二季度4a離線檢查湛江網(wǎng)管維護中心合規(guī)結(jié)果

數(shù)數(shù)數(shù)22604402260數(shù)量數(shù)1202203204305306407408601設(shè)備IP:統(tǒng)->Solarisip路由發(fā)返回值1、返回值0、回值0，符合安全要#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondeniedget/dev/ipip_forwarding`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoipip_strict_dst_multihoming`openof/dev/ipfailed:Permissiondenied#bms-prompt#echodev/ipip_forward_directed_broadcasts`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied源于配置范，供參考，實vi/etc/init.d/inetinit：IPForwarding(IP發(fā)) 格的限定防止ipspoofndd-set/dev/ipip_strict_dst_multihoming1c.實施smurf攻， ndd-set/dev/ip0路由： ndd-set/dev/ipndd-set/dev/ipip_strict_dst_multihoming1ndd-set/dev/ip0ndd-set/dev/ipip_forward_src_routed0程中IP發(fā)功能前Solaris主行IP發(fā),在/etc目下建一個叫touch等于2設(shè)備IP:統(tǒng)->Solarisndd-set/dev/ipndd-set/dev/ipip6_send_redirects#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondeniedget/dev/ipip_forwarding`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoipip_strict_dst_multihoming`openof/dev/ipfailed:Permissiondenied#bms-prompt#echodev/ipip_forward_directed_broadcasts`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied源于配置范，供參考，實參數(shù)整，或在命令行中輸ndd-set/dev/ipip_send_redirects0#defaultisndd-set/dev/ip建文件/usr/sbin/inrouted以#!/usr/sbin/inrouted3設(shè)備IP”源于配置范，供參考，實入“控制面板－>網(wǎng)接－>本地接”，在高的設(shè)置中在“例外”在“例外->->更改范”允接入的網(wǎng)地址范。禁用4設(shè)備IP統(tǒng)->Windows留期”設(shè)置“90天”MinimumPasswordAge=MaximumPasswordAge=-MinimumPasswordLength=PasswordComplexity=PasswordHistorySize=LockoutBadCount=ResetLockoutCount=LockoutDuration=RequireLogonToChangePassword=ForceLogoffWhenHourExpire=0NewGuestName="Guest"ClearTextPassword=0LSAAnonymousNameLookup=EnableAdminAccount=[EventAudit]AuditSystemEvents=3AuditLogonEvents=AuditObjectAccess=AuditPrivilegeUse=AuditPolicyChange=AuditAccountManage=AuditProcessTracking=AuditDSAccess=[RegistryValues]源于配置范，供參考，實地安全策略”，在“戶策略->密策略”：“”設(shè)置“90天”補充操作明：5設(shè)備IP統(tǒng)->Windows表。根據(jù)列表只放系Internet（TCP/IP）屬性－>高TCP/IP設(shè)置”，在“”的屬性中啟用網(wǎng)接上的TCP/IP，TCP，UDP端口和IP {"0"} 源于配置范，供參考，實入“控制面板－>網(wǎng)接－>本地接”，入“Internet（TCP/IP）屬性－>高TCP/IP設(shè)置”，在“”的屬性中啟用網(wǎng)接上的TCP/IP的TCP，UDP端口和IP。補充操作明：命令：wmicNICCONFIGgetfindstr"TRUEIPAddress"得出6設(shè)備IP:統(tǒng)->Solarisip路由發(fā)返回值1、返回值0、回值0，符合安全要#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondeniedget/dev/ipip_forwarding`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoipip_strict_dst_multihoming`openof/dev/ipfailed:Permissiondenied#bms-prompt#echodev/ipip_forward_directed_broadcasts`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied源于配置范，供參考，實vi/etc/init.d/inetinit：IPForwarding(IP發(fā)) 是多宿主機，可以加上更格的限定防止ipspoof的攻ndd-set/dev/ipip_strict_dst_multihoming1發(fā)包廣播由于在發(fā)狀下默是允的，了防止被用來實施smurf攻， ndd-set/dev/ip0路由：ndd-set/dev/ipndd-set/dev/ipip_strict_dst_multihoming1ndd-set/dev/ip0ndd-set/dev/ipip_forward_src_routed0補充操作明：注意：啟動程中IP發(fā)功能前Solaris主行IP發(fā),存在小小的潛在安全生效必修改文件。在/etc目下建一個叫touch等于7設(shè)備IP:統(tǒng)->Solaris防止堆沖溢出noexec_user_stack_logt"/etc/systemegrep:can'topen/etc/system源于配置范，供參考，實/etc/system文件做備份。