Index

absolute pathnames, reading tapes
Reading Media From Other Systems

access control violations
File Permission Violations

accounting
process
Process (System) Accounting
system
Process (System) Accounting

administration, system
documentation
IRIX Admin Manual Set

archiving audit data
Archiving Audit Data

audit
a file
How to Audit a File
Access to Particularly Interesting Files or Resources
a label
How to Audit a Label Under Trusted IRIX/B
a user
Activity by Particularly Interesting Users
How to Audit a Specific User
customizing
Customizing Auditing
data archiving
Archiving Audit Data
data removing
Removing Audit Data
event types
Auditable Events
guidelines
Proper and Improper Management
improper use
Proper and Improper Management
particularly interesting users
Activity by Particularly Interesting Users
sample record
Understanding the Audit Data
sat_select
What Should I Audit?
system data files modification
Modifications of System Data Files
system programs modification
Modifications of Attributes of System Programs
the audit trail
Manipulation of the Audit Trail

audit data
interpreting
Understanding the Audit Data
understanding
Understanding the Audit Data

auditing
cofiguration utilities
Customizing Auditing
customizing
Customizing Auditing
default environment
Default Auditing
enabling
Enabling Auditing
list of items to audit
Auditable Events
reading output
Understanding the Audit Data
recovery
Saving and Retrieving Your Auditing Environment
saved files
Placing the Audit Files
saving
Saving and Retrieving Your Auditing Environment

auditing, description
Administering the System Audit Trail

auditing, satconfig utility
Using satconfig

Backup
Saving Data with Backup
about
Choosing a Backup Tool

backup and restore
using xfsdump and xfsrestore
xfsdump and xfsrestore

Backup and Restore window
System Backups

backups
about
Planning a Backup Strategy
across a network
Backing Up Files Across a Network
automatic
Automatic Backups
available programs
Choosing a Backup Tool
by date
Saving Files by Modification Date
byte swapping
Reading Media From Other Systems
compressed with bru
Saving Files Using Data Compression
dd conversion options
Reading Media From Other Systems
error messages
Backup and Recovery Error Messages
errors
Errors Creating the Backup
estimate space with bru
Estimating Space Required for Backup
Estimating Space Required for Backup
how often
When to Back Up Data and What to Back Up
incremental
Incremental Backups
incremental with bru
Incremental Backups With bru
incremental with cpio
Incremental Backups With tar
Incremental Backups With cpio
incremental with dump
Incremental Backups With dump
incremental with tar
Incremental Backups With cpio
Incremental Backups With tar
listing contents with bru
Examining bru Archives
making
General Backup Procedure
restored wrong one
Restoring the Wrong Backup
root filesystem
Root Filesystems
storing
Storing Backups
strategies for
Backup Strategies
unreadable
Unreadable Backups
user filesystems
User Filesystems
verifying bru archives
Inspecting an Archive for Consistency

bru
about
Choosing a Backup Tool
making backups
Backing Up Files With bru
Backing Up a Filesystem With bru
restoring data
Restoring a Filesystem With bru
restoring files
Restoring Individual Files With bru

changing passwords
Using Password Aging Manually
Using Password Aging Manually

cpio
about
Choosing a Backup Tool
capabilities
cpio
making backups
Saving Files by Modification Date
restoring files
Restoring tar Archives
Restoring cpio Archives

cumulative restores, xfsrestore
Cumulative Restores With xfsrestore

customizing auditing
Customizing Auditing

data segments, xfsdump
Terminology

dbedit utility
Modifications of System Data Files

dd
about
Choosing a Backup Tool
capabilities
dd
conversion options
Reading Media From Other Systems

default backup device
changing
Changing the Default Backup Device

/dev/tape
General Backup Procedure

disabling IP packet forwarding
Disable Forwarding of IP Packets

disabling NFS
Limiting NFS Access

disabling NIS
Disabling NIS (YP)

