chúng tôi đã tạo ra một trang web mà chúng tôi hy vọng sẽ vượt quá mong đợi của các tác giả của bán chạy nhất BES-bán HACK chống ™ MẠNG CỦA BẠNChương 5 • Bảo vệ tập tin của bạn [kế toán] path = / xuất khẩu | Securing Your Users Chapter 4 105 Admintool allows easy configuration of these options for each user. However managing a large number of accounts with Admintool would be cumbersome and time-consuming. It is better to understand how Solaris determines account and authentication policy in order to ease configuration for large domains. Three key files determine how Solaris user authentication and policy operate. The first etc default login controls a variety of security settings at login. Table explains the purpose and security implications of each of these settings. Table Login Policy Variables Variable Purpose CONSOLE If set to YES this restricts root logins to the system console. Root cannot log in over rlogin rsh or Telnet. This does not prevent a user login followed by su. This feature is useful to prevent mistakes by novice systems administrators or to prevent the use of an .rhosts file created to automate a task. SYSLOG If set root logins are logged at LOG_AUTH and multiple failed login attempts are logged at LOG_CRIT. UMASK Initial shell umask. By default 022. More restrictive sites may want to set this to 027 or 077. SLEEPTIME The time to wait in seconds before a login failure is returned and another login may be attempted. The default is four seconds the maximum is five. Setting this value to zero can simplify brute-forcing of accounts or denial of service by exhausting processes or ptys. TIMEOUT Sets the length of time in seconds before an incomplete login attempt is rejected. ALLOW_AGED_PASSWORD If set and a password has expired the user will still be permitted to log in. If set to NO an expired password that has not been changed will reject a login attempt. PASSREQ If set a login account will require a password. This feature forces certain accounts to be accessed only by su which provides a useful audit trail. Continued 106 Chapter 4 Securing Your Users Table Continued Variable Purpose PATH Sets the initial path for a login .