#cp/etc/system/etc/system.backup用vi器set保存文件，退出器。750/etc/system8設(shè)備IP:統(tǒng)->Solarisndd-set/dev/ipndd-set/dev/ipip6_send_redirects#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondeniedget/dev/ipip_forwarding`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoipip_strict_dst_multihoming`openof/dev/ipfailed:Permissiondenied#bms-prompt#echodev/ipip_forward_directed_broadcasts`openof/dev/ipfailed:Permissiondenied#bms-prompt#echoopenof/dev/ipfailed:Permissiondenied源于配置范，供參考，實參數(shù)整，或在命令行中輸ndd-set/dev/ipip_send_redirects0#defaultisndd-set/dev/ip建文件/usr/sbin/inrouted以#!/usr/sbin/inrouted9設(shè)備IP:統(tǒng)->Solaris次登；定候后可登。#bms-prompt#cat/etc/user_attr|sed'/^#/d'|sed'/^$/d'adm::::profiles=LogManagementlp::::profiles=PrinterManagement#bms-prompt#cat/etc/security/policy.conf|sed'/^#/d'|sed'/^$/d'PROFS_GRANTED=BasicSolarisUserCRYPT_DEFAULT=unix#bms-prompt#cat/etc/default/login|sed'/^#/d'|sed'/^$/d'源于配置范，供參考，實設(shè)置戶登失前 的次：vi等于或者大于允的次數(shù)定號：vi數(shù)定，如下所示，將要修改的戶行后面加vi/etc/user_attr定的戶設(shè)置no。補充操作明：默值：5次被定。10分鐘（600viDISABLETIME=600。root，一旦root引，因此配置要慎用。設(shè)備IP:統(tǒng)->RedhatserverIP的配置，并且的服務(wù)狀on。#bms-prompt##bms-prompt#ntpstatus=`ps-ef|grep-vgrep|wc-#bms-prompt#if[$ntpstatus!=0>>ntp.conf|grep-v""|wc-l`;elsecrontab-l|grep-v"^#"|grep"^#"|grepntp|wc-l`;nocrontabforrootnocrontabforroot#bms-prompt#unset源于配置范，供參考，實1、ntp#vinomodify#servicentpstart設(shè)備IP:統(tǒng)->Redhat和目行刪除、修改等操作不能夠成功即符#bms-prompt#ls-l/etc/default/*/etc/init.d/*/etc/rc*.d/*/tmp/*/etc/cron*|grep"\--rwxrwxrwx1rootroot3362Jun232009/-rwxrwxrwx1rootroot3362Jun232009#bms-prompt#echo"result="`ls-l/etc/grep"\-rwxrwxrwx"|wc-l`源于配置范，供參考，實件或目權(quán)限#chmod-R750/etc/init.d/*樣只有root個目下的腳本。etc/init.d/*/etc/rc*.d/*/etc/設(shè)備IP:統(tǒng)->Redhat 打印可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNIS+orNFSareinstalled,ifusedstartwith–doptionsothatthedefaultsnobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Deamon，可。Copy,Unix能,允算機之間以存-發(fā)方式交e-mail和消是Unix系統(tǒng)之間網(wǎng)的主要方式。可dmi：DesktopManagement集電系統(tǒng)信息的管理。autoinstall：可。低于安全要求，否符#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|grep"^S"#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp"^S"|wc-l`#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|awk-F/'{print#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lpF/'{print$NF}'|grep"^S"|wc-l`源于配置范，供參考，實查/etc/rc2.d和/etc/rc3.d重啟動確些變動生效，查/var/adm/messages日志文件，用ps-elf查是否有無程啟在/etc/init.d/可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNISorNFSareinstalled,ifusedstartwith–doptionsothatthedefaults“nobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Volmgt：VolumeDeamon，可。Copy,Unix系統(tǒng)的一功能,允算機之間以存-發(fā)方式交之前是Unixdmi：DesktopManagement。autoinstall：可。設(shè)備IP:統(tǒng)->Redhatshutdownrt4now配#bms-prompt#cat/etc/inittab|grep-v"^#"|grep"ctrlaltdel"ca::ctrlaltdel:/sbin/shutdown-t3-rnow源于配置范，供參考，實#vi-t4ALT-DELisdisabled"cat設(shè)備IP:統(tǒng)->RedhatserverIP的配置，并且的服務(wù)狀on。#bms-prompt##bms-prompt#ntpstatus=`ps-ef|grep-vgrep|wc-#bms-prompt#if[$ntpstatus!