<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <HTML> <HEAD> <META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9"> <TITLE>Linux Security HOWTO: $B%m!<%+%k$N%;%-%e%j%F%#(B</TITLE> <LINK HREF="Security-HOWTO-5.html" REL=next> <LINK HREF="Security-HOWTO-3.html" REL=previous> <LINK HREF="Security-HOWTO.html#toc4" REL=contents> </HEAD> <BODY> <A HREF="Security-HOWTO-5.html">$B<!$N%Z!<%8(B</A> <A HREF="Security-HOWTO-3.html">$BA0$N%Z!<%8(B</A> <A HREF="Security-HOWTO.html#toc4">$BL\<!$X(B</A> <HR> <H2><A NAME="local-security"></A> <A NAME="s4">4. $B%m!<%+%k$N%;%-%e%j%F%#(B</A></H2> <P>$B<!$K%m!<%+%k%f!<%6$N967b$KBP$9$k%7%9%F%`$N%;%-%e%j%F%#$K$D$$$F9M$($^$9(B. $B$=$&$G$9(B, <EM>$B%m!<%+%k(B</EM>$B$N%f!<%6$KBP$7$F$G$9(B. <P>$B%m!<%+%k%f!<%6$N%"%+%&%s%H$N3MF@$O(B, $B967b<T$,(B root $B$N%"%+%&%s%H$rGK$m$&$H$9$k:]$K:G=i$K9M$($k$3$H$N0l$D$G$9(B. $B%m!<%+%k$KBP$9$k%;%-%e%j%F%#$,4E$1$l$P(B, $BMM!9$J%P%0$d%m!<%+%k8~$1$N%5!<%S%9$N$^$:$$@_Dj$rMxMQ$7$F(B, $B0lHL%f!<%6$N8"8B$+$i(B root $B%f!<%6$N8"8B$X(B $B!V%"%C%W%0%l!<%I!W$9$k$3$H$,$G$-$k$N$G$9(B. $B%m!<%+%k$KBP$9$k%;%-%e%j%F%#$,6/8G$G$"$l$P(B, $B?/F~<T$,1[$($J$1$l$P$J$i$J$$%O!<%I%k$O$^$@;D$k$3$H$K$J$j$^$9(B. <P>$B%m!<%+%k%f!<%6$O(B, $B$?$H$(?H85$r:>>N$7$F$$$J$/$F$b%7%9%F%`$KHo32$rM?$($k$3$H$,$G$-$^$9(B. $BCN$i$J$$?M(B, $BO"Mm@h$N$o$+$i$J$$?M$K%"%+%&%s%H$rM?$($k$N$O(B, $BHs>o$K4m81$J$3$H$G$9(B. <P> <H2><A NAME="ss4.1">4.1 $B?75,%"%+%&%s%H$N:n@.(B</A> </H2> <P>$B%"%+%&%s%H$rH/9T$9$k:]$O(B, $B$=$N%f!<%6$,9T$&I,MW$N$"$k:n6H$KBP$7(B, $BI,MW:G>.8B$N%"%+%&%s%H$rM?$($F$$$k$3$H$KN10U$9$Y$-$G$9(B. $BB);R(B (10 $B:M(B) $B$K%"%+%&%s%H$rM?$($k$N$J$i$P(B, $B%o!<%W%m$d$*3(IA$-%W%m%0%i%`$K$O%"%/%;%9$G$-$k$1$l$I(B, $B<+J,$N$b$N$G$J$$%U%!%$%k$r:o=|$G$-$J$$%f!<%6$K$9$Y$-$G$7$g$&(B. <P>$BB>?M$K(B Linux $B%^%7%s$KBP$7$F9gM}E*$K%"%/%;%9$r$7$F$b$i$&$?$a$N(B, $BJXMx$J7P83B'$,$"$j$^$9(B. <P> <UL> <LI>$BI,MW:G>.8B$N8"8B$7$+M?