<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
<TITLE>Linux Security HOWTO: $BJ*M}E*$J%;%-%e%j%F%#(B</TITLE>
<LINK HREF="Security-HOWTO-4.html" REL=next>
<LINK HREF="Security-HOWTO-2.html" REL=previous>
<LINK HREF="Security-HOWTO.html#toc3" REL=contents>
</HEAD>
<BODY>
<A HREF="Security-HOWTO-4.html">$B<!$N%Z!<%8(B</A>
<A HREF="Security-HOWTO-2.html">$BA0$N%Z!<%8(B</A>
<A HREF="Security-HOWTO.html#toc3">$BL\<!$X(B</A>
<HR>
<H2><A NAME="physical-security"></A> <A NAME="s3">3. $BJ*M}E*$J%;%-%e%j%F%#(B</A></H2>
<P>$B:G=i$K9MN8$9$Y$-%;%-%e%j%F%#$NAX$O(B,
$B%3%s%T%e!<%?%7%9%F%`$NJ*M}E*$J%;%-%e%j%F%#$G$9(B.
$BC/$,%^%7%s$XD>@\?($k$3$H$,$G$-$k$N$+(B? $B?($k$3$H$,$G$-$k$Y$-$J$N$+(B?
$B$^$?(B, $BH`$i$,%^%7%s$r$$$8$l$J$$$h$&<i$l$k$N$+(B? $B$"$k$$$O<i$k$Y$-$J$N$+(B?
<P>$BJ*M}E*$J%;%-%e%j%F%#$,$I$NDxEYI,MW$K$J$k$+$O(B, $BBgDq$N>l9g(B,
$B>u67$dM=;;$K$h$C$F7h$^$j$^$9(B.
<P>$B$b$7$"$J$?$,%^%7%s$r<+J,$N2H$G;H$C$F$$$k$N$J$i$P(B,
$B$?$V$sCm0U$9$Y$-$3$H$O$"$^$j$J$$$G$7$g$&(B
($B;R6!$d$&$k$5$$?F@L$+$i%^%7%s$r<i$kI,MW$O$"$k$+$b$7$l$^$;$s$,(B).
$B8&5f<<$J$i$P(B, $B$+$J$jCm0U$7$J$1$l$P$J$i$J$$$G$7$g$&$,(B,
$B%f!<%6$O$=$N%^%7%s$G;E;v$r$G$-$kI,MW$,$"$j$^$9(B.
$B$=$N$?$a$K$O0J2<$N3F>O$,;29M$K$J$k$G$7$g$&(B.
$B$"$J$?$,%*%U%#%9$K$$$k$J$i$P(B,
$B=*6H8e$d$"$J$?$,@J$rN%$l$F$$$k$H$-$K(B
$B%^%7%s$r0BA4$K$7$F$*$/I,MW$,$"$k$+$b$7$l$^$;$s$7(B,
$B$=$NI,MW$OL5$$$+$b$7$l$^$;$s(B.
$B2q<R$K$h$C$F$O(B, $B%3%s%=!<%k$rJ|CV$9$k$3$H$O%/%S$K$5$l$kDx$N5,B'0cH?$G$9(B.
<P>$B%I%"$N;\>{$d%1!<%V%k(B, $B80IU$-$N%-%c%S%M%C%H(B,
$B%S%G%*4F;kAuCVEy$N$o$+$j$d$9$$J*M}E*$JKI8fJ}K!$OA4$FNI$$9M$($J$N$G$9$,(B,
$B$3$N%I%-%e%a%s%H$N<iHwHO0O$G$O$"$j$^$;$s(B :-)
<P>
<H2><A NAME="ss3.1">3.1 $B%3%s%T%e!<%?$X$N;\>{(B</A>
</H2>
<P>$B:G6a$N(B PC $B%1!<%9$NB?$/$K$O!V80!W$,IU$$$F$$$^$9(B.
$BIaDL$O%1!<%9$NA0LL$K807j$,$"$j(B,
$B80$r;\>{$+2r=|$N0LCV$K%;%C%H$G$-$k$h$&$K$J$C$F$$$^$9(B.