=0>ntp.conf|grep-v""|wc-l`;elsecrontab-l|grep-v"^#"|grep"^#"|grepntp|wc-l`;nocrontabforrootnocrontabforroot#bms-prompt#unset源于配置范，供參考，實1、ntp#vinomodify#servicentpstart設(shè)備IP:統(tǒng)->Redhat 打印可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNIS+orNFSareinstalled,ifusedstartwith–doptionsothatthedefaultsnobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Deamon，可。Copy,Unix能,允算機之間以存-發(fā)方式交e-mail和消是Unix系統(tǒng)之間網(wǎng)的主要方式?？蒬mi：DesktopManagement集電系統(tǒng)信息的管理。autoinstall：可。低于安全要求，否符#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|grep"^S"#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp"^S"|wc-l`#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|awk-F/'{print#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lpF/'{print$NF}'|grep"^S"|wc-l`源于配置范，供參考，實查/etc/rc2.d和/etc/rc3.d重啟動確些變動生效，查/var/adm/messages日志文件，用ps-elf查是否有無程啟在/etc/init.d/可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNISorNFSareinstalled,ifusedstartwith–doptionsothatthedefaults“nobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Volmgt：VolumeDeamon，可。Copy,Unix系統(tǒng)的一功能,允算機之間以存-發(fā)方式交之前是Unixdmi：DesktopManagement。autoinstall：可。設(shè)備IP統(tǒng)->Windows表。根據(jù)列表只放系Internet（TCP/IP）屬性－>高TCP/IP設(shè)置”，在“”的屬性中啟用網(wǎng)接上的TCP/IP，TCP，UDP端口和IP {""} 源于配置范，供參考，實入“控制面板－>網(wǎng)接－>本地接”，入“Internet（TCP/IP）屬性－>高TCP/IP設(shè)置”，在“”的屬性中啟用網(wǎng)接上的TCP/IP的TCP，UDP端口和IP。補充操作明：命令：wmicNICCONFIGgetfindstr"TRUEIPAddress"得出設(shè)備IP統(tǒng)->Windows留期”設(shè)置“90天”MinimumPasswordAge=MaximumPasswordAge=-MinimumPasswordLength=PasswordComplexity=PasswordHistorySize=LockoutBadCount=ResetLockoutCount=LockoutDuration=RequireLogonToChangePassword=ForceLogoffWhenHourExpire=0NewGuestName="Guest"ClearTextPassword=0LSAAnonymousNameLookup=EnableAdminAccount=[EventAudit]AuditSystemEvents=3AuditLogonEvents=AuditObjectAccess=AuditPrivilegeUse=AuditPolicyChange=AuditAccountManage=AuditProcessTracking=AuditDSAccess=[RegistryValues]源于配置范，供參考，實地安全策略”，在“戶策略->密策略”：“”設(shè)置“90天”補充操作明：設(shè)備IP統(tǒng)->Windows”源于配置范，供參考，實入“控制面板－>網(wǎng)接－>本地接”，在高的設(shè)置中在“例外”的程序接入網(wǎng)。在“例外->->更改范”允接入的網(wǎng)地址范。禁用設(shè)備名稱:設(shè)備IP:統(tǒng)->RedhatserverIP的配置，并且的服務(wù)狀on。#bms-prompt##bms-prompt#ntpstatus=`ps-ef|grep-vgrep|wc-#bms-prompt#if[$ntpstatus!=0>ntp.conf|grep-v""|wc-l`;elsecrontab-l|grep-v"^#"|grep"^#"|grepntp|wc-l`;#bms-prompt#unset源于配置范，供參考，實1、ntp#vinomodify#servicentpstart設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat 打印可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNIS+orNFSareinstalled,ifusedstartwith–doptionsothatthedefaultsnobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Deamon，可。Copy,Unix能,允算機之間以存-發(fā)方式交e-mail和消是Unix系統(tǒng)之間網(wǎng)的主要方式?？蒬mi：DesktopManagement集電系統(tǒng)信息的管理。autoinstall：可。低于安全要求，否符#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|grep"^S"#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp"^S"|wc-l`#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|awk-F/'{print#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lpF/'{print$NF}'|grep"^S"|wc-l`源于配置范，供參考，實查/etc/rc2.d和/etc/rc3.d重啟動確些變動生效，查/var/adm/messages日志文件，用ps-elf查是否有無程啟在/etc/init.d/可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNISorNFSareinstalled,ifusedstartwith–doptionsothatthedefaults“nobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Volmgt：VolumeDeamon，可。