DNS configuration of internal network
Domain Name System (DNS)

dual-homed host
hardware setup
Dual-Homed Host Firewall
software setup
Network Software Setup on a Dual-Homed Host

dump
about
Choosing a Backup Tool
/etc/dumpdates
Saving a Filesystem With dump
incremental backups
Incremental Backups With dump
making backups
Saving a Filesystem With dump
vs. xfsdump
xfsdump and xfsrestore

dump inventory, xfsdump
Terminology

dump session, xfsdump
Terminology

dump stream, xfsdump
Terminology

educating users about security
Educating Users

error messages, backup and recovery
Backup and Recovery Error Messages

/etc/dumpdates
Saving a Filesystem With dump

/etc/hosts.equiv file
Controlling Network Access

/etc/inetd.conf file
Local inetd Services

/etc/passwd file
Controlling Network Access

file audit
How to Audit a File

firewall
definition
What Is a Firewall?
design philosophy
Firewall Design Philosophy
hardware configuration
Hardware Configuration
software configuration
IRIX Configuration

firewalls
Network Security and Firewalls

forwarding IP packets
Disable Forwarding of IP Packets

FTP services
Limiting inetd Services

hardware configuration
firewall
Hardware Configuration
routers
Routers and Firewalls

host
dual-homed
Dual-Homed Host Firewall
screened
Screened Host Gateway

housekeeping directory
housekeeping and orphanage Directories

incremental dumps, xfsdump
Incremental and Resumed Dumps

inetd daemon
Local inetd Services

inetd services
limiting
Limiting inetd Services

insider security violation
Use and Abuse by Insiders

interactive restore, xfsrestore
Interactive Restores With xfsrestore

internal network configuration
Internal Network Configuration

Internet, definition
What is the Internet?

interrupted restores, xfsrestore
Interrupting xfsrestore

inventory, xfsdump
Examining xfsdump Archives
Terminology

IP packet forwarding
Disable Forwarding of IP Packets

IRIX administration
documentation
IRIX Admin Manual Set

label audit
How to Audit a Label Under Trusted IRIX/B

locking logins
Using Password Aging Manually

log files
Setting Up a Proper Log File

login
disable time
Length of Time to Disable a Line (DISABLETIME)
locking
Using Password Aging Manually
Locking Unused Logins
maximum attempts
Maximum Login Attempts (MAXTRYS)
options
System Login Options
recording
Recording Login Attempts
restricting root
Restricting root Logins
special accounts
Special Accounts

mail
configuration of internal network
Mail Configuration
spool isolation
Spool Isolation

media
layout, xfsdump
Media Layout
object, xfsdump
Terminology
storing
Storing Backups

modification of system data files
Modifications of System Data Files

modifications of system programs
Modifications of Attributes of System Programs

ncheck command
Checking for Set-UIDs in the root Filesystem

network
access control
Controlling Network Access
backups
Backing Up Files Across a Network
screened
Screened Host Gateway
security issues
Network Security Issues

NFS
limiting or disabling
Limiting NFS Access

NIS
disabling
Disabling NIS (YP)

operating the system
general
System Accounting

orphanage directory
housekeeping and orphanage Directories

outside connections
Connections with Machines Outside the Local Network

outsider security violation
Use and Abuse by Outsiders

password
aging
Password Aging
changing
Using Password Aging Manually
Using Password Aging Manually
checking
Using pwck to Check the Password File
choosing
Choosing Passwords
dialup
Second (Dialup) Passwords
forcing
Forcing a Password
PROM
PROM Passwords
protection
Password Protection

password PROM
PROM Passwords

passwords
administration
Password Administration

potential security violations
Potential Security Violations

process accounting
Process (System) Accounting

PROM passwords
clearing
Clearing the PROM Password Using nvram
setting
Setting the PROM Password From the Command Monitor
use of
PROM Passwords

proxy servers
Using Proxy Servers

pwck command
Using pwck to Check the Password File

Recover System
Recovery After System Corruption

recovery
after system corruption
Recovery After System Corruption
error messages
Backup and Recovery Error Messages

removing
audit data
Removing Audit Data

Restore
about
Choosing a Backup Tool
Choosing a Backup Tool
interactive mode
Restoring Individual Files With restore
restoring data
Restoring Backup Archives With Restore
restoring filesystems
Restoring a Filesystem With restore
restoring individual files
Restoring Individual Files With restore
vs. xfsrestore
xfsdump and xfsrestore

restoring data
bru
Restoring Individual Files With bru
Restoring a Filesystem With bru
cpio
Restoring tar Archives
Restoring cpio Archives
restore
Restoring a Filesystem With restore
Restoring Backup Archives With Restore
tar
Restoring tar Archives
Restoring cpio Archives

restoring interrupted dumps, xfsrestore
Cumulative Restores With xfsrestore

.rhosts file
Controlling Network Access

root privilege violation
Unexpected Use of Root Privilege

routers and firewalls
Routers and Firewalls

RPC services
limiting
Limiting rpc Services Access

SAT
customizing
Customizing Auditing
event types
Auditable Events
sample record
Understanding the Audit Data
sat_select
What Should I Audit?
understanding data
Understanding the Audit Data

sat_interpret utility
Understanding the Audit Data
Understanding the Audit Data

sat_reduce utility
Understanding the Audit Data

sat_select
What Should I Audit?

