LINUX configuration check SERVER_VER : Linux =============================================================================== ####################################################################################### #################################### Start Time ##################################### ####################################################################################### date: invalid date `/t' WINS-UNIX-Linux_v1.7.sh: line 252: /t: No such file or directory ####################################################################################### ############################## Kernel Information ################################# ####################################################################################### Linux spam 2.6.32-696.el6.x86_64 #1 SMP Tue Mar 21 19:29:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux ####################################################################################### ################################ IP Information ################################### ####################################################################################### eth0 Link encap:Ethernet HWaddr 08:94:EF:59:74:C0 inet addr:211.61.50.115 Bcast:211.61.50.255 Mask:255.255.255.0 inet6 addr: fe80::a94:efff:fe59:74c0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:50253 errors:0 dropped:0 overruns:0 frame:0 TX packets:10243 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:6531149 (6.2 MiB) TX bytes:1247616 (1.1 MiB) Interrupt:16 eth1 Link encap:Ethernet HWaddr 08:94:EF:59:74:C1 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:17 eth2 Link encap:Ethernet HWaddr 08:94:EF:59:74:C2 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:16 eth3 Link encap:Ethernet HWaddr 08:94:EF:59:74:C3 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:17 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:43 errors:0 dropped:0 overruns:0 frame:0 TX packets:43 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:3594 (3.5 KiB) TX bytes:3594 (3.5 KiB) usb0 Link encap:Ethernet HWaddr 0A:94:EF:59:74:C7 BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) ####################################################################################### ################################# Network Status ################################## ####################################################################################### Active Internet connections (servers and established) tcp 0 0 0.0.0.0:50022 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:5051 0.0.0.0:* LISTEN tcp 0 0 211.61.50.115:50022 211.61.48.192:49439 ESTABLISHED tcp 0 0 211.61.50.115:50022 211.61.48.195:18885 ESTABLISHED tcp 0 0 211.61.50.115:50022 211.61.48.192:50350 ESTABLISHED tcp 0 0 :::50022 :::* LISTEN tcp 0 0 ::1:25 :::* LISTEN Active UNIX domain sockets (servers and established) unix 2 [ ACC ] STREAM LISTENING 19034 public/cleanup unix 2 [ ACC ] STREAM LISTENING 19041 private/tlsmgr unix 2 [ ACC ] STREAM LISTENING 19045 private/rewrite unix 2 [ ACC ] STREAM LISTENING 19049 private/bounce unix 2 [ ACC ] STREAM LISTENING 19053 private/defer unix 2 [ ACC ] STREAM LISTENING 19057 private/trace unix 2 [ ACC ] STREAM LISTENING 19061 private/verify unix 2 [ ACC ] STREAM LISTENING 19065 public/flush unix 2 [ ACC ] STREAM LISTENING 19069 private/proxymap unix 2 [ ACC ] STREAM LISTENING 19073 private/proxywrite unix 2 [ ACC ] STREAM LISTENING 19077 private/smtp unix 2 [ ACC ] STREAM LISTENING 19081 private/relay unix 2 [ ACC ] STREAM LISTENING 19085 public/showq unix 2 [ ACC ] STREAM LISTENING 19089 private/error unix 2 [ ACC ] STREAM LISTENING 19093 private/retry unix 2 [ ACC ] STREAM LISTENING 19097 private/discard unix 2 [ ACC ] STREAM LISTENING 19101 private/local unix 2 [ ACC ] STREAM LISTENING 19105 private/virtual unix 2 [ ACC ] STREAM LISTENING 19109 private/lmtp unix 2 [ ACC ] STREAM LISTENING 19113 private/anvil unix 2 [ ACC ] STREAM LISTENING 19117 private/scache unix 2 [ ACC ] STREAM LISTENING 10381 @/com/ubuntu/upstart ####################################################################################### ############################### Routing Information ############################### ####################################################################################### Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 211.61.50.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 0.0.0.0 211.61.50.1 0.0.0.0 UG 0 0 0 eth0 ####################################################################################### ################################# Process Status ################################## ####################################################################################### UID PID PPID C STIME TTY TIME CMD root 1 0 0 01:16 ? 00:00:01 /sbin/init root 2 0 0 01:16 ? 00:00:00 [kthreadd] root 3 2 0 01:16 ? 00:00:00 [migration/0] root 4 2 0 01:16 ? 00:00:01 [ksoftirqd/0] root 5 2 0 01:16 ? 00:00:00 [stopper/0] root 6 2 0 01:16 ? 00:00:00 [watchdog/0] root 7 2 0 01:16 ? 00:00:00 [migration/1] root 8 2 0 01:16 ? 00:00:00 [stopper/1] root 9 2 0 01:16 ? 00:00:00 [ksoftirqd/1] root 10 2 0 01:16 ? 00:00:00 [watchdog/1] root 11 2 0 01:16 ? 00:00:00 [migration/2] root 12 2 0 01:16 ? 00:00:00 [stopper/2] root 13 2 0 01:16 ? 00:00:00 [ksoftirqd/2] root 14 2 0 01:16 ? 00:00:00 [watchdog/2] root 15 2 0 01:16 ? 00:00:00 [migration/3] root 16 2 0 01:16 ? 00:00:00 [stopper/3] root 17 2 0 01:16 ? 00:00:00 [ksoftirqd/3] root 18 2 0 01:16 ? 00:00:00 [watchdog/3] root 19 2 0 01:16 ? 00:00:00 [migration/4] root 20 2 0 01:16 ? 00:00:00 [stopper/4] root 21 2 0 01:16 ? 00:00:00 [ksoftirqd/4] root 22 2 0 01:16 ? 00:00:00 [watchdog/4] root 23 2 0 01:16 ? 00:00:00 [migration/5] root 24 2 0 01:16 ? 00:00:00 [stopper/5] root 25 2 0 01:16 ? 00:00:00 [ksoftirqd/5] root 26 2 0 01:16 ? 00:00:00 [watchdog/5] root 27 2 0 01:16 ? 00:00:00 [migration/6] root 28 2 0 01:16 ? 00:00:00 [stopper/6] root 29 2 0 01:16 ? 00:00:00 [ksoftirqd/6] root 30 2 0 01:16 ? 00:00:00 [watchdog/6] root 31 2 0 01:16 ? 00:00:00 [migration/7] root 32 2 0 01:16 ? 00:00:00 [stopper/7] root 33 2 0 01:16 ? 00:00:00 [ksoftirqd/7] root 34 2 0 01:16 ? 00:00:00 [watchdog/7] root 35 2 0 01:16 ? 00:00:00 [migration/8] root 36 2 0 01:16 ? 00:00:00 [stopper/8] root 37 2 0 01:16 ? 00:00:00 [ksoftirqd/8] root 38 2 0 01:16 ? 00:00:00 [watchdog/8] root 39 2 0 01:16 ? 00:00:00 [migration/9] root 40 2 0 01:16 ? 00:00:00 [stopper/9] root 41 2 0 01:16 ? 00:00:00 [ksoftirqd/9] root 42 2 0 01:16 ? 00:00:00 [watchdog/9] root 43 2 0 01:16 ? 00:00:00 [migration/10] root 44 2 0 01:16 ? 00:00:00 [stopper/10] root 45 2 0 01:16 ? 00:00:00 [ksoftirqd/10] root 46 2 0 01:16 ? 00:00:00 [watchdog/10] root 47 2 0 01:16 ? 00:00:00 [migration/11] root 48 2 0 01:16 ? 00:00:00 [stopper/11] root 49 2 0 01:16 ? 00:00:00 [ksoftirqd/11] root 50 2 0 01:16 ? 00:00:00 [watchdog/11] root 51 2 0 01:16 ? 00:00:00 [migration/12] root 52 2 0 01:16 ? 00:00:00 [stopper/12] root 53 2 0 01:16 ? 00:00:00 [ksoftirqd/12] root 54 2 0 01:16 ? 00:00:00 [watchdog/12] root 55 2 0 01:16 ? 00:00:00 [migration/13] root 56 2 0 01:16 ? 00:00:00 [stopper/13] root 57 2 0 01:16 ? 00:00:00 [ksoftirqd/13] root 58 2 0 01:16 ? 00:00:00 [watchdog/13] root 59 2 0 01:16 ? 00:00:00 [migration/14] root 60 2 0 01:16 ? 00:00:00 [stopper/14] root 61 2 0 01:16 ? 00:00:00 [ksoftirqd/14] root 62 2 0 01:16 ? 00:00:00 [watchdog/14] root 63 2 0 01:16 ? 00:00:00 [migration/15] root 64 2 0 01:16 ? 00:00:00 [stopper/15] root 65 2 0 01:16 ? 00:00:00 [ksoftirqd/15] root 66 2 0 01:16 ? 00:00:00 [watchdog/15] root 67 2 0 01:16 ? 00:00:00 [events/0] root 68 2 0 01:16 ? 00:00:00 [events/1] root 69 2 0 01:16 ? 00:00:00 [events/2] root 70 2 0 01:16 ? 00:00:00 [events/3] root 71 2 0 01:16 ? 00:00:00 [events/4] root 72 2 0 01:16 ? 00:00:00 [events/5] root 73 2 0 01:16 ? 00:00:00 [events/6] root 74 2 0 01:16 ? 00:00:00 [events/7] root 75 2 0 01:16 ? 00:00:00 [events/8] root 76 2 0 01:16 ? 00:00:00 [events/9] root 77 2 0 01:16 ? 00:00:00 [events/10] root 78 2 0 01:16 ? 00:00:00 [events/11] root 79 2 0 01:16 ? 00:00:00 [events/12] root 80 2 0 01:16 ? 00:00:00 [events/13] root 81 2 0 01:16 ? 00:00:00 [events/14] root 82 2 0 01:16 ? 00:00:00 [events/15] root 83 2 0 01:16 ? 00:00:00 [events/0] root 84 2 0 01:16 ? 00:00:00 [events/1] root 85 2 0 01:16 ? 00:00:00 [events/2] root 86 2 0 01:16 ? 00:00:00 [events/3] root 87 2 0 01:16 ? 00:00:00 [events/4] root 88 2 0 01:16 ? 00:00:00 [events/5] root 89 2 0 01:16 ? 00:00:00 [events/6] root 90 2 0 01:16 ? 00:00:00 [events/7] root 91 2 0 01:16 ? 00:00:00 [events/8] root 92 2 0 01:16 ? 00:00:00 [events/9] root 93 2 0 01:16 ? 00:00:00 [events/10] root 94 2 0 01:16 ? 00:00:00 [events/11] root 95 2 0 01:16 ? 00:00:00 [events/12] root 96 2 0 01:16 ? 00:00:00 [events/13] root 97 2 0 01:16 ? 00:00:00 [events/14] root 98 2 0 01:16 ? 