Plante moden Linaks distribusen oli provaedem samfala besik sekuriti fija (otomatik softwe/sevis apdets, ivent loging, akses kontrol mo faeawol fangsen), we oltaem oli enebelem olgeta long difol olsem pat blong Lanex bild. Ol individual we oli setemap wan Linaks wokstesen oli sud gat wan besik andanstanting blong opereting sistem ia, mo sapos i nesesari tekem moa gaidens (olsem long ofisal Linaks distribusen websaet, ofisal onlaen Linaks forom o sekuriti meling list blong wan patikula Linaks distribusen we oli yusum).
Ol risk
Ol bihevia risk
- Fulap risk olsem frod, phishing, spam mo aedentiti teft we i aplae long Linaks yusa i semak long ol yusa blong ol narafala opereting sistem.
- Ol pua yusa jois, olsem oli wik o oli nogat paswod, mekem se oli feil blong monitorem ol ivent log mo no konfigurem Linaks softwe long korek wei.
Ol teknoloji risk
- Ol Risk long Linaks wokstesen oli save inkris from ol sevis we oli no nesesari mo livim ol netwok pot ia oli stap long risk oli open.
- Taem i gat feila blong pajem Linaks sofwe mo ol sevis kwiktaem o nogat, espesali wetem ol risk we oli pablisim.
- Blong ranem wan seves we i no sekua, olsem taem yusum wan sistem we oli disaenem blong yusum long wan lokol eria netwok ova long intenet.
Ol risk taem we oli tritim wan pesen i no stret blong benefit blong olgeta
- Sosol enjeniering, infomesen teft.
- Spam, ol trojan, ol botnek, ol bak doa, ol vaeres, ol rutkit.
- Dinael blong ol sevis atak.
- Akses blong ol man we oli nogat ol raet we oli kamap.
Protektem infomesen blong yu mo ol wokstesen
Redi blong stat
- Tekem wan Linaks opereting sistem softwe (inkludum ol binari, setemap ol fael mo ol paj) long ol trasted, riliabol mo ol sos we oli trastem, olsem wan ofisal Linaks distribusen CD/DVD o Linaks distribusen websaet we i lijitimet o loaful.
- Mekem jenis long ol Linaks wokstesen fael sistem wetem fulap patisen (eksampol yusum ol fdisk (o semak) blong krietem wan seperet rut patisen, swapem spes, ol binari fael mo yusa fael spes).
- Jekem ol kwaliti blong ol Linaks opereting sistem softwe bifo oli instolem (eksampol jekem ol dijitel signeja mo/o ol valiu).
- Mekem sua yu no login olsem wan prevelij yusa olsem rut. Be, yu log in olsem wan non-prevelij yusa akaon mo yusum su koman blong pefomem ol administretiv wok.
- Disebelem autoran fija blong stopem media blong i ron o wok otomatik.
- Konfigurem ol yusa akaon blong lokem seson afta wan pri-difaen period blong inaktiviti (eksamapl 15 minit).
- Oltaem yu mas ap-tu-deit wetem Linak bild (eksampol mekem sua yu jekem ol apdeit mo ol patj blong opereting sistem mo ol aplikesen).
Jensem ol seves mo ol yusa
- Disable or restrict all unnecessary services and unnecessary start-up scripts (including those associated with Bluetooth, USB, wireless networking and infrared).
- Avoid using insecure administration programs such as rlogin, telnet, tftp, ftp, rsh and rexec, and instead use secure remote login, file transfer and shell programs, such as sftp, scp and ssh.
- Unnecessary user accounts (for example, guest) and groups, and ensure all user accounts are required to authenticate (for example, using a password) before being granted access to the Linux workstation.
- Use strong passwords for all user accounts on the Linux workstation (for example, minimum eight characters, mix of uppercase, lowercase, alphanumeric and special characters).
- Linux workstations requires a range of activities, many of which are relevant to all computers regardless of operating system software used, including Microsoft Windows and Apple Mac OS X (for example, protecting the boot sequence, setting the permissions of files, configuring event logging, establishing backups and monitoring for suspicious files or activity).
- If you require more detailed advice for protecting Linux workstations (including firewalls, virus protection, disk and file encryption, email protection, web browser configuration, and backup software), you should consult specialist advice from an individual or organisations that specialise in Linux and Linux security.