$B%1!<%9$N80$K$h$C$F(B, $B2?<T$+$,(B PC $B$rEp$s$@$j(B,
$B%1!<%9$r3+$1$FD>@\%O!<%I%&%'%"$r$$$8$C$?$jEp$s$@$j$9$k$3$H$rKI$0$3$H$,$G$-$^$9(B.
$B%1!<%9$K$h$C$F$O(B,
$BB>$NC/$+$N%U%m%C%T!<%G%#%9%/$dB>$N5!4o$K$h$k%^%7%s$N:F5/F0$rKI$0$3$H$,$G$-$^$9(B.
<P>$B%^%6!<%\!<%I$N%5%]!<%H$d%1!<%9$N:n$j$K$h$C$F$O(B,
$B%1!<%9$N80$G?'!9$J$3$H$,$G$-$^$9(B.
$BB?$/$N(B PC $B$G$O%1!<%9$r3+$1$k$?$a$K$O$3$l$r2u$5$J$/$F$O$J$j$^$;$s(B.
$B$^$?(B, $B?7$7$$%-!<%\!<%I$d%^%&%9$rA^$;$J$$$b$N$b$"$j$^$9(B.
$B>\$7$/$O%^%6!<%\!<%I$d%1!<%9$N@bL@=q$rFI$s$G$/$@$5$$(B.
$BDL>o(B, $B80$N<A$O$H$F$bDc$/(B, $B967b<T$O56B$$K$h$C$F4JC1$KGK$k$3$H$,$G$-$k$N$G$9$,(B,
$B$=$l$G$b80$O$H$F$bJXMx$J5!G=$K$J$jF@$^$9(B.
<P>$B%^%7%s$K$h$C$F$O(B($BFC$K(B Sun SPARC $B$d(B Macintosh), $BGXLL$K%I%s%0%k(B(dongle)
$B$,IU$$$F$$$F(B, $B$3$l$rDL$7$F%1!<%V%k$r7R$2$P(B,
$B%1!<%V%k$r@Z$k$+%1!<%9$r2u$5$J$1$l$P967b<T$O%1!<%V%k$r7R$0$3$H$,$G$-$^$;$s(B.
$B$3$l$i$KC1$KFn5~>{$dO"7k>{$rIU$1$k$3$H$G(B,
$B%^%7%s$rEp$b$&$H$7$F$$$k?M$X$NBg$-$JM^;_8z2L$,F@$i$l$^$9(B.
<P>
<P>
<H2><A NAME="ss3.2">3.2 BIOS $B$N%;%-%e%j%F%#(B</A>
</H2>
<P>BIOS $B$O$b$C$H$b%O!<%I%&%'%"$K6a$$%l%Y%k$N%=%U%H%&%'%"$G(B,
x86 $B%Y!<%9$N%O!<%I%&%'%"$N@_Dj5Z$SA`:n$r9T$$$^$9(B.
LILO $BEy$N%V!<%H%m!<%@$O(B,
BIOS $B$K%"%/%;%9$7$F(B Linux $B%^%7%s$r$I$&$d$C$F%V!<%H$5$;$k$+;X<($7$^$9(B.
Linux $B$NB>$N%W%i%C%H%U%)!<%`$G$bF1MM$N%=%U%H%&%'%"$,$"$j$^$9(B
(Mac $B$d(B $B?7$7$$(B Sun $B$N(B OpenFirmware, Sun $B$N(B boot PROM $BEy(B).
BIOS $B$N@_Dj$G(B,
$B967b<T$,%^%7%s$r:F5/F0$7$F(B Linux $B%7%9%F%`$rA`:n$9$k$N$rKI$0$3$H$,$G$-$^$9(B.
<P>$BB?$/$N(B PC BIOS $B$G$O5/F0%Q%9%o!<%I$N@_Dj$r$9$k$3$H$,$G$-$^$9(B.
$B$3$l$O$=$s$J$K0BA4$G$O$"$j$^$;$s(B
(BIOS $B$O%j%;%C%H$9$k$3$H$,$G$-$^$9$7(B,
$B%1!<%9$r3+$1$i$l$k$J$i<h$j30$9$3$H$b$G$-$k$G$7$g$&(B) $B$,(B,
$BM^;_8z2L$OBg$-$$$G$7$g$&(B ($B;~4V$+$;$.$K$b$J$j$^$9$7(B,
$B%7%9%F%`$r$$$8$C$?:/@W$b;D$k$+$i$G$9(B).