00:00:00 [events/15] root 99 2 0 01:16 ? 00:00:00 [events_long/0] root 100 2 0 01:16 ? 00:00:00 [events_long/1] root 101 2 0 01:16 ? 00:00:00 [events_long/2] root 102 2 0 01:16 ? 00:00:00 [events_long/3] root 103 2 0 01:16 ? 00:00:00 [events_long/4] root 104 2 0 01:16 ? 00:00:00 [events_long/5] root 105 2 0 01:16 ? 00:00:00 [events_long/6] root 106 2 0 01:16 ? 00:00:00 [events_long/7] root 107 2 0 01:16 ? 00:00:00 [events_long/8] root 108 2 0 01:16 ? 00:00:00 [events_long/9] root 109 2 0 01:16 ? 00:00:00 [events_long/10] root 110 2 0 01:16 ? 00:00:00 [events_long/11] root 111 2 0 01:16 ? 00:00:00 [events_long/12] root 112 2 0 01:16 ? 00:00:00 [events_long/13] root 113 2 0 01:16 ? 00:00:00 [events_long/14] root 114 2 0 01:16 ? 00:00:00 [events_long/15] root 115 2 0 01:16 ? 00:00:00 [events_power_ef] root 116 2 0 01:16 ? 00:00:00 [events_power_ef] root 117 2 0 01:16 ? 00:00:00 [events_power_ef] root 118 2 0 01:16 ? 00:00:00 [events_power_ef] root 119 2 0 01:16 ? 00:00:00 [events_power_ef] root 120 2 0 01:16 ? 00:00:00 [events_power_ef] root 121 2 0 01:16 ? 00:00:00 [events_power_ef] root 122 2 0 01:16 ? 00:00:00 [events_power_ef] root 123 2 0 01:16 ? 00:00:00 [events_power_ef] root 124 2 0 01:16 ? 00:00:00 [events_power_ef] root 125 2 0 01:16 ? 00:00:00 [events_power_ef] root 126 2 0 01:16 ? 00:00:00 [events_power_ef] root 127 2 0 01:16 ? 00:00:00 [events_power_ef] root 128 2 0 01:16 ? 00:00:00 [events_power_ef] root 129 2 0 01:16 ? 00:00:00 [events_power_ef] root 130 2 0 01:16 ? 00:00:00 [events_power_ef] root 131 2 0 01:16 ? 00:00:00 [cgroup] root 132 2 0 01:16 ? 00:00:00 [khelper] root 133 2 0 01:16 ? 00:00:00 [netns] root 134 2 0 01:16 ? 00:00:00 [async/mgr] root 135 2 0 01:16 ? 00:00:00 [pm] root 136 2 0 01:16 ? 00:00:00 [sync_supers] root 137 2 0 01:16 ? 00:00:00 [bdi-default] root 138 2 0 01:16 ? 00:00:00 [kintegrityd/0] root 139 2 0 01:16 ? 00:00:00 [kintegrityd/1] root 140 2 0 01:16 ? 00:00:00 [kintegrityd/2] root 141 2 0 01:16 ? 00:00:00 [kintegrityd/3] root 142 2 0 01:16 ? 00:00:00 [kintegrityd/4] root 143 2 0 01:16 ? 00:00:00 [kintegrityd/5] root 144 2 0 01:16 ? 00:00:00 [kintegrityd/6] root 145 2 0 01:16 ? 00:00:00 [kintegrityd/7] root 146 2 0 01:16 ? 00:00:00 [kintegrityd/8] root 147 2 0 01:16 ? 00:00:00 [kintegrityd/9] root 148 2 0 01:16 ? 00:00:00 [kintegrityd/10] root 149 2 0 01:16 ? 00:00:00 [kintegrityd/11] root 150 2 0 01:16 ? 00:00:00 [kintegrityd/12] root 151 2 0 01:16 ? 00:00:00 [kintegrityd/13] root 152 2 0 01:16 ? 00:00:00 [kintegrityd/14] root 153 2 0 01:16 ? 00:00:00 [kintegrityd/15] root 154 2 0 01:16 ? 00:00:00 [kblockd/0] root 155 2 0 01:16 ? 00:00:00 [kblockd/1] root 156 2 0 01:16 ? 00:00:00 [kblockd/2] root 157 2 0 01:16 ? 00:00:00 [kblockd/3] root 158 2 0 01:16 ? 00:00:00 [kblockd/4] root 159 2 0 01:16 ? 00:00:00 [kblockd/5] root 160 2 0 01:16 ? 00:00:00 [kblockd/6] root 161 2 0 01:16 ? 00:00:00 [kblockd/7] root 162 2 0 01:16 ? 00:00:00 [kblockd/8] root 163 2 0 01:16 ? 00:00:00 [kblockd/9] root 164 2 0 01:16 ? 00:00:00 [kblockd/10] root 165 2 0 01:16 ? 00:00:00 [kblockd/11] root 166 2 0 01:16 ? 00:00:00 [kblockd/12] root 167 2 0 01:16 ? 00:00:00 [kblockd/13] root 168 2 0 01:16 ? 00:00:00 [kblockd/14] root 169 2 0 01:16 ? 00:00:00 [kblockd/15] root 170 2 0 01:16 ? 00:00:01 [kacpid] root 171 2 0 01:16 ? 00:00:00 [kacpi_notify] root 172 2 0 01:16 ? 00:00:00 [kacpi_hotplug] root 173 2 0 01:16 ? 00:00:00 [ata_aux] root 174 2 0 01:16 ? 00:00:00 [ata_sff/0] root 175 2 0 01:16 ? 00:00:00 [ata_sff/1] root 176 2 0 01:16 ? 00:00:00 [ata_sff/2] root 177 2 0 01:16 ? 00:00:00 [ata_sff/3] root 178 2 0 01:16 ? 00:00:00 [ata_sff/4] root 179 2 0 01:16 ? 00:00:00 [ata_sff/5] root 180 2 0 01:16 ? 00:00:00 [ata_sff/6] root 181 2 0 01:16 ? 00:00:00 [ata_sff/7] root 182 2 0 01:16 ? 00:00:00 [ata_sff/8] root 183 2 0 01:16 ? 00:00:00 [ata_sff/9] root 184 2 0 01:16 ? 00:00:00 [ata_sff/10] root 185 2 0 01:16 ? 00:00:00 [ata_sff/11] root 186 2 0 01:16 ? 00:00:00 [ata_sff/12] root 187 2 0 01:16 ? 00:00:00 [ata_sff/13] root 188 2 0 01:16 ? 00:00:00 [ata_sff/14] root 189 2 0 01:16 ? 00:00:00 [ata_sff/15] root 190 2 0 01:16 ? 00:00:00 [ksuspend_usbd] root 191 2 0 01:16 ? 00:00:00 [khubd] root 192 2 0 01:16 ? 00:00:00 [kseriod] root 193 2 0 01:16 ? 00:00:00 [md/0] root 194 2 0 01:16 ? 00:00:00 [md/1] root 195 2 0 01:16 ? 00:00:00 [md/2] root 196 2 0 01:16 ? 00:00:00 [md/3] root 197 2 0 01:16 ? 00:00:00 [md/4] root 198 2 0 01:16 ? 00:00:00 [md/5] root 199 2 0 01:16 ? 00:00:00 [md/6] root 200 2 0 01:16 ? 00:00:00 [md/7] root 201 2 0 01:16 ? 00:00:00 [md/8] root 202 2 0 01:16 ? 00:00:00 [md/9] root 203 2 0 01:16 ? 00:00:00 [md/10] root 204 2 0 01:16 ? 00:00:00 [md/11] root 205 2 0 01:16 ? 00:00:00 [md/12] root 206 2 0 01:16 ? 00:00:00 [md/13] root 207 2 0 01:16 ? 00:00:00 [md/14] root 208 2 0 01:16 ? 00:00:00 [md/15] root 209 2 0 01:16 ? 00:00:00 [md_misc/0] root 210 2 0 01:16 ? 00:00:00 [md_misc/1] root 211 2 0 01:16 ? 00:00:00 [md_misc/2] root 212 2 0 01:16 ? 00:00:00 [md_misc/3] root 213 2 0 01:16 ? 00:00:00 [md_misc/4] root 214 2 0 01:16 ? 00:00:00 [md_misc/5] root 215 2 0 01:16 ? 00:00:00 [md_misc/6] root 216 2 0 01:16 ? 00:00:00 [md_misc/7] root 217 2 0 01:16 ? 00:00:00 [md_misc/8] root 218 2 0 01:16 ? 00:00:00 [md_misc/9] root 219 2 0 01:16 ? 00:00:00 [md_misc/10] root 220 2 0 01:16 ? 00:00:00 [md_misc/11] root 221 2 0 01:16 ? 00:00:00 [md_misc/12] root 222 2 0 01:16 ? 00:00:00 [md_misc/13] root 223 2 0 01:16 ? 00:00:00 [md_misc/14] root 224 2 0 01:16 ? 00:00:00 [md_misc/15] root 225 2 0 01:16 ? 00:00:00 [linkwatch] root 228 2 0 01:16 ? 00:00:00 [khungtaskd] root 229 2 0 01:16 ? 00:00:00 [kswapd0] root 230 2 0 01:16 ? 00:00:00 [ksmd] root 231 2 0 01:16 ? 00:00:00 [khugepaged] root 232 2 0 01:16 ? 00:00:00 [aio/0] root 233 2 0 01:16 ? 00:00:00 [aio/1] root 234 2 0 01:16 ? 00:00:00 [aio/2] root 235 2 0 01:16 ? 00:00:00 [aio/3] root 236 2 0 01:16 ? 00:00:00 [aio/4] root 237 2 0 01:16 ? 00:00:00 [aio/5] root 238 2 0 01:16 ? 00:00:00 [aio/6] root 239 2 0 01:16 ? 00:00:00 [aio/7] root 240 2 0 01:16 ? 00:00:00 [aio/8] root 241 2 0 01:16 ? 00:00:00 [aio/9] root 242 2 0 01:16 ? 00:00:00 [aio/10] root 243 2 0 01:16 ? 00:00:00 [aio/11] root 244 2 0 01:16 ? 00:00:00 [aio/12] root 245 2 0 01:16 ? 00:00:00 [aio/13] root 246 2 0 01:16 ? 00:00:00 [aio/14] root 247 2 0 01:16 ? 00:00:00 [aio/15] root 248 2 0 01:16 ? 00:00:00 [crypto/0] root 249 2 0 01:16 ? 00:00:00 [crypto/1] root 250 2 0 01:16 ? 00:00:00 [crypto/2] root 251 2 0 01:16 ? 00:00:00 [crypto/3] root 252 2 0 01:16 ? 00:00:00 [crypto/4] root 253 2 0 01:16 ? 00:00:00 [crypto/5] root 254 2 0 01:16 ? 00:00:00 [crypto/6] root 255 2 0 01:16 ? 00:00:00 [crypto/7] root 256 2 0 01:16 ? 00:00:00 [crypto/8] root 257 2 0 01:16 ? 00:00:00 [crypto/9] root 258 2 0 01:16 ? 00:00:00 [crypto/10] root 259 2 0 01:16 ? 00:00:00 [crypto/11] root 260 2 0 01:16 ? 00:00:00 [crypto/12] root 261 2 0 01:16 ? 00:00:00 [crypto/13] root 262 2 0 01:16 ? 00:00:00 [crypto/14] root 263 2 0 01:16 ? 00:00:00 [crypto/15] root 270 2 0 01:16 ? 00:00:00 [kthrotld/0] root 271 2 0 01:16 ? 00:00:00 [kthrotld/1] root 272 2 0 01:16 ? 00:00:00 [kthrotld/2] root 273 2 0 01:16 ? 00:00:00 [kthrotld/3] root 274 2 0 01:16 ? 00:00:00 [kthrotld/4] root 275 2 0 01:16 ? 00:00:00 [kthrotld/5] root 276 2 0 01:16 ? 00:00:00 [kthrotld/6] root 277 2 0 01:16 ? 00:00:00 [kthrotld/7] root 278 2 0 01:16 ? 00:00:00 [kthrotld/8] root 279 2 0 01:16 ? 00:00:00 [kthrotld/9] root 280 2 0 01:16 ? 00:00:00 [kthrotld/10] root 281 2 0 01:16 ? 00:00:00 [kthrotld/11] root 282 2 0 01:16 ? 00:00:00 [kthrotld/12] root 283 2 0 01:16 ? 00:00:00 [kthrotld/13] root 284 2 0 01:16 ? 00:00:00 [kthrotld/14] root 285 2 0 01:16 ? 00:00:00 [kthrotld/15] root 298 2 0 01:16 ? 00:00:00 [kpsmoused] root 299 2 0 01:16 ? 00:00:00 [usbhid_resumer] root 300 2 0 01:16 ? 00:00:00 [deferwq] root 330 2 0 01:16 ? 00:00:00 [kdmremove] root 331 2 0 01:16 ? 00:00:00 [kstriped] root 815 2 0 01:16 ? 00:00:00 [scsi_eh_0] root 841 2 0 01:16 ? 00:00:00 [scsi_eh_1] root 842 2 0 01:16 ? 00:00:00 [scsi_eh_2] root 843 2 0 01:16 ? 00:00:00 [scsi_eh_3] root 844 2 0 01:16 ? 00:00:00 [scsi_eh_4] root 849 2 0 01:16 ? 00:00:00 [scsi_eh_5] root 850 2 0 01:16 ? 00:00:00 [scsi_eh_6] root 851 2 0 01:16 ? 00:00:00 [scsi_eh_7] root 852 2 0 01:16 ? 00:00:00 [scsi_eh_8] root 853 2 0 01:16 ? 00:00:00 [scsi_eh_9] root 854 2 0 01:16 ? 00:00:00 [scsi_eh_10] root 1121 2 0 01:16 ? 00:00:00 [jbd2/sda2-8] root 1122 2 0 01:16 ? 00:00:00 [ext4-dio-unwrit] root 1220 1 0 01:16 ? 00:00:00 /sbin/udevd -d root 1580 2 0 01:16 ? 00:00:00 [kipmi0] root 1581 2 0 01:16 ? 00:00:01 [flush-8:0] root 1838 2 0 01:16 ? 00:00:00 [jbd2/sda1-8] root 1839 2 0 01:16 ? 00:00:00 [ext4-dio-unwrit] root 1840 2 0 01:16 ? 00:00:00 [jbd2/sda3-8] root 1841 2 0 01:16 ? 00:00:00 [ext4-dio-unwrit] root 1842 2 0 01:16 ? 00:00:00 [jbd2/sda6-8] root 1843 2 0 01:16 ? 