$($J$$$h$&$K$7$^$9(B</LI> <LI>$B$$$D(B, $B$I$3$+$i%m%0%$%s$7$?$+(B, $B$"$k$$$O$I$3$+$i%m%0%$%s$9$Y$-$+$KCm0U$rJ'$$$^$9(B</LI> <LI>$B;H$o$l$F$$$J$$%"%+%&%s%H$O:o=|$7$?$+$I$&$+3NG'$7$^$9(B</LI> <LI>$BA4$F$N%3%s%T%e!<%?$H%M%C%H%o!<%/$GF1$8%f!<%6(B ID $B$r;H$&$H$h$$$G$7$g$&(B. $B$3$l$K$h$j(B, $B%"%+%&%s%H$N4IM}(B, $B%m%0%G!<%?$N2r@O$,MF0W$K$J$j$^$9(B.</LI> <LI>$B%0%k!<%W%f!<%6(B ID $B$N:n@.$O@dBP$K6X;_$9$Y$-$G$9(B. $B%f!<%6%"%+%&%s%H$G$O@UG$$N=j:_$,L@$i$+$G$9$,(B, $B%0%k!<%W%"%+%&%s%H$G$O$=$&$G$O$J$$$+$i$G$9(B.</LI> </UL> <P>$B%;%-%e%j%F%#$rGK$k$H$-$K;H$o$l$k%m!<%+%k%f!<%6$N%"%+%&%s%H$NB?$/$O(B, $B2?%u7n$"$k$$$O2?G/$b;H$o$l$F$$$J$$$b$N$G$9(B. $BC/$b;H$C$F$$$J$$$?$a$K(B, $BM}A[E*$J967b$NF;6q$K$J$C$F$7$^$&$N$G$9(B. <P> <H2><A NAME="root-security"></A> <A NAME="ss4.2">4.2 root $B$N%;%-%e%j%F%#(B</A> </H2> <P>$B$"$J$?$N%^%7%s$G:G$bM_$7$,$i$l$k%"%+%&%s%H$O(B, root ($B%f!<%Q!<%f!<%6(B) $B$N%"%+%&%s%H$G$9(B. $B$3$N%"%+%&%s%H$O%^%7%sA4BN$KBP$9$k8"8B$r;}$A(B, $B%M%C%H%o!<%/>e$NB>$N%^%7%s$KBP$9$k8"8B$r;}$D$3$H$b$"$j$^$9(B. root $B$N%"%+%&%s%H$O$G$-$k$@$1C;;~4V$N(B, $BFCDj$N:n6H$@$1$G;HMQ$7(B, $B$=$l0J30$N;~$O0lHL%f!<%6$H$7$F%^%7%s$r;HMQ$9$Y$-$G$9(B. root $B%f!<%6$G%m%0%$%s$7$F$$$k$H$A$g$C$H$7$?%_%9$G$bLdBj$r5/$3$7$+$M$^$;$s(B. root $B8"8B$r;}$C$F$$$k;~4V$OC;$1$l$PC;$$$[$I0BA4$G$9(B. <P>root $B8"8B$G%^%7%s$r2u$7$F$7$^$o$J$$$?$a$N;E3]$1$b$$$/$D$+$"$j$^$9(B. <UL> <LI>$BJ#;($J%3%^%s%I$r<B9T$9$k$H$-(B, $BFC$K(B globbing $B$r;H$&(B(* $B$d(B ? $B$J$I$N%o%$%k%I%+!<%I$r;HMQ$9$k(B)$B>l9g$O(B, $B<:GT$7$F$bHa;4$J7k2L$K$J$i$J$$J}K!$r:G=i$K$H$j$^$7$g$&(B. $BNc$($P(B <CODE>rm foo*.bak</CODE> $B$r<B9T$7$?$$>l9g$O(B, $B$^$:(B <CODE>"ls foo*.bak"</CODE> $B$r<B9T$7(B, $B9M$($F$$$k%U%!%$%k$@$1$,>C$5$l$k$h$&$K$J$C$F$$$k$+3NG'$9$k$N$G$9(B. $B4m81$J%3%^%s%I$NBe$o$j$K(B <CODE>echo</CODE> $B$,;H$($k$3$H$b$"$j$^$9(B. </LI> <LI>$B%f!