$BF1MM$K(B S/Linux (SPARC(tm)$B%W%m%;%C%5$N%^%7%sMQ$N(B Linux)$B$G$O(B,
EEPROM $B$r@_Dj$7$F5/F0%Q%9%o!<%I$r$+$1$k$3$H$,$G$-$^$9(B.
$B$3$l$G?/F~<T$rB-;_$a$G$-$k$+$b$7$l$^$;$s(B.
<P>$BB?$/$N(B x86 $B%^%7%s$N(B BIOS $B$G$O(B,
$B$3$NB>$K$bLrN)$D%;%-%e%j%F%#@_Dj$r?'!9;XDj$G$-$^$9(B.
BIOS $B$N%^%K%e%"%k$rD4$Y$k$+(B, $B<!2s$N%^%7%s5/F0;~$K%A%'%C%/$7$F$_$^$7$g$&(B.
$BNc$($P(B, $B%U%m%C%T!<%G%#%9%/$G$N5/F0$r6X;_$G$-$k(B BIOS $B$b$"$j$^$9$7(B,
$B0lIt$N@_Dj$K%Q%9%o!<%I$r$+$1$k$3$H$,$G$-$k(B BIOS $B$b$"$j$^$9(B.
<P><EM>$BCm0U(B</EM>: $B%5!<%P%^%7%s$r4IM}$7$F$$$F(B,
$B5/F0%Q%9%o!<%I$r@_Dj$7$F$$$k>l9g(B, $B?M$,$$$J$$$H%^%7%s$O5/F0$7$^$;$s(B.
$BDdEE$J$I$N;~$O(B,
$B%^%7%s$N=j$K9T$C$F%Q%9%o!<%I$rBG$A9~$s$G$d$kI,MW$,$"$k$3$H$r3P$($F$*$-$^$7$g$&(B.
;-(
<P>
<H2><A NAME="ss3.3">3.3 $B%V!<%H%m!<%@$N%;%-%e%j%F%#(B</A>
</H2>
<P>$B?'!9$J%V!<%H%m!<%@$K$b5/F0%Q%9%o!<%I$r@_Dj$9$k$3$H$,$G$-$^$9(B.
$BNc$($P(B LILO $B$r;H$C$F$$$k>l9g$K$O(B, <CODE>password</CODE> $B$H(B <CODE>restricted</CODE>
$B$N@_Dj$rD4$Y$F$_$^$7$g$&(B.
<CODE>password</CODE> $B$O5/F0;~$K%Q%9%o!<%I$rMW5a$9$k$h$&$K$7$^$9(B.
<CODE>restricted</CODE> $B$N>l9g$O(B,
<CODE>LILO </CODE> $B%W%m%s%W%H$KBP$7$F%*%W%7%g%s(B
(<CODE>single</CODE>$BEy(B) $B$r;XDj$7$?>l9g$@$15/F0%Q%9%o!<%I$rMW5a$9$k$h$&$K$J$j$^$9(B.
<P>lilo.conf $B$N%*%s%i%$%s%^%K%e%"%k$h$j(B:
<BLOCKQUOTE><CODE>
<PRE>
password=password
$B5/F0%$%a!<%8$4$H$N%*%W%7%g%s(B `password=...' ($B2<5-;2>H(B) $B$r(B
$B$9$Y$F$N%$%a!<%8$KE,MQ$7$^$9(B.
restricted
$B5/F0%$%a!<%8$4$H$N%*%W%7%g%s(B `restricted' ($B2<5-;2>H(B) $B$r(B
$B$9$Y$F$N%$%a!<%8$KE,MQ$7$^$9(B.
password=password
$B%$%a!<%8$r%Q%9%o!<%I$GJ]8n$7$^$9(B.
restricted
$B5/F0%$%a!<%8$K%3%^%s%I%i%$%s$G%Q%i%a!<%?$r;XDj$7$?$H$-(B
($BNc(B: single) $B$@$1%Q%9%o!<%I$rMW5a$7$^$9(B.
