AIX Training : IBM AIX Systems Administration Security Issues

IBM AIX Systems Administration Security Issues

AIX Training Overview

This course will teach the commands and methods needed to setup and enforce a security domain on an IBM AIX system. The course will use a problem solving approach in the lab exercises to give systems administrators hands-on reinforcement of these methods.

AIX Training Prerequisites

It is assumed that the student has completed the Fundamentals of AIX and the IBM AIX Systems Administration: Essential Operations courses, or has equivalent system experience.

AIX Training Course duration

This course normally requires one (1) day, approximately 60% lecture, and 40% lab time.

AIX Training Course Objectives

On completion of this course, a system manager should be able to load the IBM AIX operating system with enhanced auditing features; check file systems for security problems; design and enforce a secure password specification and modification mechanism; and review security considerations in other areas of a Unix system.

AIX Training Course outline

Advanced System Concepts for System Administrators

Process concepts
Shell command usage and review
Overview of issues related to Unix security
System administrator functions related to security

System Security Features Updating

Security levels in a Unix system
Rebuilding the Unix kernel with auditing

Managing of System Users

Using the root account securely
Password issues
changing
encryption
aging and expirations
shadow files
Groups

File System Security

File permissions review
Special permissions: SUID,SGID,Sticky Bits
Device files
Using chown and chgrp
Backups

Using Unix Log Files

Users
- lastlog,utmp,wtmp,pacct,syslog
System
- shutdownlog
- sulog/messages

Network Security

Proper maintenance of the /etc/hosts file
Using the "r" commands
The restricted shell
NFS security implications
Known problems with SMTP (sendmail)
finger utility security issues
TFTP issues