Go back to fronty page View most popular entries View latest additions Submit tutorials to UnixTutorials.info
UnixTutorials logo

Security related tutorials

Linux Setting the SUID/SGID bits
Post date: June 27, 2009, 04:06 Category: Security Views: 554 Comments: 0
Tutorial quote: SetUID bit, the executable which has the SUID set runs with the ownership of the program owner. That is, if you own an executable, and another person issues the executable, then it runs with your permission and not his. The default is that a program runs with the ownership of the person executing the binary.
OpenSUSE Block ssh brute force attack on OpenSuSe
Post date: June 27, 2009, 04:06 Category: Security Views: 784 Comments: 0
Tutorial quote: A brute force attack consists of trying every possible code, combination, or password until you find the right one.

As an example, imagine a system which only allows 4 digit PIN codes. This means that there are a maximum of 10,000 possible PIN combinations.
OpenSUSE Highlight Domain & Subdomain for SSL websites in Firefox
Post date: May 27, 2009, 17:05 Category: Security Views: 710 Comments: 0
Tutorial quote: When you visit a Secure website in Firefox chances are that the FavIcon for the website is replaced with a Green bar with the details of the company. This is because of the default properties in Firefox to display detailed information of the website from the Extended Validation Certificate on the website. However, if the website doesn’t host a Extended Validation certificate then the website URL (link) in the address bar is not highlighted or in otherwords shows as a normal website URL.
OpenSUSE Perfect Paper Passwords - One Time Password System (OpenSuse)
Post date: April 20, 2009, 04:04 Category: Security Views: 831 Comments: 0
Tutorial quote: Almost without exception, today's Internet users prove their identity online using a fixed account name and password. In the past, this simple system provided sufficient security. But with the growing popularity of online banking and eCommerce, the value of stealing online identities has skyrocketed. And the increasing presence and "spyware" and "malware" on innocent users' computers means that users can be "watched" while logging onto their banking and other eCommerce sites. Once their logon credentials have been "captured" and stolen, Internet criminals can easily assume their identity.
OpenSUSE Removing Internet Junks (ads, banners, pop-ups, etc ..) using privoxy on OpenSuSe
Post date: April 20, 2009, 04:04 Category: Security Views: 827 Comments: 0
Tutorial quote: Privoxy is a Web proxy based on Internet Junkbuster with advanced filtering capabilities for protecting privacy, filtering Web page content, managing cookies, controlling access, and removing ads, banners, pop-ups, and other obnoxious Internet junk. Privoxy has a very flexible configuration and can be customized to suit individual needs and tastes. Privoxy is useful for both stand-alone systems and multi-user networks.
Linux How to Create and Configure robot.txt for Apache web server
Post date: February 17, 2009, 02:02 Category: Security Views: 856 Comments: 0
Tutorial quote: "Robots.txt" is a regular text file that through its name, has special meaning to the majority of "honorable" robots on the web. By defining a few rules in this text file, you can instruct robots to not crawl and index certain files, directories within your site, or at all. For example, you may not want Google to crawl the /images directory of your site, as it's both meaningless to you and a waste of your site's bandwidth. "Robots.txt" lets you tell Google just that.
OpenSUSE Encrypt-Decrypt files using mcrypt on OpenSuse
Post date: January 27, 2009, 01:01 Category: Security Views: 875 Comments: 0
Tutorial quote: MCrypt is a replacement for the old crypt() package and crypt(1) command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers. Above all, it allows you to have some really neat code on your machine. :)

The companion to MCrypt is Libmcrypt, which contains the actual encryption functions themselves, and provides a standardized mechanism for accessing them.
OpenSUSE How to Enable-Disable Novell AppArmor on OpenSuse 11.1
Post date: January 27, 2009, 01:01 Category: Security Views: 1092 Comments: 0
Tutorial quote: Novell AppArmor is configured to run by default on any fresh installation of openSUSE. There are two ways of toggling the status of AppArmor:
Linux Block Spammers/Hackers With mod_defensible On Apache2
Post date: December 5, 2008, 06:12 Category: Security Views: 669 Comments: 0
Tutorial quote: mod_defensible is an Apache 2.x module intended to block spammers using DNSBL servers.

It will look at the client IP and check it in one or several DNSBL servers and return
a 403 Forbidden page to the client.
Linux Configuring sudo and adding users to Wheel group
Post date: December 5, 2008, 06:12 Category: Security Views: 925 Comments: 0
Tutorial quote: f a server needs to be administered by a number of people it is normally not a good idea for them all to use the root account. This is because it becomes difficult to determine exactly who did what, when and where if everyone logs in with the same credentials. The sudo utility was designed to overcome this difficulty.