</PRE>
</CODE></BLOCKQUOTE>
<P>$B%Q%9%o!<%I$r@_Dj$7$?$i(B, $B$3$l$rK:$l$F$O$J$i$J$$$3$H$KCm0U$7$F$/$@$5$$(B. :-)
$B$^$?(B, $B5$9g$$$NF~$C$?967b<T$KBP$7$F$O(B,
$B$3$N$h$&$J%Q%9%o!<%I$OC1$J$kB-;_$aDxEY$K$7$+$J$i$J$$$3$H$bK:$l$F$O$$$1$^$;$s(B.
$B$3$NJ}K!$G$OC/$+$,%U%m%C%T!<%G%#%9%/$+$i5/F0$7$F(B
$B%k!<%H%Q!<%F%#%7%g%s$r%^%&%s%H$9$k$3$H$rKI$0$3$H$O$G$-$^$;$s(B.
$B%V!<%H%m!<%@$HAH$_9g$o$;$?%;%-%e%j%F%#<jK!$r;H$&>l9g$K$O(B,
$B%3%s%T%e!<%?$N(B BIOS $B$G%U%m%C%T!<%G%#%9%/$+$i$N5/F0$rL58z$K$9$k$3$H$,$G$-$^$9$7(B,
BIOS $B$r%Q%9%o!<%IJ]8n$9$k$3$H$b$G$-$^$9(B.
<P>LILO $B0J30$N%V!<%H%m!<%@(B(<CODE>grub</CODE>, <CODE>silo</CODE>, <CODE>milo</CODE>,
<CODE>linload</CODE> $BEy(B)$B$N%;%-%e%j%F%#4XO">pJs$r$4B8CN$J$i$P(B,
$B$<$R$*CN$i$;$/$@$5$$(B.
<P><EM>$BCm0U(B</EM>: $B%5!<%P%^%7%s$K%Q%9%o!<%I$r@_Dj$7$?>l9g(B,
$B?M$,$$$J$$$H%^%7%s$O5/F0(B<EM>$B$7$J$/$J$j$^$9(B</EM>.
$BDdEE$J$I$N>l9g$G$b(B,
$B%^%7%s$N$H$3$m$K9T$C$F%Q%9%o!<%I$rBG$A9~$^$J$1$l$P$J$i$J$$$3$H$O(B
$B3P$($F$*$-$^$7$g$&(B. ;-(
<P>
<H2><A NAME="ss3.4">3.4 xlock $B$H(B vlock</A>
</H2>
<P>$BIQHK$K%^%7%s$+$iN%$l$F=PJb$/$J$i$P(B, $B%3%s%=!<%k$K!V80!W$r3]$1(B,
$BC/$b%^%7%s$r$$$8$C$?$j(B, $B:n6H$NMM;R$rGA$1$J$$$h$&$K$7$F$*$/$HNI$$$G$7$g$&(B.
$B$3$N$h$&$J%W%m%0%i%`$H$7$F(B, <CODE>xlock</CODE> $B$H(B <CODE>vlock</CODE> $B$N(B
2 $B$D$r>R2p$7$^$9(B.
<P><CODE>xlock</CODE> $B$O(B X $B$N%G%#%9%W%l%$$r%m%C%/$7$^$9(B.
X $B$r%5%]!<%H$7$F$$$k(B Linux $B%G%#%9%H%j%S%e!<%7%g%s$J$i$P(B,
$BIaDL(B xlock $B$O%$%s%9%H!<%k$5$l$F$$$k$G$7$g$&(B.
$B%*%W%7%g%s$K$D$$$F$O%*%s%i%$%s%^%K%e%"%k$r;2>H$7$F$[$7$$$N$G$9$,(B,
$BBg$^$+$K@bL@$9$k$H(B, $B%m%C%/$7$?$$%3%s%=!<%k>e$N(B xterm $B$+$i(B
<CODE>xlock</CODE> $B$r5/F0$9$k$H(B, $B%G%#%9%W%l%$$,%m%C%/$5$l(B,
$B%Q%9%o!<%I$rF~NO$7$J$$$H2r=|$G$-$J$/$J$j$^$9(B.
<P><CODE>vlock</CODE> $B$O(B Linux $B$N2>A[%3%s%=!<%k$N0lIt(B
$B$"$k$$$OA4$F$r%m%C%/$9$k$?$a$N4JC1$J%W%m%0%i%`$G$9(B.
