Production Server Support (PSS): Unix Security Resources

PSS-UNIX's Security Checklist

A brief, checklist-style document concerning general unix security. SGI security checklist Redhat linux security checklist Sun security (same as "Sun details" below for now)

PSS-UNIX's Unix Security Details

Consists of detailed explanations and instructions specific to each vendor. SGI details RedHat linux details Sun details Here's a PSS-UNIX-written guide to assessing a UNIX box for compromise. These are platform-independent resources for securing UNIX machines providing specific network services: Securing an FTP server Securing a WWW server

Other Security Resources

Compaq (formerly Digital UNIX) Compaq Tru64 UNIX, OpenVMS, Ultrix, and Windows patches located at: http://ftp.service.digital.com/public/ IBM IBM maintains a security home page: http://www-1.ibm.com/services/continuity/recovery1.nsf/advisories IBM maintains an on-line support center: http://service.boulder.ibm.com/cgi-bin/support/rs6000.support/databases/ Linux Red Hat Linux maintains a support page at: http://www.redhat.com/support/ These Linux versions are not officially supported by PSS-UNIX, but we include these URLs here. Caldera OpenLinux security information can be found at: http://www.calderasystems.com/support/security/ Conectiva Linux security updates are available (in Portuguese) at: http://www.conectiva.com.br/atualizacoes/ Debian GNU/Linux maintain a security web page at: http://www.debian.org/security/ Linux-Mandrake update information can be found at: http://www.linux-mandrake.com/en/fupdates.php3 LinuxPPC security updates can be found at: http://www.linuxppc.com/support/updates/security/ S.u.S.E. information can be found at: http://www.suse.de/security/index.html Yellow Dog Linux errata can be found at: http://www.yellowdoglinux.com/resources/errata.shtml SGI www.sgi.com/Support/security/ -- SGI Security Headquarters www.sgi.com/Support/security/wiretap.html -- SGI Wiretap Security Advisory mailing list SGI patches are available at: ftp://ftp.sgi.com/security/ Sun Sun Security Bulletins are available at: http://sunsolve.sun.com/pub-cgi/secBulletin.pl Sun Security Patches are available at: http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access CERT www.cert.org/tech_tips/root_compromise.html -- CERT's Recovering from a UNIX Root Compromise