00:00:00 [ext4-dio-unwrit] root 1844 2 0 01:16 ? 00:00:00 [jbd2/sda4-8] root 1845 2 0 01:16 ? 00:00:00 [ext4-dio-unwrit] root 1877 2 0 01:16 ? 00:00:00 [kauditd] root 1915 2 0 01:16 ? 00:00:00 [ib_addr] root 1920 2 0 01:16 ? 00:00:00 [infiniband/0] root 1921 2 0 01:16 ? 00:00:00 [infiniband/1] root 1922 2 0 01:16 ? 00:00:00 [infiniband/2] root 1923 2 0 01:16 ? 00:00:00 [infiniband/3] root 1924 2 0 01:16 ? 00:00:00 [infiniband/4] root 1925 2 0 01:16 ? 00:00:00 [infiniband/5] root 1926 2 0 01:16 ? 00:00:00 [infiniband/6] root 1927 2 0 01:16 ? 00:00:00 [infiniband/7] root 1928 2 0 01:16 ? 00:00:00 [infiniband/8] root 1929 2 0 01:16 ? 00:00:00 [infiniband/9] root 1930 2 0 01:16 ? 00:00:00 [infiniband/10] root 1931 2 0 01:16 ? 00:00:00 [infiniband/11] root 1932 2 0 01:16 ? 00:00:00 [infiniband/12] root 1933 2 0 01:16 ? 00:00:00 [infiniband/13] root 1934 2 0 01:16 ? 00:00:00 [infiniband/14] root 1935 2 0 01:16 ? 00:00:00 [infiniband/15] root 1944 2 0 01:16 ? 00:00:00 [ib_mcast] root 1949 2 0 01:16 ? 00:00:00 [iw_cm_wq] root 1954 2 0 01:16 ? 00:00:00 [ib_cm/0] root 1955 2 0 01:16 ? 00:00:00 [ib_cm/1] root 1956 2 0 01:16 ? 00:00:00 [ib_cm/2] root 1957 2 0 01:16 ? 00:00:00 [ib_cm/3] root 1958 2 0 01:16 ? 00:00:00 [ib_cm/4] root 1959 2 0 01:16 ? 00:00:00 [ib_cm/5] root 1960 2 0 01:16 ? 00:00:00 [ib_cm/6] root 1962 2 0 01:16 ? 00:00:00 [ib_cm/7] root 1963 2 0 01:16 ? 00:00:00 [ib_cm/8] root 1964 2 0 01:16 ? 00:00:00 [ib_cm/9] root 1965 2 0 01:16 ? 00:00:00 [ib_cm/10] root 1966 2 0 01:16 ? 00:00:00 [ib_cm/11] root 1967 2 0 01:16 ? 00:00:00 [ib_cm/12] root 1968 2 0 01:16 ? 00:00:00 [ib_cm/13] root 1969 2 0 01:16 ? 00:00:00 [ib_cm/14] root 1970 2 0 01:16 ? 00:00:00 [ib_cm/15] root 1975 2 0 01:16 ? 00:00:00 [rdma_cm] root 1996 2 0 01:16 ? 00:00:00 [ipoib_flush] root 2194 1 0 01:16 ? 00:00:00 auditd root 8650 1 0 01:16 ? 00:00:00 /usr/libexec/postfix/master postfix 8656 8650 0 01:16 ? 00:00:00 pickup -l -t fifo -u postfix 8657 8650 0 01:16 ? 00:00:00 qmgr -l -t fifo -u root 8664 1 0 01:16 ? 00:00:01 crond root 8679 1 0 01:16 tty2 00:00:00 /sbin/mingetty /dev/tty2 root 8681 1 0 01:16 tty3 00:00:00 /sbin/mingetty /dev/tty3 root 8683 1 0 01:16 tty4 00:00:00 /sbin/mingetty /dev/tty4 root 8685 1 0 01:16 tty5 00:00:00 /sbin/mingetty /dev/tty5 root 8687 1 0 01:16 tty6 00:00:00 /sbin/mingetty /dev/tty6 root 10159 2 0 01:39 ? 00:00:00 [loop0] root 10285 1 0 01:42 ? 00:00:00 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5 root 10360 1 0 01:43 ? 00:00:00 /usr/sbin/sshd root 10667 1220 0 01:51 ? 00:00:00 /sbin/udevd -d root 10668 1220 0 01:51 ? 00:00:00 /sbin/udevd -d root 10786 1 0 01:54 ? 00:00:00 login -- wemin wemin 10796 10786 0 01:54 tty1 00:00:00 -bash root 10813 10796 0 01:54 tty1 00:00:00 su - root 10815 10813 0 01:54 tty1 00:00:00 -bash root 10830 10815 0 01:54 tty1 00:00:00 su - wemin wemin 10831 10830 0 01:54 tty1 00:00:00 -bash root 10848 10831 0 01:54 tty1 00:00:00 su - root 10850 10848 0 01:54 tty1 00:00:00 -bash root 10879 10850 0 01:55 tty1 00:00:00 su - wemin wemin 10880 10879 0 01:55 tty1 00:00:00 -bash root 10933 10360 0 01:57 ? 00:00:00 sshd: wemin [priv] wemin 10937 10933 0 01:57 ? 00:00:00 sshd: wemin@pts/0 wemin 10938 10937 0 01:57 pts/0 00:00:00 -bash root 10955 10938 0 01:57 pts/0 00:00:00 su - root 10957 10955 0 01:57 pts/0 00:00:00 -bash root 10979 10957 0 01:58 pts/0 00:00:00 su - wemin wemin 10980 10979 0 01:58 pts/0 00:00:00 -bash root 10997 10980 0 01:58 pts/0 00:00:00 su - root 11007 10997 0 01:58 pts/0 00:00:00 -bash root 11088 10360 0 01:59 ? 00:00:00 sshd: wemin [priv] wemin 11092 11088 0 01:59 ? 00:00:00 sshd: wemin@pts/1 wemin 11093 11092 0 01:59 pts/1 00:00:00 -bash root 11110 11093 0 01:59 pts/1 00:00:00 su - root 11114 11110 0 01:59 pts/1 00:00:00 -bash root 11155 10360 0 02:00 ? 00:00:00 sshd: wemin [priv] wemin 11159 11155 0 02:00 ? 00:00:00 sshd: wemin@notty wemin 11160 11159 0 02:00 ? 00:00:00 /usr/libexec/openssh/sftp-server root 11210 1 0 02:01 ? 00:00:00 /usr/sbin/anacron -s root 11215 1 0 02:01 ? 00:00:00 ./zagent -start root 11216 11215 3 02:01 ? 00:00:00 ./zagent -start root 11252 11114 0 02:01 pts/1 00:00:00 sh WINS-UNIX-Linux_v1.7.sh root 11272 11252 3 02:01 pts/1 00:00:00 ps -ef ####################################################################################### ################################## User Env ####################################### ####################################################################################### HOSTNAME=spam TERM=vt100 SHELL=/bin/bash HISTSIZE=1000 USER=root LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;05;37;41:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.tbz=01;31:*.tbz2=01;31:*.bz=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.axa=01;36:*.oga=01;36:*.spx=01;36:*.xspf=01;36: TMOUT=600 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin MAIL=/var/spool/mail/root PWD=/home/wemin/WSEC_RESULT_DIR_spam_2020_03_19 LANG=C HISTCONTROL=ignoredups HOME=/root SHLVL=2 LOGNAME=root CVS_RSH=ssh LESSOPEN=||/usr/bin/lesspipe.sh %s G_BROKEN_FILENAMES=1 _=/bin/env OLDPWD=/home/wemin ####################################################################################### ################################## lsof -i -P ####################################### ####################################################################################### WINS-UNIX-Linux_v1.7.sh: line 312: lsof: command not found ####################################################################################### ####################################################################################### ############################## 계정관리 ############################# ####################################################################################### ####################################################################################### ####################################################################################### [U-01] root 계정 원격 접속 제한 ####################################################################################### 결과 : telnet 서비스를 사용하지 않음 기준 : 원격 서비스를 사용하지 않거나, 사용 시 root 직접 접속을 차단한 경우 [U-01] : 양호 ####################################################################################### [U-02] 패스워드 복잡성 설정 ####################################################################################### 결과 : 인터뷰 /etc/pam.d/system-auth 설정 내용 없음 /etc/security/pwquality.conf 설정 내용 없음 기준 : 영문, 숫자, 특수문자를 조합하여 2종류 조합 시 10자리 이상, 3종류 이상 조합 시 8자리 이상의 패스워드가 설정된 경우(공공기관 9자리 이상) [U-02] : 수동 ####################################################################################### [U-03] 계정 잠금 임계값 설정 ####################################################################################### 결과 : 수동 /etc/pam.d/system-auth =============================== auth required pam_tally2.so onerr=fail deny=4 unlock_time=120 account required pam_tally2.so 기준 : 계정 잠금 임계값이 5 이하의 값으로 설정되어 있는 경우 Tip : deny = 5이하일 경우 양호 [U-03] : 수동 ####################################################################################### [U-04] 패스워드 파일 보호 ####################################################################################### 결과 : 쉐도우파일에 패스워드를 암호화하여 저장하고 있음 /etc/passwd =============================== root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin saslauth:x:499:76:Saslauthd user:/var/empty/saslauth:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin jiran:x:9500:9500::/home/jiran:/bin/bash wemin:x:9501:9501::/home/wemin:/bin/bash 기준 : 쉐도우 패스워드를 사용하거나, 패스워드를 암호화하여 저장하는 경우 [U-04] : 양호 ####################################################################################### [U-44] root 이외의 UID가 '0' 금지 ####################################################################################### 결과 : root 계정과 동일한 UID를 갖는 계정이 존재하지 않음 /etc/passwd =============================== root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin saslauth:x:499:76:Saslauthd user:/var/empty/saslauth:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin jiran:x:9500:9500::/home/jiran:/bin/bash wemin:x:9501:9501::/home/wemin:/bin/bash 기준 : root 계정과 동일한 UID를 갖는 계정이 존재하지 않는 경우 [U-44] : 양호 ####################################################################################### [U-45] root 계정 su 제한 ####################################################################################### 결과 : su 명령어를 특정 그룹에 속한 사용자만 사용하도록 제한되어 있음 /ect/group =============================== wheel:x:10:root,wemin /ect/pam.d/su =============================== auth required pam_wheel.so use_uid 기준 : su 명령어를 특정 그룹에 속한 사용자만 사용하도록 제한되어 있는 경우 [U-45] : 양호 ####################################################################################### [U-46] 패스워드 최소 길이 설정 ####################################################################################### 결과 : 패스워드 최소 길이가 8자 이상으로 설정되어 있음 /etc/login.defs =============================== PASS_MIN_LEN 