APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed
RSS Feeds RSS Feeds









AIX



AIX Operating System Hardening Procedures & Security Guide Some security packages address the problem by stripping all (or nearly all) network services and then instruct you to be careful about what you add to the system. That's a great approach but requires that you "get your hands on" the system before anyone laye rs anything onto it and you understand what you're adding to the system when you add it back in. These are two conditions that do not apply at many sites.\xa0 The approach here is different. We will consider services offered by the AIX 5.1 operating system, try to explain what each does, note the risks involved with each and make recommendations about what one ought to do to mitigate the risk.


Title Date Comments
AIX Operating System Hardening Procedures & Security Guide   2005 04 
- System Hardening Procedures for AIX using the principle of least privilege. If the user does not need the service, they are not allowed to access that service. -
AIX Secure Image Installation Procedures   2002 11 
- NOTE: Screenshots are from an ASCII installation of AIX 5.1 using Windows HyperTerminal. -
telnet to AIX resolv.conf issue   2005 09 
- We have an AIX machine with DNS entries at resolv.conf. I just found out that using telnet to access AIX, the AIX machine tries to resolve the IP add of the connecting client. In case you dn't have entries in your DNS server, the telnet prompts take too long to appear. -
Free Consultants List   2008 02 
- Free Unix and Consultants List - add your listing here! -
ncftp - a better ftp client   2003 12 
- The advantages of ncftp include automatic resumption of failed downloads and ease of working through firewalls. -
AIX Survival Guide   2002 01 
- Most reviewers have spoken very highly of this book. I hate to be the wet blanket, but I didn't think it was quite that good.

It's not a bad book, at all. I have to learn a bit about AIX for one of my clients, and I will say that this certainly gives me a head start on the curve. But I just had some bad feelings about some of the more general advice given (like the author's habit of adding SCSI devices on a running system or shutting down by simply "sync;sync" and powering off) to make me feel a little uncomfortable about the whole book. -

transferring passwd file from aix to sco   1997-2004 
- If you look at the man for ap you can get some hints. That's normally used for migrating from one SCO system to another - but I can envision that some creative editing on the file it generates might just do the trick. -
tape eject -->Re Ejecting tape in UW   1997-2004 
- Ejecting tapes on various operating systems. Don't forget the paper clip if all else fails! -
Visionfs AIX -->Re VisionFS Client will not start on AIX 4.3.3   1997-2004 
- Can't start Visionfs client on AIX, failed to mount SCO VisionFS SMB Client, stopping... -
 
 
Kerio Connect Mailserver
 
 
pavatar.jpg
book graphic












Have you tried our Tests?