$B8=:_:n6HCf$N%3%s%=!<%k$r(B 1 $B$D$@$1%m%C%/$9$k$3$H$b$G$-$^$9$7(B,
$BA4$F$r%m%C%/$9$k$3$H$b$G$-$^$9(B.
$B2>A[%3%s%=!<%k$r(B 1 $B$D%m%C%/$7$F$$$k>l9g(B,
$BB>$N?M$O%3%s%=!<%k$r;H$&$3$H$,$G$-$^$9(B. $B$G$9$,(B,
$B%m%C%/$5$l$F$$$k2>A[C<Kv$O%m%C%/$,2r=|$5$l$k$^$G$O;H$&$3$H$,$G$-$^$;$s(B.
<CODE>vlock</CODE> $B$O(B Red Hat Linux $B$K$OF~$C$F$$$^$9$,(B,
$BF~$C$F$$$J$$%G%#%9%H%j%S%e!<%7%g%s$b$"$k$+$b$7$l$^$;$s(B.
<P>$BEvA3$J$,$i(B,
$B%3%s%=!<%k$r%m%C%/$9$l$P2?<T$+$K$"$J$?$N:n6H$r$$$8$i$l$k$N$r(B
$BKI$0$3$H$O$G$-$^$9$,(B,
$B%^%7%s$r:F5/F0$5$l$?$j$7$F$d$j$+$1$N:n6H$,2u$5$l$k$3$H$OKI$2$^$;$s(B.
$B$^$?(B, $B%M%C%H%o!<%/>e$NB>$N%^%7%s$+$i%3%s%=!<%k$r(B
$B%m%C%/$7$?%^%7%s$K%"%/%;%9$7$FLdBj$r5/$3$9$3$H$rKI$0$3$H$b$G$-$^$;$s(B.
<P>$B$5$i$K=EMW$JE@$H$7$F$O(B,
$BC/$+$,(B X $B%&%#%s%I%&%7%9%F%`$+$i40A4$KH4$1$F(B
$BDL>o$N2>A[%3%s%=!<%k$N%m%0%$%s%W%m%s%W%H$K9T$/$3$H$d(B,
X11 $B$r5/F0$7$?2>A[%3%s%=!<%k$K9T$-(B X $B$r%5%9%Z%s%I$5$;(B,
$B%f!<%6$N8"8B$rC%$C$F$7$^$&$3$H$rKI$2$J$$E@$,5s$2$i$l$^$9(B.
$B$G$9$+$i(B, $B40A4$K(B xdm $B$N@)8f2<$K$*$$$F;H$&$3$H$@$1$r9M$($k$N$,$h$$$G$7$g$&(B.
<P>
<H2><A NAME="ss3.5">3.5 $BJ*M}E*$J967b$r<u$1$?$3$H$NH/8+(B</A>
</H2>
<P>$B$^$:$O(B, $B%^%7%s$r$$$D:F5/F0$7$?$N$+I,$:5-O?$9$k$h$&$K$7$^$7$g$&(B.
Linux $B$O4h7r$G0BDj$J(B OS $B$G$9$+$i(B, <EM>$B$"$J$?(B</EM>$B$,%^%7%s$r:F5/F0$9$k$N$O(B
OS $B$N%"%C%W%0%l!<%I$d%O!<%I%&%'%"$N8r49Ey$N;~$@$1$G$7$g$&(B.
$B$"$J$?$,CN$i$J$$$&$A$K%^%7%s$,:F5/F0$5$l$F$$$?$i(B,
$B$3$l$O?/F~<T$K0-MQ$5$l$?$3$H$N0u$+$b$7$l$^$;$s(B.
$B?/F~<T$,%^%7%s$KJ*M}E*$J967b$r$9$k<jCJ$NB?$/$O(B,
$B%^%7%s$r:F5/F0$7$?$j(B, $BEE8;$r@Z$C$?$j$7$J$1$l$P$J$i$J$$$+$i$G$9(B.
<P>$B%1!<%9$d%3%s%T%e!<%?<~JU$r$$$8$i$l$?C{8u$,L5$$$+$I$&$+%A%'%C%/$7$^$7$g$&(B.