8 기준 : 패스워드 최소 길이가 8자 이상으로 설정되어 있는 경우(공공기관의 경우 9자리 이상) [U-46] : 양호 ####################################################################################### [U-47] 패스워드 최대 사용기간 설정 ####################################################################################### 결과 : 패스워드 최대 사용기간이 90일(12주) 이하로 설정되어 있음 /etc/login.defs =============================== PASS_MAX_DAYS 90 기준 : 패스워드 최대 사용기간이 90일(12주) 이하로 설정되어 있는 경우 [U-47] : 양호 ####################################################################################### [U-48] 패스워드 최소 사용기간 설정 ####################################################################################### 결과 : 패스워드 최소 사용기간이 1일으로 설정되어 있음 /etc/login.defs =============================== PASS_MIN_DAYS 1 기준 : 패스워드 최소 사용기간이 1일로 설정되어 있는 경우 [U-48] : 양호 ####################################################################################### [U-49] 불필요한 계정 제거 ####################################################################################### 결과 : 불필요한 계정이 존재하고 있음 /etc/passwd =============================== adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin 기준 : 불필요한 계정이 존재하지 않는 경우 [U-49] : 취약 ####################################################################################### [U-50] 관리자 그룹에 최소한의 계정 포함 ####################################################################################### 결과 : 관리자 그룹에 불필요한 계정이 등록되지 않음 /etc/group =============================== root:x:0: 기준 : 관리자 그룹에 불필요한 계정이 등록되어 있지 않은 경우 [U-50] : 양호 ####################################################################################### [U-51] 계정이 존재하지 않는 GID 금지 ####################################################################################### 결과 : 구성원이 없는 그룹이 존재하고 있음 /etc/group =============================== root:x:0: tty:x:5: disk:x:6: mem:x:8: kmem:x:9: uucp:x:14: man:x:15: games:x:20: gopher:x:30: video:x:39: dip:x:40: ftp:x:50: lock:x:54: audio:x:63: nobody:x:99: users:x:100: utmp:x:22: utempter:x:35: stapusr:x:156: stapsys:x:157: stapdev:x:158: floppy:x:19: vcsa:x:69: cdrom:x:11: tape:x:33: dialout:x:18: saslauth:x:76: postdrop:x:90: postfix:x:89: sshd:x:74: jiran:x:9500: wemin:x:9501: 기준 : 존재하지 않는 계정에 GID 설정을 금지한 경우 [U-51] : 취약 ####################################################################################### [U-52] 동일한 UID 금지 ####################################################################################### 결과 : 동일한 UID로 설정된 사용자 계정이 존재하지 않음 /etc/passwd =============================== root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin saslauth:x:499:76:Saslauthd user:/var/empty/saslauth:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin jiran:x:9500:9500::/home/jiran:/bin/bash wemin:x:9501:9501::/home/wemin:/bin/bash 기준 : 동일한 UID로 설정된 사용자 계정이 존재하지 않는 경우 [U-52] : 양호 ####################################################################################### [U-53] 사용자 shell 점검 ####################################################################################### 결과 : 로그인이 필요하지 않은 계정에 /bin/false(nologin) 쉘이 부여되어 있음 bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin 기준 : 로그인이 필요하지 않은 계정에 /bin/false(nologin) 쉘이 부여되어 있는 경우 [U-53] : 양호 ####################################################################################### [U-54] Session Timeout 설정 ####################################################################################### 결과 : Timeout 설정이 설정되어 있음 /etc/profile =============================== TMOUT=600 export TMOUT 기준 : Session Timeout이 600초(10분) 이하로 설정되어 있는 경우 [U-54] : 양호 ####################################################################################### ####################################################################################### ######################## 파일 및 디렉토리 관리 ###################### ####################################################################################### ####################################################################################### ####################################################################################### [U-05] root 홈, 패스 디렉토리 권한 및 패스 설정 ####################################################################################### 결과 : PATH 환경변수에 “.”, :: 이 맨 앞이나 중간에 포함되지 않음 /usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin 기준 : PATH 환경변수에 “.” ::이 맨 앞이나 중간에 포함되지 않은 경우 [U-05] : 양호 ####################################################################################### [U-06] 파일 및 디렉토리 소유자 설정 ####################################################################################### 결과 : 소유자가 존재하지 않은 파일 및 디렉토리가 없음 기준 : 소유자가 존재하지 않은 파일 및 디렉토리가 존재하지 않는 경우 [U-06] : 양호 ####################################################################################### [U-07] /etc/passwd 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/passwd 파일의 소유자가 root이고, 권한이 644 이하로 설정되어 있음 -rw-r--r--. 1 root root 936 2020-03-19 01:54 /etc/passwd 기준 : /etc/passwd 파일의 소유자가 root이고, 권한이 644 이하인 경우 [U-07] : 양호 ####################################################################################### [U-08] /etc/shadow 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/shadow 파일의 소유자가 root이고, 권한이 400 이하로 설정되어 있음 ----------. 1 root root 744 2020-03-19 01:30 /etc/shadow 기준 : /etc/shadow 파일의 소유자가 root이고, 권한이 400인 경우 [U-08] : 양호 ####################################################################################### [U-09] /etc/hosts 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/hosts 파일의 소유자가 root가 아니거나, 권한이 600 이하로 설정되지 않음 -rw-r--r--. 1 root root 276 2020-03-19 01:35 /etc/hosts 기준 : /etc/hosts 파일의 소유자가 root이고, 권한이 600인 경우 [U-09] : 취약 ####################################################################################### [U-10] /etc/(x)inetd.conf 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/xinetd.d/ 하위 파일의 소유자가 root가 아니거나, 권한이 600 이하로 설정되지 않음 total 12 drwxr-xr-x. 2 root root 4096 2020-03-19 01:09 . drwxr-xr-x. 66 root root 4096 2020-03-19 01:54 .. -rw-r--r--. 1 root root 332 2014-03-28 19:54 rsync 기준 : /etc/xinetd.d/ 하위 모든 파일의 소유자가 root이고, 권한이 600인 경우 [U-10] : 취약 ####################################################################################### [U-11] /etc/syslog.conf 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/rsyslog.conf 파일의 소유자가 root이고, 권한이 644 이하로 설정되어 있음 -rw-r--r--. 1 root root 3131 2020-03-19 01:41 /etc/rsyslog.conf 기준 : /etc/syslog.conf 파일의 소유자가 root이고, 권한이 644인 경우 [U-11] : 양호 ####################################################################################### [U-12] /etc/services 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/services 파일의 소유자가 root이고, 권한이 644 이하로 설정되어 있음 -rw-r--r--. 1 root root 641020 2017-03-22 06:56 /etc/services 기준 : /etc/services 파일의 소유자가 root이고, 권한이 644인 경우 [U-12] : 양호 ####################################################################################### [U-13] SUID, SGID, Sticky bit 설정 파일 점검 ####################################################################################### 결과 : 주요 파일의 권한에 SUID와 SGID에 대한 설정이 부여되지 않음 기준 : 주요 파일의 권한에 SUID와 SGID에 대한 설정이 부여되어 있지 않은 경우 [U-13] : 양호 ####################################################################################### [U-14] 사용자, 시스템 시작파일 및 환경파일 소유자 및 권한 설정 ####################################################################################### 결과 : 홈 디렉토리 환경변수 파일 소유자가 root 또는, 해당 계정으로 지정되어 있고, 홈 디렉토리 환경변수 파일에 root와 소유자만 쓰기 권한이 부여되어 있음 -rw-r--r--. 1 jiran jiran 176 2017-03-23 09:15 /home/jiran/.bash_profile -rw-r--r--. 1 jiran jiran 124 2017-03-23 09:15 /home/jiran/.bashrc -rw-------. 1 jiran jiran 52 2020-03-19 01:54 /home/jiran/.bash_history -rw-r--r--. 1 wemin wemin 176 2017-03-23 09:15 /home/wemin/.bash_profile -rw-r--r--. 1 wemin wemin 124 2017-03-23 09:15 /home/wemin/.bashrc -rw-------. 1 wemin wemin 648 2020-03-19 01:59 /home/wemin/.bash_history -rw-r--r--. 1 root root 100 2004-09-23 12:59 /root/.cshrc -rw-r--r--. 1 root root 176 2009-05-20 19:45 /root/.bash_profile -rw-r--r--. 1 root root 176 2004-09-23 12:59 /root/.bashrc -rw-------. 