Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 27 / 450

SUSE's RPM packages are gpg-signed. The key used by SUSE for signing is:
ID:9C800ACA 2000-10-19 SUSE Package Signing Key <build@suse.de>
Key fingerprint = 79C1 79B2 E1C8 20C1 890F 9994 A84E DAE8 9C80 0ACA
The command
rpm --checksig package.rpm
shows whether the checksum
and the signature of an uninstalled package are correct. Find the key on the first
CD of the distribution and on most key servers worldwide.
• Check your backups of user and system files regularly. Consider that if you do not
test whether the backup works, it might actually be worthless.
• Check your log files. Whenever possible, write a small script to search for suspicious
entries. Admittedly, this is not exactly a trivial task. In the end, only you can know
which entries are unusual and which are not.
• Use tcp_wrapper
to restrict access to the individual services running on your
machine, so you have explicit control over which IP addresses can connect to a
service. For further information regarding
tcp_wrapper
, consult the manual
pages of tcpd and hosts_access (
man 8 tcpd
,
man hosts_access
).
• Use SuSEfirewall to enhance the security provided by tcpd
(
tcp_wrapper
).
• Design your security measures to be redundant: a message seen twice is much
better than no message at all.
• If you use suspend to disk, consider to configure the suspend image encryption
using the
configure-suspend-encryption.sh
script. The program creates
the key, copies it to
/etc/suspend.key
, and modifies
/etc/suspend.conf
to use encryption for suspend images.
Security and Confidentiality 13