sat_select utility
Using sat_select

sat_summarize utility
Understanding the Audit Data
Understanding the Audit Data

satconfig utility
Using satconfig

screened host
hardware setup
Screened Host Gateway

screened network
hardware setup
Screened Host Gateway

security
guidelines
Security Guidelines
IRIX standard
Standard Security Features
LAN
Local Area Network Access
network
Network Security
process accounting
Process (System) Accounting
tightening for firewall
Tightening Security in IRIX
Trojan horse attack
Security Guidelines
xhost command
xhost Command

security violation
insider
Use and Abuse by Insiders

security violation (auditing)
access control
File Permission Violations
outside connections
Connections with Machines Outside the Local Network
outsider
Use and Abuse by Outsiders
potential
Potential Security Violations
root privilege
Unexpected Use of Root Privilege
unauthorized entry
Attempts at Unauthorized Entry
unusual system usage
System Usage at Unusual Hours or From Unusual Locations

sendmail
configuration
Sendmail Configuration and Mail Aliases

Set-GID
Checking for Set-UIDs in the root Filesystem

Set-UID
Checking for Set-UIDs in the root Filesystem

software
checking integrity
Checking Software Integrity

stream terminator, xfsdump
Terminology

system access
Using Password Aging Manually
Using Password Aging Manually
Using Password Aging Manually

system accounting
System Accounting
Process (System) Accounting

system administration
documentation
IRIX Admin Manual Set

system backups
System Backups

system data files
modification
Modifications of System Data Files

System Maintenance Menu
Recovery After System Corruption

system passwords
password
system
PROM Passwords

system recovery
Recovery After System Corruption

tape device, default
General Backup Procedure

tapes
reusing
Reusing Tapes
storing
Storing Backups
testing
Testing for Bad Media

tapes, absolute pathnames
Reading Media From Other Systems

tapes, reusing with xfsdump
Reusing Tapes

tar
about
Choosing a Backup Tool
capabilities
tar
comparison key characters
Examining tar Archives
making backups
Saving Files by Modification Date
restoring files
Restoring cpio Archives
Restoring tar Archives

terminator, xfsdump
Terminology

Trojan horse attack
Security Guidelines

unauthorized entry
Attempts at Unauthorized Entry

understanding the audit data
Understanding the Audit Data

unusual system usage
System Usage at Unusual Hours or From Unusual Locations

user accounts
forcing a password
Forcing a Password

user audit
How to Audit a Specific User

users and security
Educating Users

violations
of access control security
File Permission Violations
of root privilege security
Unexpected Use of Root Privilege
of security by insiders
Use and Abuse by Insiders
of security by outsiders
Use and Abuse by Outsiders
of security by unauthorized entry
Attempts at Unauthorized Entry
of security by unusual system usage
System Usage at Unusual Hours or From Unusual Locations
possible
Potential Security Violations
through outside connections
Connections with Machines Outside the Local Network

World Wide Web:and security
World Wide Web Issues

X server access
changing
Limiting X11 Access
checking
xhost Command
controlling
Limiting X11 Access
default
Limiting X11 Access

xfsdump
dump inventory
Examining xfsdump Archives
incremental dumps
Incremental and Resumed Dumps
media layout
Media Layout
network usage
Using xfsdump and xfsrestore to Copy Filesystems
resumed dumps
Incremental and Resumed Dumps
reusing media
Reusing Tapes
specifying media
Specifying Local Media
STDOUT
Using xfsdump and xfsrestore to Copy Filesystems
using
Saving Data With xfsdump

xfsrestore
cumulative restores
Cumulative Restores With xfsrestore
interactive restore
Interactive Restores With xfsrestore
interrupted restores
Interrupting xfsrestore
network usage
Using xfsdump and xfsrestore to Copy Filesystems
Network Restores with xfsrestore
restoring files
Restoring Individual Files with xfsrestore
restoring interrupted dumps
Cumulative Restores With xfsrestore
session ID
Simple Restores With xfsrestore
session label
Simple Restores With xfsrestore
simple restores
Simple Restores With xfsrestore
STDIN
Using xfsdump and xfsrestore to Copy Filesystems
using
Restoring xfsdump Archives With xfsrestore

xhost command
xhost Command