1 root root 2692 2020-03-19 01:54 /root/.bash_history 기준 : 홈 디렉토리 환경변수 파일 소유자가 root 또는, 해당 계정으로 지정되어 있고, 홈 디렉토리 환경변수 파일에 root와 소유자만 쓰기 권한이 부여된 경우 [U-14] : 양호 ####################################################################################### [U-15] world writable 파일 점검 ####################################################################################### 결과 : world writable 파일이 존재하고 있음 srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/virtual srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/local srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/smtp srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/tlsmgr srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/bounce srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/anvil srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/defer srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/error srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/verify srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/proxywrite srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/relay srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/retry srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/proxymap srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/scache srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/lmtp srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/rewrite srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/trace srw-rw-rw- : postfix : postfix : /var/spool/postfix/private/discard prw--w--w- : postfix : postfix : /var/spool/postfix/public/qmgr srw-rw-rw- : postfix : postfix : /var/spool/postfix/public/flush srw-rw-rw- : postfix : postfix : /var/spool/postfix/public/showq prw--w--w- : postfix : postfix : /var/spool/postfix/public/pickup srw-rw-rw- : postfix : postfix : /var/spool/postfix/public/cleanup 기준 : world writable 파일이 존재하지 않거나, 존재 시 설정 이유를 확인하고 있는 경우 [U-15] : 취약 ####################################################################################### [U-16] /dev에 존재하지 않는 device 파일 점검 ####################################################################################### 결과 : 인터뷰 -rw-r--r--. 1 root root 2282 Mar 19 02:01 /dev/.udev/queue.bin -rw-r--r--. 1 root root 286 Mar 19 02:01 /dev/.udev/db/usb:3-6 -rw-r--r--. 1 root root 985 Mar 19 01:16 /dev/.udev/db/block:sda4 -rw-r--r--. 1 root root 985 Mar 19 01:16 /dev/.udev/db/block:sda6 -rw-r--r--. 1 root root 985 Mar 19 01:16 /dev/.udev/db/block:sda3 -rw-r--r--. 1 root root 985 Mar 19 01:16 /dev/.udev/db/block:sda1 -rw-r--r--. 1 root root 992 Mar 19 01:16 /dev/.udev/db/block:sda2 -rw-r--r--. 1 root root 48 Mar 19 01:16 /dev/.udev/db/input:event0 -rw-r--r--. 1 root root 48 Mar 19 01:16 /dev/.udev/db/input:event1 -rw-r--r--. 1 root root 478 Mar 19 01:16 /dev/.udev/db/input:event3 -rw-r--r--. 1 root root 496 Mar 19 01:16 /dev/.udev/db/input:event2 -rw-r--r--. 1 root root 978 Mar 19 01:16 /dev/.udev/db/block:sda5 -rw-r--r--. 1 root root 331 Mar 19 01:16 /dev/.udev/db/net:eth2 -rw-r--r--. 1 root root 331 Mar 19 01:16 /dev/.udev/db/net:eth1 -rw-r--r--. 1 root root 331 Mar 19 01:16 /dev/.udev/db/net:eth0 -rw-r--r--. 1 root root 331 Mar 19 01:16 /dev/.udev/db/net:eth3 -rw-r--r--. 1 root root 747 Mar 19 01:16 /dev/.udev/db/block:sda -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop2 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram10 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram14 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop7 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram0 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram12 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram7 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop0 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram8 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop6 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram5 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop5 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram11 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop3 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop1 -rw-r--r--. 1 root root 25 Mar 19 01:16 /dev/.udev/db/block:loop4 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram9 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram13 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram1 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram4 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram3 -rw-r--r--. 1 root root 26 Mar 19 01:16 /dev/.udev/db/block:ram15 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram6 -rw-r--r--. 1 root root 24 Mar 19 01:16 /dev/.udev/db/block:ram2 -rw-r--r--. 1 root root 297 Mar 19 01:16 /dev/.udev/db/usb:3-13.5 -rw-r--r--. 1 root root 229 Mar 19 01:16 /dev/.udev/db/usb:2-1 -rw-r--r--. 1 root root 227 Mar 19 01:16 /dev/.udev/db/usb:1-1 -rw-r--r--. 1 root root 278 Mar 19 01:16 /dev/.udev/db/usb:3-5 -rw-r--r--. 1 root root 341 Mar 19 01:16 /dev/.udev/db/usb:3-13 -rw-r--r--. 1 root root 429 Mar 19 01:16 /dev/.udev/db/usb:usb2 -rw-r--r--. 1 root root 429 Mar 19 01:16 /dev/.udev/db/usb:usb4 -rw-r--r--. 1 root root 427 Mar 19 01:16 /dev/.udev/db/usb:usb1 -rw-r--r--. 1 root root 429 Mar 19 01:16 /dev/.udev/db/usb:usb3 -rw-r--r--. 1 root root 155 Mar 19 01:16 /dev/.udev/rules.d/99-root.rules 기준 : dev에 대한 파일 점검 후 존재하지 않은 device 파일을 제거한 경우 [U-16] : 수동 ####################################################################################### [U-17] $HOME/.rhosts, hosts.equiv 사용 금지 ####################################################################################### 결과 : r 서비스를 사용하지 않음 기준 : login, shell, exec 서비스를 사용하지 않거나, 사용 시 아래와 같은 설정이 적용된 경우 1. /etc/hosts.equiv 및 /root/.rhosts 파일 소유자가 root 또는, 해당 계정인 경우 2. /etc/hosts.equiv 및 /root/.rhosts 파일 권한이 600 이하인 경우 3. /etc/hosts.equiv 및 /root/.rhosts 파일 설정에 ‘+’ 설정이 없는 경우 [U-17] : 양호 ####################################################################################### [U-18] 접속 IP 및 포트 제한 ####################################################################################### 결과 : iptables를 통하여 all deny 설정을 사용하고 있음 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited 기준 : /etc/hosts.deny 파일에 ALL Deny 설정 후, /etc/hosts.allow 파일에 접근을 허용할 특정 호스트를 등록한 경우 또는 iptables를 이용하여 허가된 IP 외의 통신은 DROP,REJECT 설정이된 경우 [U-18] : 양호 ####################################################################################### [U-55] hosts.lpd 파일 소유자 및 권한 설정 ####################################################################################### 결과 : /etc/hosts.lpd 파일이 존재하지 않음 기준 : 파일의 소유자가 root이고 Other에 쓰기 권한이 부여되어 있지 않는 경우 [U-55] : 양호 ####################################################################################### [U-56] NIS 서비스 비활성화 ####################################################################################### 결과 : 불필요한 NIS 서비스가 비활성화 되어있음 기준 : 불필요한 NIS 서비스가 비활성화 되어있는 경우 [U-56] : 양호 ####################################################################################### [U-57] UMASK 설정 관리 ####################################################################################### 결과 : UMASK 값이 022 이상으로 설정되지 않음 /etc/profile =============================== # By default, we want umask to get set. This sets it for login shell umask 002 umask 022 기준 : UMASK 값이 022 이상으로 설정된 경우 [U-57] : 취약 ####################################################################################### [U-58] 홈디렉토리 소유자 및 권한 설정 ####################################################################################### 결과 : 홈디렉토리 소유자가 해당 계정이고, 일반 사용자 쓰기 권한이 제거되어 있음 dr-xr-x---. 3 root root 4096 2020-03-19 01:40 /root drwx------. 2 jiran jiran 4096 2020-03-19 01:54 /home/jiran drwx------. 3 wemin wemin 4096 2020-03-19 02:01 /home/wemin 기준 : 홈디렉토리 소유자가 해당 계정이고, 일반 사용자 쓰기 권한이 제거된 경우 [U-58] : 양호 ####################################################################################### [U-59] 홈디렉토리로 지정한 디렉토리의 존재 관리 ####################################################################################### 결과 : 홈디렉토리가 존재하지 않는 계정이 발견되지 않음 root = /root jiran = /home/jiran wemin = /home/wemin 기준 : 홈디렉토리가 존재하지 않는 계정이 발견되지 않는 경우 [U-59] : 양호 ####################################################################################### [U-60] 숨겨진 파일 및 디렉토리 검색 및 제거 ####################################################################################### 결과 : 인터뷰 /etc/.pwd.lock /etc/skel/.bash_logout /etc/skel/.bash_profile /etc/skel/.bashrc /.autofsck /usr/bin/.ssh.hmac /usr/bin/.fipscheck.hmac /usr/share/man/man5/.k5identity.5.gz /usr/share/man/man5/.k5login.5.gz /usr/share/man/man1/..1.gz /usr/sbin/.sshd.hmac /usr/lib64/.libssl.so.0.9.8e.hmac /usr/lib64/.libcrypto.so.6.hmac /usr/lib64/.libssl.so.6.hmac /usr/lib64/.libcrypto.so.1.0.1e.hmac /usr/lib64/.libssl.so.1.0.1e.hmac /usr/lib64/.libssl.so.10.hmac /usr/lib64/.libcrypto.so.0.9.8e.hmac /usr/lib64/.libcrypto.so.10.hmac /usr/src/kernels/2.6.32-696.el6.x86_64/.config /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/basic/.docproc.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/basic/.fixdep.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/basic/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/basic/.hash.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/selinux/genheaders/.genheaders.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/selinux/mdp/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/selinux/mdp/.mdp.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/.pnmtologo.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/.conmakehash.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.modpost.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.mod-extract.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.elfconfig.h.