<%6$KBP$7$F(B <CODE>rm</CODE> $B%3%^%s%I$N%(%$%j%"%9$r@_Dj$7$F$*$-(B, $B%U%!%$%k$N:o=|$N:]$K3NG'$r9T$&$h$&$K$7$^$9(B. </LI> <LI>$BFCDj$N:n6H(B 1 $B$D$r9T$&$?$a$@$1$K(B root $B$K$J$j$^$7$g$&(B. $B<+J,$,(B, $B$I$&$d$C$F:n6H$7$h$&$+9M$($F$$$k$h$&$J>uBV$@$H$7$?$i(B, root $B$G$d$i$J$1$l$P$J$i$J$$$3$H$,(B<EM>$B$O$C$-$j(B</EM>$B$9$k$^$G$O(B, $B0lHL%f!<%6$KLa$j$^$7$g$&(B.</LI> <LI>root $B%f!<%6$N%3%^%s%I%Q%9$O$H$F$b=EMW$G$9(B. $B%3%^%s%I%Q%9(B ($B$D$^$j(B PATH $B4D6-JQ?t(B) $B$O%7%'%k$,%W%m%0%i%`$rC5$9%G%#%l%/%H%j$r;XDj$7$^$9(B. root $B%f!<%6MQ$N%3%^%s%I%Q%9$O$G$-$k8B$j@)8B$9$Y$-$G$9$7(B, <EM>$B@dBP$K(B</EM> '.' ($B$3$l$O!V%+%l%s%H%G%#%l%/%H%j!W$r0UL#$7$^$9(B) $B$r(B PATH $B$N;XDj$KF~$l$F$O$$$1$^$;$s(B. $B$5$i$K(B, $B=q$-9~$_2DG=$J%G%#%l%/%H%j$r8!:w%Q%9$KF~$l$F$O$$$1$^$;$s(B. $B$H$$$&$N$b(B, $B$=$&$J$C$F$$$k$H967b<T$,8!:w%Q%9>e$N%U%!%$%k$r=q$-49$($?$jCV$-49$($?$j$G$-(B, $B$"$J$?$,$=$N%3%^%s%I$r<!$K;H$C$?$H$-$K(B root $B8"8B$GF0:n$5$;$k$3$H$,$G$-$k$+$i$G$9(B.</LI> <LI>root $B$G(B rlogin/rsh/rexec $B%3%^%s%I72(B ($B$$$o$f$k(B r-$B%f!<%F%#%j%F%#(B) $B$r;H$C$F$O$$$1$^$;$s(B. $B$3$l$i$N%3%^%s%I$O?'!9$J967b$NBP>]$H$J$k$N$G(B, root $B$N$H$-$K<B9T$9$k$N$O<B$K4m81$G$9(B. root $B%f!<%6MQ$N(B <CODE>.rhosts</CODE> $B%U%!%$%k$O7h$7$F:n$C$F$O$$$1$^$;$s(B. </LI> <LI><CODE>/etc/securetty</CODE> $B$K$O(B root $B$,%m%0%$%s$G$-$kC<Kv$N%j%9%H$,=q$+$l$F$$$^$9(B. (Red Hat Linux $B$N(B)$B%G%U%)%k%H$G$O(B, $B$3$l$K$O%m!<%+%k$N2>A[C<Kv(B (vty) $B$@$1$,@_Dj$5$l$F$$$^$9(B. $B$3$N%U%!%$%k$K$=$l0J30$NC<Kv$rDI2C$9$k$H$-$K$O(B, $B:Y?4$NCm0U$rJ'$C$F$/$@$5$$(B. $BI,MW$,$"$k;~$G$b0lHL%f!<%6$H$7$F(B ($B$G$-$l$P(B <CODE> <A HREF="Security-HOWTO-5.html#ssh">ssh</A></CODE> $BEy$N0E9f2=%A%c%M%k7PM3$G(B) $B%j%b!<%H%m%0%$%s$7(B, $B$=$l$+$i(B <CODE>su</CODE> $B$9$k$3$H$,$G$-$k$O$:$J$N$G(B, $BD>@\(B root $B$H$7$F%m%0%$%s$G$-$kI,MW$O$"$j$^$;$s(B.</LI> <LI>root $B$G$N:n6H$O(B, $BI,$:$f$C$/$j(B, $B?5=E$K9T$$$^$7$g$&(B. $B:n6H$N7k2L$OBg$-$J1F6A$r$b$?