1¡B¼·±¼ºô½u
³o¬O³Ì¦w¥þªºÂ_¶}Ãìµ²ªº¤èªk¡A°£¤F«OÅ@¦Û¤v¥~,¤]¥i¯à«OÅ@¦Pºô¬qªº¨ä¥L¥D¾÷¡C
2¡B¤ÀªRµn¿ýÀɸê°T,·j¯Á¥i¯à¤J«Iªº³~®|
³Q¤J«I«á,¨M¤£¬O«·s¦w¸Ë´N¥i¥H¤F,ÁÙn¤ÀªR¥D¾÷³Q¤J«Iªºì¦]©M³~®|,¦pªG§ä¥X¤F°ÝÃDÂI,´N¥i¯à¨Ï±zªº¥D¾÷¥H«á§ó¦w¥þ,¦P®É¤]´£°ª¤F¦Û¤vªºLinux¤ô·Ç¡C
¦pªG¤£ª¾¹D¦p¦ó§ä¥X¤J«I³~®|,¤U¦¸ÁÙ¦³¥i¯àµo¥Í¦P¼Ëªº¨Æ¡C¤@¯ë:
(1)¡B¤ÀªRµn¿ýÀÉ:¥i¥H³q¹L¤ÀªR¤@¨Ç¥Dnªºµn¿ýÀɧä¨ì¹ï¤èªºIP¥H¤Î¥i¯à¥X²{ªºº|¬}¡C¤@¯ë¤ÀªRªºÀɮ׬°:/var/log/messages©M/var/log/secure¤å¥ó¡CÁÙ¥i¥H¨Ï¥Îlast©R¥O§ä¥X³Ì«á¤@Óµn¿ýªÌªº¸ê°T¡C
(2)¡BÀˬd¥D¾÷¶}©ñªºªA°È:«Ü¦hLinuxºÞ²zû¤£ª¾¹D¦Û¤vªº¥D¾÷¤W¶}©ñ¤F¦h¤ÖªA°È,¨CÓªA°È³£¦³º|¬}©Î¤£¸Ó±Ò°Êªº¼W±j«¬©Î´ú¸Õ«¬¥\¯à¡C§ä¥X¨t²Î¤WªºªA°È,³vÓÀˬdªA°È¬O§_¦³º|¬}©Î³]¸m¤Wªº¥¢»~¡C
(3)¡B«n¸ê®Æ³Æ¥÷
©Ò¿×«nªº¸ê®Æ´N¬O«DLinux¤Wªºì¦³¸ê®Æ¡C¦p/etc/passwd,/etc/shadow,WWWºô¶ªº¸ê®Æ,/homeùتº¥Î¤áÀÉ,¦Ü©ó/etc/*,/usr/,/varµ¥¥Ø¿ý¤Uªº¸ê®Æ´N¤£n³Æ¥÷¤F¡C
(4)¡B¨t²Î«¸Ë
«nªº¬O¿ï¾Ü¦X¾Aªº¥],¤£n±N©Ò¦³ªº¥]³£¦w¸Ë¡C
(5)¡B¥]º|¬}׸É
¦w¸Ë«á,n¥ß§Y§ó·s¨t²Î¥],§ó·s«á¦A³]©w¨¾¤õÀð¾÷¨î,¦P®ÉÃö³¬¤@¨Ç¤£¥²nªºªA°È,³Ì«á¤~´¡¤Wºô½u¡C
(6)¡BÃö³¬©Î¨ø¸ü¤£»ÝnªºªA°È
±Ò°ÊªºªA°È¶V¤Ö,¨t²Î¤J«Iªº¥i¯à©Ê´N¶V©³¡C
(7)¡B¸ê®Æ«ì´_»P«ì´_ªA°È³]©w
³Æ¥÷ªº¸ê®Æn½Æ»s¦^¨t²Î,µM«á±N´£¨ÑªºªA°È¦A¦¸¶}©ñ¡C
(8)¡B±N¥D¾÷¶}©ñ¨ìºô¸ô¤W.