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.mk_elfconfig.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.sumversion.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.modpost.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.file2alias.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/mod/.empty.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/genksyms/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/genksyms/.lex.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/genksyms/.parse.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/genksyms/.genksyms.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/genksyms/.genksyms.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/.kallsyms.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/.kxgettext.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/.conf.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/lxdialog/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/.conf.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/kconfig/.zconf.tab.o.cmd /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/dtc/.gitignore /usr/src/kernels/2.6.32-696.el6.x86_64/scripts/.unifdef.cmd /lib64/.libfipscheck.so.1.hmac /lib64/.libfipscheck.so.1.1.0.hmac /lib64/.libgcrypt.so.11.hmac /root/.bash_history /root/.cshrc /root/.ssh /root/.bash_logout /root/.tcshrc /root/.bash_profile /root/.bashrc /tmp/.ICE-unix 기준 : 디렉토리 내 숨겨진 파일을 확인하여, 불필요한 파일 삭제를 완료한 경우 Tip : 의심스런 숨겨진 파일 및 디렉토리가 없을시 양호 [U-60] : 수동 ####################################################################################### ####################################################################################### ############################# 서비스관리 ############################ ####################################################################################### ####################################################################################### ####################################################################################### [U-19] Finger 서비스 비활성화 ####################################################################################### 결과 : finger 서비스가 설치되지 않음 기준 : Finger 서비스가 비활성화 되어 있는 경우 [U-19] : 양호 ####################################################################################### [U-20] Anonymous FTP 비활성화 ####################################################################################### 결과 : FTP 서비스가 비활성화 되어 있음 기준 : Anonymous FTP (익명 ftp) 접속을 차단한 경우 [U-20] : 양호 ####################################################################################### [U-21] r 계열 서비스 비활성화 ####################################################################################### 결과 : r 계열 서비스가 비활성화 되어 있음 /etc/xinetd.d에 파일이 존재하지 않음 /etc/inetd.conf 파일이 존재하지 않음 기준 : r 계열 서비스가 비활성화 되어 있는 경우 [U-21] : 양호 ####################################################################################### [U-22] cron 파일 소유자 및 권한 설정 ####################################################################################### 결과 : cron 접근제어 파일 소유자가 root가 아니거나, 권한이 640 이하로 설정되지 않음 /etc/cron.allow 파일이 없음 -rw-------. 1 root root 0 2016-08-24 03:36 /etc/cron.deny 기준 : cron 접근제어 파일 소유자가 root이고, 권한이 640 이하인 경우 [U-22] : 취약 ####################################################################################### [U-23] DoS 공격에 취약한 서비스 비활성화 ####################################################################################### 결과 : Dos 공격에 취약한 echo, discard, daytime, chargen 서비스가 비활성화 되어 있음 Dos 공격에 취약한 echo, discard, daytime, chargen 서비스가 존재하지 않음 기준 : Dos 공격에 취약한 echo, discard, daytime, chargen 서비스가 비활성화 된 경우 [U-23] : 양호 ####################################################################################### [U-24] NFS 서비스 비활성화 ####################################################################################### 결과 : NFS 서비스 관련 데몬이 비활성화 되어 있음 기준 : NFS 서비스 관련 데몬이 비활성화 되어 있는 경우 [U-24] : 양호 ####################################################################################### [U-25] NFS 접근 통제 ####################################################################################### 결과 : NFS 서비스 관련 데몬이 비활성화 되어 있음 기준 : NFS 서비스를 사용하지 않거나, 사용 시 everyone 공유를 제한한 경우 [U-25] : 양호 ####################################################################################### [U-26] automountd 제거 ####################################################################################### 결과 : automountd 서비스가 비활성화 되어 있음 기준 : automountd 서비스가 비활성화 되어 있는 경우 [U-26] : 양호 ####################################################################################### [U-27] RPC 서비스 확인 ####################################################################################### 결과 : 불필요한 RPC 서비스가 비활성화 되어 있음 /etc/xinetd.d 디렉토리에 불필요한 서비스가 없습니다. /etc/inetd.conf 파일이 존재하지 않습니다. 기준 : 불필요한 RPC 서비스가 비활성화 되어 있는 경우 [U-27] : 양호 ####################################################################################### [U-28] NIS, NIS+ 점검 ####################################################################################### 결과 : NIS 서비스가 비활성화 되어 있음 기준 : NIS 서비스가 비활성화 되어 있거나, 필요 시 NIS+를 사용하는 경우 [U-28] : 양호 ####################################################################################### [U-29] tftp, talk 서비스 비활성화 ####################################################################################### 결과 : tftp, talk, ntalk 서비스가 비활성화 되어 있음 /etc/xinetd.d 디렉토리에 불필요한 서비스가 없습니다. /etc/inetd.conf 파일이 존재하지 않습니다. 기준 : tftp, talk, ntalk 서비스가 비활성화 되어 있는 경우 [U-29] : 양호 ####################################################################################### [U-30] Sendmail 버전 점검 ####################################################################################### 결과 : Sendmail 서비스가 비활성화 되어 있음 기준 : Sendmail 버전이 8.13.8 이상인 경우 [U-30] : 양호 ####################################################################################### [U-31] 스팸 메일 릴레이 제한 ####################################################################################### 결과 : SMTP 서비스가 비활성화 되어 있음 기준 : SMTP 서비스를 사용하지 않거나 릴레이 제한이 설정되어 있는 경우 [U-31] : 양호 ####################################################################################### [U-32] 일반사용자의 Sendmail 실행 방지 ####################################################################################### 결과 : SMTP 서비스가 비활성화 되어 있음 기준 : SMTP 서비스 미사용 또는, 일반 사용자의 Sendmail 실행 방지가 설정된 경우 [U-32] : 양호 ####################################################################################### [U-33] DNS 보안 버전 패치 ####################################################################################### 결과 : DNS 서비스를 사용하지 않음 기준 : DNS 서비스를 사용하지 않거나 주기적으로 패치를 관리하고 있는 경우 [U-33] : 양호 ####################################################################################### [U-34] DNS Zone Transfer 설정 ####################################################################################### 결과 : DNS 서비스를 사용하지 않음 기준 : DNS 서비스를 사용하지 않거나 주기적으로 패치를 관리하고 있는 경우 [U-34] : 양호 ####################################################################################### [U-35] Apache 디렉토리 리스팅 제거 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 디렉토리 검색 기능을 사용하지 않는 경우 [U-35] END [U-35] : 양호 ####################################################################################### [U-36] Apache 웹 프로세스 권한 제한 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : Apache 프로세스가 별도의 WEB/WAS 계정으로 구동되는 경우 [U-36] : 양호 ####################################################################################### [U-37] Apache 상위 디렉토리 접근 금지 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 상위 디렉토리에 이동제한을 설정한 경우 [U-37] END [U-37] : 양호 ####################################################################################### [U-38] Apache 불필요한 파일 제거 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 매뉴얼, 샘플 파일 및 디렉토리가 제거되어 있는 경우 [U-38] END [U-38] : 양호 ####################################################################################### [U-39] Apache 링크 사용 금지 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 심볼릭 링크 사용을 제한한 경우 [U-39] : 양호 ####################################################################################### [U-40] Apache 파일 업로드 및 다운로드 제한 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 파일 업로드 및 다운로드를 제한한 경우 [U-40] END [U-40] : 양호 ####################################################################################### [U-41] Apache 웹 서비스 영역의 분리 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 웹 루트 디렉토리를 별도의 디렉토리로 지정한 경우 [U-41] END [U-41] : 양호 ####################################################################################### [U-61] ssh 원격접속 허용 ####################################################################################### 결과 : 원격 접속 시 SSH 프로토콜을 사용하고 있음 root 10360 1 0 01:43 ? 00:00:00 /usr/sbin/sshd root 10933 10360 0 01:57 ? 00:00:00 sshd: wemin [priv] wemin 10937 10933 0 01:57 ? 00:00:00 sshd: wemin@pts/0 root 11088 10360 0 01:59 ? 00:00:00 sshd: wemin [priv] wemin 11092 11088 0 01:59 ? 