Copy,Unix系統(tǒng)的一功能,允算機之間以存-發(fā)方式交之前是Unixdmi：DesktopManagement。autoinstall：可。設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat戶登日志 配置，符合安全要#bms-prompt##bms-prompt#function>>if[-f/etc/syslog.confthenelsecat$SYSLOGCONF|sed'/^#/d'|sed'/^$/d'|awk'($2!~/*/)&&($2!~/-/){print}#bms-prompt#function{forFILTERin`cat$SYSLOGCONF|grep"^log"|grepfilter|cut-d\;-f2|cut-d\(-f2|cut-d\)-cat$SYSLOGCONF|grepforDESTINATIONin$SYSLOGCONF|grep"^log"|awk-F\;d\(-f2|cut-d\)-f1|sort|uniq`;docat$SYSLOGCONF|grep$DESTINATIONcat$SYSLOGCONF|grep}#bms-prompt#if[[`ps-ef|egrep'(syslogd|syslog-ng)'|grep-v"grep"|wc-l`!=0]];thenif[[`grep-sv"^#"/etc/sysconfig/f2`="syslog-ng"]];thenelse elseecho"syslogisnot源于配置范，供參考，實 authlog的句，保存退出#touch/var/log/authlog#/etc/init.d/syslogstop以上syslog配置，如果系統(tǒng)syslogisnot設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat送到程日志服務(wù)器，符合安全要求，否低#bms-prompt##bms-prompt#function?{?if[-f/etc/syslog.conf?then?else??cat$SYSLOGCONF|sed'/^#/d'|sed'/^$/d'|awk'($2!~/*/)&&($2!~/-/){print?}#bms-prompt#function?{??forFILTERin`cat$SYSLOGCONF|grep"^log"|grepfilter|cut-d\;-f2|cut-d\(-f2|cut-d\)-?cat$SYSLOGCONF|grep??forDESTINATIONin$SYSLOGCONF|grep"^log"|awk-F\;d\(-f2|cut-d\)-f1|sort|uniq`;do?cat$SYSLOGCONF|grep$DESTINATION??cat$SYSLOGCONF|grep?}#bms-prompt#if[[`ps-ef|egrep'(syslogd|syslog-ng)'|grep-v"grep"|wc-l`!=0]];?thenif[[`grep-sv"^#"/etc/sysconfig/f2`="syslog-ng"]];?then?else? ??elseecho"syslogisnot?源于配置范，供參考，實加上一行：*.*可以將"*.*"替你實際需要的日志信息。比如：kern.*/之間一個Tab。#/etc/init.d/syslogstop中存在類似@IP或者udpIPsyslogisnot設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat符合安全要求，否低#bms-prompt##bms-prompt#function?{?if[-f/etc/syslog.conf?then?else??cat$SYSLOGCONF|sed'/^#/d'|sed'/^$/d'|awk'($2!~/*/)&&($2!~/-/){print?}#bms-prompt#function?{??forFILTERin`cat$SYSLOGCONF|grep"^log"|grepfilter|cut-d\;-f2|cut-d\(-f2|cut-d\)-?cat$SYSLOGCONF|grep??forDESTINATIONin$SYSLOGCONF|grep"^log"|awk-F\;d\(-f2|cut-d\)-f1|sort|uniq`;do?cat$SYSLOGCONF|grep$DESTINATION??cat$SYSLOGCONF|grep?}#bms-prompt#if[[`ps-ef|egrep'(syslogd|syslog-ng)'|grep-v"grep"|wc-l`!=0]];?thenif[[`grep-sv"^#"/etc/sysconfig/f2`="syslog-ng"]];?then?else? ??elseecho"syslogisnot?源于配置范，供參考，實配置形如*.err;/var/adm/messages的句，保#/etc/init.d/syslogstopsyslogisnot設(shè)備名稱:設(shè)備IP:統(tǒng)->RedhatserverIP的配置，并且的服務(wù)狀on。#bms-prompt##bms-prompt#ntpstatus=`ps-ef|grep-vgrep|wc-#bms-prompt#if[$ntpstatus!=0??ntp.conf|grep-v""|wc-l`;?elsecrontab-l|grep-v"^#"|grep?"^#"|grepntp|wc-l`;?#bms-prompt#unset源于配置范，供參考，實1、ntp#vinomodify#servicentpstart設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat authlog配置，符合安全要求，否低于安全#bms-prompt##bms-prompt#function>{if[-f/etc/syslog.confthenelsecat$SYSLOGCONF|sed'/^#/d'|sed'/^$/d'|awk'($2!~/*/)&&($2!