$i$9$+$b$7$l$^$;$s(B. $B%3%^%s%I$rBG$A9~$`A0$K(B, $B$^$:9M$($^$7$g$&(B!</LI> </UL> <P>$B$I$&$7$F$bC/$+(B ($B$G$-$l$PHs>o$K?.Mj$7$F$$$k?M(B) $B$K(B root $B8"8B$rM?$($kI,MW$,$"$k>l9g$K$b(B, $B$3$l$rJd=u$9$k%D!<%k$,$"$j$^$9(B. <CODE>sudo</CODE> $B$r;H$($P(B, $B%f!<%6$N%Q%9%o!<%I$r;H$C$F(B, $B@)8B$5$l$?%3%^%s%I72$r(B root $B$N8"8B$G;HMQ$5$;$k$3$H$,$G$-$^$9(B. $B$3$l$K$h$j(B, $BNc$($P(B Linux $B%^%7%s$N%j%`!<%P%V%k%a%G%#%"$r(B $B%f!<%6$K%$%8%'%/%H$d%^%&%s%H$r$5$;$k$1$l$I(B, $B$=$l0J30$N(B root $B8"8B$OM?$($J$$$h$&$K$9$k$3$H$,$G$-$^$9(B. <CODE>sudo</CODE> $B$O@.8y!&<:GT$r4^$a$FA4$F$N(B <CODE>sudo</CODE> $B$N;n$_$r%m%0$K<h$k$3$H$,$G$-$k$N$G(B, $BC/$,2?$N$?$a$K$I$N%3%^%s%I$r;H$C$?$+D4::$9$k$3$H$,$G$-$^$9(B. $B$3$N$?$a(B, <CODE>sudo</CODE> $B$OB?$/$N%f!<%6$,(B root $B8"8B$r;}$D$h$&$J4D6-$G$b$&$^$/MxMQ$9$k$3$H$,$G$-$^$9(B. $B$J$<$J$i(B, $B%7%9%F%`$KBP$7$F9T$o$l$?JQ99$rD4$Y$d$9$/$7$F$/$l$k$+$i$G$9(B. <P><CODE>sudo</CODE> $B$r;H$C$FFCDj$N%f!<%6$KFCDjL\E*$N$?$a$N(B $BFCDj$N8"8B$rM?$($k$3$H$,$G$-$^$9$,(B, sudo $B$K$O7gE@$,$$$/$D$+$"$j$^$9(B. sudo $B$O(B, $B%5!<%P$N:F5/F0$d%f!<%6$N?75,DI2C$J$I(B, $B8B$i$l$?:n6H$NAH$KBP$7$F$@$1;H$&$Y$-$G$9(B. $B%7%'%k%(%9%1!<%W$,$G$-$kG$0U$N%W%m%0%i%`$O(B, $B$3$l$r(B <CODE>sudo</CODE> $B$rDL$7$F;H$C$?%f!<%6$K(B root $B8"8B$rM?$($F$7$^$$$^$9(B. $BNc$($P(B, $BBgItJ,$N%(%G%#%?$,$3$l$K3:Ev$7$^$9(B. $B$^$?(B, /bin/cat $B$N$h$&$KL532$J%W%m%0%i%`$G$"$C$F$b(B $B%U%!%$%k$N>e=q$-$K;H$&$3$H$,$G$-$k$N$G(B, $B$3$l$r;H$C$F(B root $B8"8B$,GK$i$l$k$3$H$b$"$jF@$^$9(B. <CODE>sudo</CODE> $B$O8"8B$r;H$o$;$k$?$a$N<jCJ$H9M$($k$Y$-$G$"$j(B, root $B%f!<%6$r$h$j0BA4$K$9$k$?$a$KCV$-49$($k$b$N$H4|BT$7$F$O$$$1$^$;$s(B. <P> <HR> <A HREF="Security-HOWTO-5.html">$B<!$N%Z!<%8(B</A> <A HREF="Security-HOWTO-3.html">$BA0$N%Z!<%8(B</A> <A HREF="Security-HOWTO.html#toc4">$BL\<!$X(B</A> </BODY> </HTML>