00:00:00 sshd: wemin@pts/1 root 11155 10360 0 02:00 ? 00:00:00 sshd: wemin [priv] wemin 11159 11155 0 02:00 ? 00:00:00 sshd: wemin@notty wemin 11160 11159 0 02:00 ? 00:00:00 /usr/libexec/openssh/sftp-server 기준 : 원격 접속 시 SSH 프로토콜을 사용하는 경우 [U-61] : 양호 ####################################################################################### [U-62] ftp 서비스 확인 ####################################################################################### 결과 : FTP 서비스가 비활성화 되어 있음 기준 : FTP 서비스가 비활성화 되어 있는 경우 [U-62] : 양호 ####################################################################################### [U-63] ftp 계정 shell 제한 ####################################################################################### 결과 : FTP 서비스가 비활성화 되어 있음 기준 : FTP 계정에 /bin/false 쉘이 부여되어 있는 경우 [U-63] : 양호 ####################################################################################### [U-64] Ftpusers 파일 소유자 및 권한 설정 ####################################################################################### 결과 : FTP 서비스가 비활성화 되어 있음 기준 : ftpusers 파일의 소유자가 root이고, 권한이 640 이하인 경우 [U-64] : 양호 ####################################################################################### [U-65] Ftpusers 파일 설정 ####################################################################################### 결과 : FTP 서비스가 비활성화 되어 있음 기준 : FTP 서비스가 비활성화 되어 있거나, 활성화 시 root 계정 접속을 차단한 경우 [U-65] : 양호 ####################################################################################### [U-66] at 파일 소유자 및 권한 설정 ####################################################################################### 결과 : at 접근제어 파일 소유자가 root이고, 권한이 640 이하로 설정되어 있음 -rw-r-----. 1 root root 5 2020-03-19 01:41 /etc/at.allow -rw-r-----. 1 root root 0 2020-03-19 01:41 /etc/at.deny 기준 : at 접근제어 파일 소유자가 root이고, 권한이 640 이하인 경우 [U-66] : 양호 ####################################################################################### [U-67] SNMP 서비스 구동 점검 ####################################################################################### 결과 : SNMP 서비스를 사용하지 않음 기준 : SNMP 서비스를 사용하지 않는 경우 [U-67] : 양호 ####################################################################################### [U-68] SNMP 서비스 커뮤니티스트링의 복잡성 설정 ####################################################################################### 결과 : SNMP 서비스를 사용하지 않음 기준 : SNMP Community 이름이 public, private 이 아닌 경우 [U-68] : 양호 ####################################################################################### [U-69] 로그온 시 경고 메시지 제공 ####################################################################################### 결과 : 수동 로그인 배너 =============================== Telnet 서비스를 사용하지 않음 FTP 배너 =============================== FTP설정 파일이 존재하지 않습니다. 다른 경로를 점검해야 합니다. SMTP 서비스를 사용하지 않음 DNS 서비스를 사용하지 않음 기준 : 서비스에 로그온 메시지가 설정되어 있는 경우 [U-69] : 수동 ####################################################################################### [U-70] NFS 설정파일 접근 제한 ####################################################################################### 결과 : NFS 서비스 관련 데몬이 비활성화 되어 있음 기준 : NFS 접근제어 설정파일의 소유자가 root 이고, 권한이 644 이하인 경우 [U-70] : 양호 ####################################################################################### [U-71] expn, vrfy 명령어 제한 ####################################################################################### 결과 : SMTP 서비스가 비활성화 되어 있음 기준 : SMTP 서비스 미사용 또는, noexpn, novrfy 옵션이 설정되어 있는 경우 [U-71] : 양호 ####################################################################################### [U-72] Apache 웹 서비스 정보 숨김 ####################################################################################### 결과 : Apache 서비스가 구동중이지 않음 기준 : 서버 정보가 노출되지 않게 설정되어 있는 경우 [U-72] : 양호 ####################################################################################### ####################################################################################### ############################## 패치관리 ############################# ####################################################################################### ####################################################################################### ####################################################################################### [U-42] 최신 보안패치 및 벤더 권고사항 적용 ####################################################################################### 결과 : 인터뷰 Linux spam 2.6.32-696.el6.x86_64 #1 SMP Tue Mar 21 19:29:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux MAKEDEV-3.24-6.el6.x86_64 acl-2.2.49-7.el6.x86_64 aic94xx-firmware-30-2.el6.noarch alsa-lib-1.1.0-4.el6.x86_64 apr-1.3.9-5.el6_2.x86_64 apr-util-1.3.9-3.el6_0.1.x86_64 atk-1.30.0-1.el6.x86_64 atmel-firmware-1.3-7.el6.noarch attr-2.4.44-7.el6.x86_64 audit-2.4.5-6.el6.x86_64 audit-libs-2.4.5-6.el6.x86_64 authconfig-6.1.12-23.el6.x86_64 autoconf-2.63-5.1.el6.noarch automake-1.11.1-4.el6.noarch avahi-libs-0.6.25-17.el6.x86_64 b43-openfwwf-5.2-10.el6.noarch basesystem-10.0-4.el6.noarch bash-4.1.2-48.el6.x86_64 bc-1.06.95-1.el6.x86_64 bfa-firmware-3.2.23.0-2.el6.noarch binutils-2.20.51.0.2-5.46.el6.x86_64 bison-2.4.1-5.el6.x86_64 busybox-1.15.1-21.el6_6.x86_64 byacc-1.9.20070509-7.el6.x86_64 bzip2-1.0.5-7.el6_0.x86_64 bzip2-libs-1.0.5-7.el6_0.x86_64 ca-certificates-2016.2.10-65.4.el6.noarch cairo-1.8.8-6.el6_6.x86_64 centos-release-6-9.el6.12.3.x86_64 checkpolicy-2.0.22-1.el6.x86_64 chkconfig-1.3.49.5-1.el6.x86_64 cloog-ppl-0.15.7-1.2.el6.x86_64 compat-db-4.6.21-17.el6.x86_64 compat-db42-4.2.52-17.el6.x86_64 compat-db43-4.3.29-17.el6.x86_64 compat-expat1-1.95.8-8.el6.x86_64 compat-glibc-2.5-46.2.x86_64 compat-glibc-headers-2.5-46.2.x86_64 compat-libcap1-1.10-1.x86_64 compat-libf2c-34-3.4.6-19.el6.x86_64 compat-libgfortran-41-4.1.2-39.el6.x86_64 compat-libstdc++-296-2.96-144.el6.i686 compat-libstdc++-33-3.2.3-69.el6.x86_64 compat-libtermcap-2.0.8-49.el6.x86_64 compat-openldap-2.3.43-2.el6.x86_64 compat-opensm-libs-3.3.5-3.el6.x86_64 compat-readline5-5.2-17.1.el6.x86_64 compat-xcb-util-0.4.0-2.2.el6.x86_64 coreutils-8.4-46.el6.x86_64 coreutils-libs-8.4-46.el6.x86_64 cpio-2.10-13.el6.x86_64 cpp-4.4.7-18.el6.x86_64 cracklib-2.8.16-4.el6.x86_64 cracklib-dicts-2.8.16-4.el6.x86_64 cronie-1.4.4-16.el6_8.2.x86_64 cronie-anacron-1.4.4-16.el6_8.2.x86_64 crontabs-1.10-33.el6.noarch cscope-15.6-7.el6.x86_64 ctags-5.8-2.el6.x86_64 cups-libs-1.4.2-77.el6.x86_64 curl-7.19.7-52.el6.x86_64 cvs-1.11.23-16.el6.x86_64 cyrus-sasl-2.1.23-15.el6_6.2.x86_64 cyrus-sasl-lib-2.1.23-15.el6_6.2.x86_64 dash-0.5.5.1-4.el6.x86_64 db4-4.7.25-22.el6.x86_64 db4-utils-4.7.25-22.el6.x86_64 dbus-glib-0.86-6.el6.x86_64 dbus-libs-1.2.24-8.el6_6.x86_64 device-mapper-1.02.117-12.el6.x86_64 device-mapper-libs-1.02.117-12.el6.x86_64 dhclient-4.1.1-53.P1.el6.centos.x86_64 dhcp-common-4.1.1-53.P1.el6.centos.x86_64 diffstat-1.51-2.el6.x86_64 diffutils-2.8.1-28.el6.x86_64 doxygen-1.6.1-6.el6.x86_64 dracut-004-409.el6_8.2.noarch dracut-kernel-004-409.el6_8.2.noarch e2fsprogs-1.41.12-23.el6.x86_64 e2fsprogs-libs-1.41.12-23.el6.x86_64 efibootmgr-0.5.4-15.el6.x86_64 elfutils-0.164-2.el6.x86_64 elfutils-libelf-0.164-2.el6.x86_64 elfutils-libs-0.164-2.el6.x86_64 ethtool-3.5-6.el6.x86_64 expat-2.0.1-13.el6_8.x86_64 file-5.04-30.el6.x86_64 file-libs-5.04-30.el6.x86_64 filesystem-2.4.30-3.el6.x86_64 findutils-4.4.2-9.el6.x86_64 fipscheck-1.2.0-7.el6.x86_64 fipscheck-lib-1.2.0-7.el6.x86_64 flex-2.5.35-9.el6.x86_64 fontconfig-2.8.0-5.el6.x86_64 fontpackages-filesystem-1.41-1.1.el6.noarch freetype-2.3.11-17.el6.x86_64 gamin-0.1.10-9.el6.x86_64 gawk-3.1.7-10.el6_7.3.x86_64 gcc-4.4.7-18.el6.x86_64 gcc-c++-4.4.7-18.el6.x86_64 gcc-gfortran-4.4.7-18.el6.x86_64 gdb-7.2-92.el6.x86_64 gdbm-1.8.0-39.el6.x86_64 gdk-pixbuf2-2.24.1-6.el6_7.x86_64 gettext-0.17-18.el6.x86_64 gettext-devel-0.17-18.el6.x86_64 gettext-libs-0.17-18.el6.x86_64 git-1.7.1-8.el6.x86_64 glib2-2.28.8-9.el6.x86_64 glibc-2.12-1.209.el6.i686 glibc-2.12-1.209.el6.x86_64 glibc-common-2.12-1.209.el6.x86_64 glibc-devel-2.12-1.209.el6.x86_64 glibc-headers-2.12-1.209.el6.x86_64 gmp-4.3.1-12.el6.x86_64 gnupg2-2.0.14-8.el6.x86_64 gnutls-2.12.23-21.el6.x86_64 gpgme-1.1.8-3.el6.x86_64 grep-2.20-6.el6.x86_64 groff-1.18.1.4-21.el6.x86_64 grub-0.97-99.el6.x86_64 grubby-7.0.15-7.el6.x86_64 gtk2-2.24.23-9.el6.x86_64 gzip-1.3.12-24.el6.x86_64 hicolor-icon-theme-0.11-1.1.el6.noarch hwdata-0.233-18.1.el6.noarch indent-2.2.10-7.el6.x86_64 info-4.13a-8.el6.x86_64 initscripts-9.03.58-1.el6.centos.x86_64 intltool-0.41.0-1.1.el6.noarch iproute-2.6.32-54.el6.x86_64 iptables-1.4.7-16.el6.x86_64 iptables-ipv6-1.4.7-16.el6.x86_64 iputils-20071127-24.el6.x86_64 ipw2100-firmware-1.3-11.el6.noarch ipw2200-firmware-3.1-4.el6.noarch ivtv-firmware-20080701-20.2.noarch iwl100-firmware-39.31.5.1-1.el6.noarch iwl1000-firmware-39.31.5.1-1.el6.noarch iwl3945-firmware-15.32.2.9-4.el6.noarch iwl4965-firmware-228.61.2.24-2.1.el6.noarch iwl5000-firmware-8.83.5.1_1-1.el6_1.1.noarch iwl5150-firmware-8.24.2.2-1.el6.noarch