$B?/F~<T$OIaDL%m%0$+$i:/@W$r>C$7$^$9$,(B, $B$3$l$i$rA4$F%A%'%C%/$7(B,
$BL7=b$,L5$$$+D4$Y$k$N$bNI$$$G$7$g$&(B.
<P>$B%m%0$N%G!<%?$r0BA4$J>l=j(B
($B$-$A$s$H<i$i$l$?%M%C%H%o!<%/FbIt$N@lMQ$N%m%0%5!<%PEy(B)
$B$KCV$/$N$bNI$$9M$($G$9(B. $B$"$k%^%7%s$,0-MQ$5$l$?>l9g$K$O(B,
$B%m%0%G!<%?$O$[$H$s$ILr$KN)$?$J$/$J$k$+$i$G$9(B.
$B$H$$$&$N$b(B, $B?/F~<T$OBgDq%m%0$b=q$-49$($F$7$^$&$+$i$G$9(B.
<P>syslog $B%G!<%b%s$r@_Dj$7$F(B,
$B%m%0$r<+F0E*$KCf1{$N%m%0%5!<%P$KAw$k$h$&$K$9$k$3$H$b$G$-$^$9$,(B,
$B$3$l$ODL>o$O0E9f2=$5$l$:$KAw$i$l$^$9(B. $B$7$?$,$C$F(B,
$B?/F~<T$OE>Aw$5$l$F$$$k%G!<%?$r8+$k$3$H$,$G$-$^$9(B. $B$3$l$K$h$j(B,
$B8x$K$9$k$D$b$j$N$J$$%M%C%H%o!<%/4X78$N>pJs$,1L$l$F$7$^$&$+$b$7$l$^$;$s(B.
$B%G!<%?$rAw$k:]$K0E9f2=$9$k$3$H$,$G$-$k(B syslog $B%G!<%b%s$b$"$j$^$9(B.
<P>syslog $B$N%a%C%;!<%8$N56B$$OMF0W$G$"$kE@$K$bCm0U$7$F$/$@$5$$(B.
$B$3$l$r0-MQ$9$k$?$a$N%W%m%0%i%`$b=P2s$C$F$$$^$9(B.
syslog $B$O%m!<%+%k%[%9%H$+$i=P$5$l$?$H8@$C$F$$$k(B
$B%M%C%H%o!<%/7PM3$N%m%0%(%s%H%j$G$"$C$F$b(B,
$BK\Ev$NAw?.85$r<($9$3$H$J$/<u$1IU$1$F$7$^$$$^$9(B.
<P>$B%m%0$rD4$Y$k:]$K$O0J2<$NE@$KCm0U$7$^$9(B.
<UL>
<LI>$B%m%0$,C;$+$C$?$j(B, $BIT40A4$G$O$J$$$+(B</LI>
<LI>$B%m%0$K5-O?$5$l$F$$$k;~4V$O$*$+$7$/$J$$$+(B</LI>
<LI>$B%m%0$N%Q!<%_%C%7%g%s$d=jM-<T$O$*$+$7$/$J$$$+(B</LI>
<LI>$B%7%9%F%`$=$N$b$N$d(B, $B%5!<%S%9$N:F5/F0$O5-O?$5$l$F$$$J$$$+(B</LI>
<LI>$BL5$/$J$C$F$$$k%m%0$O$J$$$+(B</LI>
<LI>$B$*$+$7$J>l=j$+$i(B <CODE>su</CODE> $B$d%m%0%$%s$,9T$o$l$F$$$J$$$+(B</LI>
</UL>
<P>$B%7%9%F%`%m%0%G!<%?$K$D$$$F$O(B, $B$3$N(B HOWTO $BFb$N(B
<A HREF="Security-HOWTO-8.html#logs">$B8e$N>O(B</A>$B$G@bL@$7$^$9(B.
<P>
<HR>
<A HREF="Security-HOWTO-4.html">$B<!$N%Z!<%8(B</A>
<A HREF="Security-HOWTO-2.html">$BA0$N%Z!<%8(B</A>
<A HREF="Security-HOWTO.html#toc3">$BL\<!$X(B</A>
</BODY>
</HTML>
