简述linux操作系统的安全配置方案,第七章 操作系统安全配置方案

Windows 200036

UnixLinuxWindows NT/2000/2003 ServerC2

UNIXUNIX

UNIX20601969GE645DECPDP-7

1970Unix1973UnixCUnix

UNIX205

12345

Linux LinuxUnixIntel x86CPUUnix

LinuxLinus Torvalds

MinixAndrew Tannebaum386486Unix

LinuxGPL(General Public License)Red Hat LinuxSlackwareXteam LinuxLinuxLinux7

Linux712POSIX 1.03456 7

WindowsWindows NTNew TechnologyNT3.0NT40NT5.0Windows 2000NT6.0Windows 2003

Windows NTWindows 9XWindows 9XWindows NT

Windows NTWindows NT1Windows 95/98Apple MacintoshUnixOS/2TCP/IPIPX/SPXWindows NT

2InternetInternetTCP/IPWindows NTIISInternet Information ServerWWWFTP

3NTFSWindows 9XFATNTFATNTFSNTFSNTFS

GuestNTFS

115

2GuestGuestGuestGuest ,GuestGuest7-1

3

Windows NT/20001010

4 Administrator

WinLogonAdministrator

5 Windows 2000AdministratorAdministrator

Adminguestone7-2

6 Administrator10

Guests7-3

7 EveryoneEveryoneWindows 2000

EveryoneEveryone7-4

8

welcomeiloveyouletmein

4342

9OpenGL

17-5

10 NTFSNTFSNTFSFATFAT32

11Windows 2000/NT

12

1 Windows 20007-6

IP

2 Windows 2000Terminal ServicesIISInternet

Windows 20007-1

Windows2000

3

Winnt\system32\drivers\etc\services7-7

IP7-8

TCP/IP7-9

7-10WebTCP80TCP/IPWindows

4 Windows 2000

7-2

7-11

7-12

5 7-3

7-13

6 7-4

7-14

7

8

HKEY_LOCAL_MACHINE

Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\DontDisplayLastUserName17-15

9

HKEY_LOCAL_MACHINE

System\CurrentControlSet\Control\LSA\RestrictAnonymous17-16

10

Windows 2000

Service Pack

DirectDrawDump FileTempIPSecDDOSGuest

1 DirectDrawC2DirectDrawDirectX

HKEY_LOCAL_MACHINESYSTEM\CurrentControlSet\Control\GraphicsDrivers\DCI\Timeout07-17

2 Windows 2000DOSNet Share 7-18

>>>7-19

3 DumpDump

>>>7-20

4 Windows2000

Windows NT 4.0Windows 2000NTFSNTFS V55Encrypted File SystemEFS

EFSWindows 2000CryptoAPI

5 TempTempTemp

Temp

6 Windows2000AdministratorsBackup OperatorsHkey_current_user

Software\microsoft\windows\currentversion\Policies\system

DisableRegistryTools0DWORD7-21

7 Windows 2000

HKEY_LOCAL_MACHINE

SYSTEM\CurrentControlSet\Control\Session Manager\Memory ManagementClearPageFileAtShutdown17-22

8

9

10 IPSecIPSecIP

IPSec

IPSec

11 TTLTime-To-LivePingPing

PingWindowsUnixTTL128Windows 20007-23

TTL128Windows 20007-6

TTLTTL111HKEY_LOCAL_MACHINESYSTEM\CURRENT_CONTROLSET\SERVICES\TCPIP\PARAMETERS7-24

defaultTTL1117-25

PingTTL1117-26

12 DDOSDDOS[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters]7-7

13 GuestWindows NTWindows 2000GuestGuest

GuestHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application RestrictGuestAccess DWORD1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\SystemRestrictGuestAccessDWORD1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\SecurityRestrictGuestAccessDWORD1

14 Easy Recovery7-26

EData RecoveryAdvanced Recovery7-28

Advanced Recovery7-29

EENext7-30

7-31

7-32

Next7-33

7-34

Next7-35

Windows 2000

12345Windows 2000 Server/Advanced Server