~/-/){print}#bms-prompt#function{forFILTERin`cat$SYSLOGCONF|grep"^log"|grepfilter|cut-d\;-f2|cut-d\(-f2|cut-d\)-cat$SYSLOGCONF|grepforDESTINATIONin$SYSLOGCONF|grep"^log"|awk-F\;d\(-f2|cut-d\)-f1|sort|uniq`;docat$SYSLOGCONF|grep$DESTINATIONcat$SYSLOGCONF|grep}#bms-prompt#if[[`ps-ef|egrep'(syslogd|syslog-ng)'|grep-v"grep"|wc-l`!=0]];thenif[[`grep-sv"^#"/etc/sysconfig/f2`="syslog-ng"]];thenelse elseecho"syslogisnot源于配置范，供參考，實配置形如authpriv.*/var/log/authlog的句，保存退出#/etc/init.d/syslogstop#/etc/init.d/syslogstartsyslogisnot設(shè)備名稱:設(shè)備IP:統(tǒng)->Redhat 打印可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNIS+orNFSareinstalled,ifusedstartwith–doptionsothatthedefaultsnobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Deamon，可。Copy,Unix能,允算機之間以存-發(fā)方式交e-mail和消是Unix系統(tǒng)之間網(wǎng)的主要方式。可dmi：DesktopManagement集電系統(tǒng)信息的管理。autoinstall：可。低于安全要求，否符#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|grep"^S"#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp"^S"|wc-l`#bms-prompt#ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lp\b|rpc\b|snmpdxsendmail\b|autoinstall\b"|awk-F/'{print#bms-prompt#echo"result="`ls/etc/rc2.d/*/etc/rc3.d/*/etc/rc4.d/*/etc/rc5.d/*|egrep"lpF/'{print$NF}'|grep"^S"|wc-l`源于配置范，供參考，實查/etc/rc2.d和/etc/rc3.d重啟動確些變動生效，查/var/adm/messages日志文件，用ps-elf查是否有無程啟在/etc/init.d/可。rpc：可。snmpdx：keyserv：KeyservDeamonisonlyusedifNISorNFSareinstalled,ifusedstartwith–doptionsothatthedefaults“nobody”keyisnotallowed，可。nscd：NameServiceCacheDaemon，可。Volmgt：VolumeDeamon，可。Copy,Unix系統(tǒng)的一功能,允算機之間以存-發(fā)方式交之前是Unixdmi：DesktopManagement。autoinstall：可。12014-06-272行號管理2014-06-2732014-06-2742014-06-2752014-06-276定無號2014-06-2772014-06-278cron等2014-06-2792014-06-27配號任到人2014-06-272014-06-27堆沖溢出2014-06-272014-06-272014-06-272014-06-27查是否限制ftp可以使用的目范2014-06-272014-06-272014-06-27控制2014-06-27root2014-06-272014-06-272014-06-27查是否inetd2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27su是否符合復(fù)度要求特權(quán)使用的核是否符合復(fù)度要求查名稱：查權(quán)限指派安 此算機程登端口毒件系統(tǒng)事件的核2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27定無號2014-06-27補丁-ServicePack2014-06-272014-06-272014-06-27全要求-從程系統(tǒng)強制機攻保護要求-更改缺省戶名稱2014-06-272014-06-272014-06-272014-06-27配號任到人行號管理2014-06-272014-06-272014-06-27全要求-戶管理的核2014-06-272014-06-272014-06-272014-06-27全要求-系統(tǒng)2014-06-27象的核2014-06-27全要求-允本地登2014-06-27程追蹤的核2014-06-27目服務(wù)的核2014-06-272014-06-272014-06-272014-06-27inetd中2014-06-272014-06-272014-06-27配號任到人2014-06-272014-06-27控制2014-06-27查是否cron等2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27以使用的目范2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27su定無號是否符合復(fù)度要求2014-06-272014-06-272014-06-272014-06-272014-06-27控制2014-06-272014-06-272014-06-272014-06-272014-06-27設(shè)置登成功后警告Banner2014-06-272014-06-272014-06-27定無號是否符合復(fù)度要求由發(fā)配號任到人UID0的非rootsu2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27FTP2014-06-272014-06-272014-06-272014-06-27FTP的戶netrc文件2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-27控制2014-06-27UID0的非root2014-06-272014-06-272014-06-27FTP2014-06-272014-06-272014-06-27行號管理2014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-06-272014-0