä palveluita, joten se ei mene ristiin <path>/etc/login.access</path>in
-kanssa. Nämä asetukset vaikuttavat vain tcp-wrappereita käyttäviin palveluihin.
+  Tämä on hyvin samankaltainen kuin <path>/etc/security/access.conf</path>.
+  Tcpd koskee tiettyjä palveluita, joten se ei mene ristiin
+  <path>/etc/security/access.conf</path>in kanssa. Nämä asetukset vaikuttavat
+  vain tcp-wrappereita käyttäviin palveluihin. 
 </p>
 
 <p>