iwl6000-firmware-9.221.4.1-1.el6.noarch iwl6000g2a-firmware-17.168.5.3-1.el6.noarch iwl6050-firmware-41.28.5.1-2.el6.noarch jasper-libs-1.900.1-16.el6_6.3.x86_64 kbd-1.15-11.el6.x86_64 kbd-misc-1.15-11.el6.noarch kernel-2.6.32-696.el6.x86_64 kernel-devel-2.6.32-696.el6.x86_64 kernel-firmware-2.6.32-696.el6.noarch kernel-headers-2.6.32-696.el6.x86_64 kexec-tools-2.0.0-307.el6.x86_64 keyutils-libs-1.4-5.el6.x86_64 kpartx-0.4.9-100.el6.x86_64 krb5-libs-1.10.3-65.el6.x86_64 less-436-13.el6.x86_64 libICE-1.0.6-1.el6.x86_64 libSM-1.2.1-2.el6.x86_64 libX11-1.6.4-3.el6.x86_64 libX11-common-1.6.4-3.el6.noarch libXau-1.0.6-4.el6.x86_64 libXcomposite-0.4.3-4.el6.x86_64 libXcursor-1.1.14-2.1.el6.x86_64 libXdamage-1.1.3-4.el6.x86_64 libXext-1.3.3-1.el6.x86_64 libXfixes-5.0.3-1.el6.x86_64 libXft-2.3.2-1.el6.x86_64 libXi-1.7.8-1.el6.x86_64 libXinerama-1.1.3-2.1.el6.x86_64 libXrandr-1.5.1-1.el6.x86_64 libXrender-0.9.10-1.el6.x86_64 libXtst-1.2.3-1.el6.x86_64 libacl-2.2.49-7.el6.x86_64 libart_lgpl-2.3.20-5.1.el6.x86_64 libattr-2.4.44-7.el6.x86_64 libblkid-2.17.2-12.28.el6.x86_64 libcap-2.16-5.5.el6.x86_64 libcap-ng-0.6.4-3.el6_0.1.x86_64 libcom_err-1.41.12-23.el6.x86_64 libcurl-7.19.7-52.el6.x86_64 libdrm-2.4.65-2.el6.x86_64 libedit-2.11-4.20080712cvs.1.el6.x86_64 libertas-usb8388-firmware-5.110.22.p23-3.1.el6.noarch libffi-3.0.5-3.2.el6.x86_64 libgcc-4.4.7-18.el6.i686 libgcc-4.4.7-18.el6.x86_64 libgcj-4.4.7-18.el6.x86_64 libgcrypt-1.4.5-12.el6_8.x86_64 libgfortran-4.4.7-18.el6.x86_64 libgomp-4.4.7-18.el6.x86_64 libgpg-error-1.7-4.el6.x86_64 libidn-1.18-2.el6.x86_64 libjpeg-turbo-1.2.1-3.el6_5.x86_64 libnih-1.0.1-7.el6.x86_64 libpciaccess-0.13.4-1.el6.x86_64 libpng-1.2.49-2.el6_7.x86_64 libproxy-0.3.0-10.el6.x86_64 libproxy-bin-0.3.0-10.el6.x86_64 libproxy-python-0.3.0-10.el6.x86_64 libselinux-2.0.94-7.el6.x86_64 libselinux-utils-2.0.94-7.el6.x86_64 libsemanage-2.0.43-5.1.el6.x86_64 libsepol-2.0.41-4.el6.x86_64 libss-1.41.12-23.el6.x86_64 libssh2-1.4.2-2.el6_7.1.x86_64 libstdc++-4.4.7-18.el6.x86_64 libstdc++-devel-4.4.7-18.el6.x86_64 libtasn1-2.3-6.el6_5.x86_64 libthai-0.1.12-3.el6.x86_64 libtiff-3.9.4-21.el6_8.x86_64 libtool-2.2.6-15.5.el6.x86_64 libudev-147-2.73.el6_8.2.x86_64 libusb-0.1.12-23.el6.x86_64 libuser-0.56.13-8.el6_7.x86_64 libutempter-1.1.5-4.1.el6.x86_64 libuuid-2.17.2-12.28.el6.x86_64 libxcb-1.12-4.el6.x86_64 libxml2-2.7.6-21.el6_8.1.x86_64 logrotate-3.7.8-28.el6.x86_64 lua-5.1.4-4.1.el6.x86_64 lzo-2.03-3.1.el6_5.1.x86_64 m4-1.4.13-5.el6.x86_64 mailcap-2.1.31-2.el6.noarch make-3.81-23.el6.x86_64 mdadm-3.3.4-8.el6.x86_64 mingetty-1.08-5.el6.x86_64 module-init-tools-3.9-26.el6.x86_64 mpfr-2.4.1-6.el6.x86_64 mysql-libs-5.1.73-8.el6_8.x86_64 ncurses-5.7-4.20090207.el6.x86_64 ncurses-base-5.7-4.20090207.el6.x86_64 ncurses-libs-5.7-4.20090207.el6.x86_64 neon-0.29.3-3.el6_4.x86_64 net-tools-1.60-114.el6.x86_64 newt-0.52.11-4.el6.x86_64 newt-python-0.52.11-4.el6.x86_64 nspr-4.13.1-1.el6.x86_64 nss-3.27.1-13.el6.x86_64 nss-softokn-3.14.3-23.3.el6_8.x86_64 nss-softokn-freebl-3.14.3-23.3.el6_8.i686 nss-softokn-freebl-3.14.3-23.3.el6_8.x86_64 nss-sysinit-3.27.1-13.el6.x86_64 nss-tools-3.27.1-13.el6.x86_64 nss-util-3.27.1-3.el6.x86_64 openldap-2.4.40-16.el6.x86_64 openssh-5.3p1-122.el6.x86_64 openssh-clients-5.3p1-122.el6.x86_64 openssh-server-5.3p1-122.el6.x86_64 openssl-1.0.1e-57.el6.x86_64 openssl098e-0.9.8e-20.el6.centos.1.x86_64 p11-kit-0.18.5-2.el6_5.2.x86_64 p11-kit-trust-0.18.5-2.el6_5.2.x86_64 pakchois-0.4-3.2.el6.x86_64 pam-1.1.1-24.el6.x86_64 pango-1.28.1-11.el6.x86_64 passwd-0.77-7.el6.x86_64 patch-2.6-6.el6.x86_64 patchutils-0.3.1-3.1.el6.x86_64 pciutils-3.1.10-4.el6.x86_64 pciutils-libs-3.1.10-4.el6.x86_64 pcre-7.8-7.el6.x86_64 perl-5.10.1-144.el6.x86_64 perl-Compress-Raw-Zlib-2.021-144.el6.x86_64 perl-Compress-Zlib-2.021-144.el6.x86_64 perl-Error-0.17015-4.el6.noarch perl-Git-1.7.1-8.el6.noarch perl-HTML-Parser-3.64-2.el6.x86_64 perl-HTML-Tagset-3.20-4.el6.noarch perl-IO-Compress-Base-2.021-144.el6.x86_64 perl-IO-Compress-Zlib-2.021-144.el6.x86_64 perl-Module-Pluggable-3.90-144.el6.x86_64 perl-Pod-Escapes-1.04-144.el6.x86_64 perl-Pod-Simple-3.13-144.el6.x86_64 perl-URI-1.40-2.el6.noarch perl-XML-Parser-2.36-7.el6.x86_64 perl-libs-5.10.1-144.el6.x86_64 perl-libwww-perl-5.833-5.el6.noarch perl-version-0.77-144.el6.x86_64 pinentry-0.7.6-8.el6.x86_64 pixman-0.32.8-1.el6.x86_64 pkgconfig-0.23-9.1.el6.x86_64 plymouth-0.8.3-29.el6.centos.x86_64 plymouth-core-libs-0.8.3-29.el6.centos.x86_64 plymouth-scripts-0.8.3-29.el6.centos.x86_64 policycoreutils-2.0.83-30.1.el6_8.x86_64 popt-1.13-7.el6.x86_64 postfix-2.6.6-8.el6.x86_64 ppl-0.10.2-11.el6.x86_64 procps-3.2.8-45.el6.x86_64 psmisc-22.6-24.el6.x86_64 pth-2.0.7-9.3.el6.x86_64 pygpgme-0.1-18.20090824bzr68.el6.x86_64 python-2.6.6-66.el6_8.x86_64 python-iniparse-0.3.1-2.1.el6.noarch python-libs-2.6.6-66.el6_8.x86_64 python-pycurl-7.19.0-9.el6.x86_64 python-urlgrabber-3.9.1-11.el6.noarch ql2100-firmware-1.19.38-3.1.el6.noarch ql2200-firmware-2.02.08-3.1.el6.noarch ql23xx-firmware-3.03.27-3.1.el6.noarch ql2400-firmware-7.03.00-1.el6_5.noarch ql2500-firmware-7.03.00-1.el6_5.noarch rcs-5.7-37.el6.x86_64 rdma-6.9_4.1-3.el6.noarch readline-6.0-4.el6.x86_64 redhat-logos-60.0.14-12.el6.centos.noarch redhat-rpm-config-9.0.3-51.el6.centos.noarch rootfiles-8.1-6.1.el6.noarch rpm-4.8.0-55.el6.x86_64 rpm-build-4.8.0-55.el6.x86_64 rpm-libs-4.8.0-55.el6.x86_64 rpm-python-4.8.0-55.el6.x86_64 rsync-3.0.6-12.el6.x86_64 rsyslog-5.8.10-10.el6_6.x86_64 rt61pci-firmware-1.2-7.el6.noarch rt73usb-firmware-1.8-7.el6.noarch sed-4.2.1-10.el6.x86_64 selinux-policy-3.7.19-307.el6.noarch selinux-policy-targeted-3.7.19-307.el6.noarch setup-2.8.14-23.el6.noarch shadow-utils-4.1.5.1-5.el6.x86_64 shared-mime-info-0.70-6.el6.x86_64 slang-2.2.1-1.el6.x86_64 snappy-1.1.0-1.el6.x86_64 sqlite-3.6.20-1.el6_7.2.x86_64 subversion-1.6.11-15.el6_7.x86_64 sudo-1.8.6p3-27.el6.x86_64 swig-1.3.40-6.el6.x86_64 system-config-firewall-base-1.2.27-7.2.el6_6.noarch systemtap-2.9-7.el6.x86_64 systemtap-client-2.9-7.el6.x86_64 systemtap-devel-2.9-7.el6.x86_64 systemtap-runtime-2.9-7.el6.x86_64 sysvinit-tools-2.87-6.dsf.el6.x86_64 tar-1.23-15.el6_8.x86_64 tcp_wrappers-libs-7.6-58.el6.x86_64 tzdata-2016j-1.el6.noarch udev-147-2.73.el6_8.2.x86_64 un-core-batang-fonts-1.0.2-0.15.080608.el6.noarch un-core-dinaru-fonts-1.0.2-0.15.080608.el6.noarch un-core-dotum-fonts-1.0.2-0.15.080608.el6.noarch un-core-fonts-common-1.0.2-0.15.080608.el6.noarch un-core-graphic-fonts-1.0.2-0.15.080608.el6.noarch un-core-gungseo-fonts-1.0.2-0.15.080608.el6.noarch un-core-pilgi-fonts-1.0.2-0.15.080608.el6.noarch unzip-6.0-5.el6.x86_64 upstart-0.6.5-16.el6.x86_64 ustr-1.0.4-9.1.el6.x86_64 util-linux-ng-2.17.2-12.28.el6.x86_64 vim-minimal-7.4.629-5.el6_8.1.x86_64 which-2.19-6.el6.x86_64 xorg-x11-drv-ati-firmware-7.6.1-2.el6.noarch xz-4.999.9-0.5.beta.20091007git.el6.x86_64 xz-libs-4.999.9-0.5.beta.20091007git.el6.x86_64 xz-lzma-compat-4.999.9-0.5.beta.20091007git.el6.x86_64 yum-3.2.29-81.el6.centos.noarch yum-metadata-parser-1.1.2-16.el6.x86_64 yum-plugin-fastestmirror-1.1.30-40.el6.noarch zd1211-firmware-1.4-4.el6.noarch zip-3.0-1.el6_7.1.x86_64 zlib-1.2.3-29.el6.x86_64 기준 : 패치 적용 정책을 수립하여 주기적으로 패치를 관리하고 있는 경우 [U-42] : 수동 ####################################################################################### [U-43] 로그의 정기적 검토 및 보고 ####################################################################################### 결과 : 인터뷰 total 1468 drwxr-xr-x. 3 root root 4096 2020-03-19 01:42 . drwxr-xr-x. 21 root root 4096 2020-03-19 02:01 .. -rw-------. 1 root root 11096 2020-03-19 01:13 anaconda.ifcfg.log -rw-------. 1 root root 26259 2020-03-19 01:13 anaconda.log -rw-------. 1 root root 244281 2020-03-19 01:13 anaconda.program.log -rw-------. 1 root root 509590 2020-03-19 01:13 anaconda.storage.log -rw-------. 1 root root 124569 2020-03-19 01:13 anaconda.syslog -rw-------. 1 root root 54005 2020-03-19 01:13 anaconda.xlog -rw-------. 1 root root 47141 2020-03-19 01:13 anaconda.yum.log drwxr-x---. 2 root root 4096 2020-03-19 01:16 audit -rw-r--r--. 1 root root 1730 2020-03-19 01:16 boot.log -rw-------. 1 root utmp 1536 2020-03-19 01:58 btmp -rw-------. 1 root root 8370 2020-03-19 02:01 cron -rw-r--r--. 1 root root 55066 2020-03-19 01:16 dmesg -rw-r--r--. 1 root root 187141 2020-03-19 01:12 dracut.log -rw-------. 1 root root 18083 2020-03-19 02:01 kern.log -rw-r--r--. 1 root root 2774584 2020-03-19 01:59 lastlog -rw-------. 1 root root 745 2020-03-19 01:45 maillog -rw-------. 1 root root 102628 2020-03-19 02:01 messages -rw-------. 1 root root 9691 2020-03-19 02:01 secure -rw-------. 1 root root 0 2020-03-19 01:10 spooler -rw-------. 1 root root 608128 2020-03-19 01:59 tallylog -rw-rw-r--. 1 root utmp 13824 2020-03-19 01:59 wtmp -rw-------. 1 root root 0 2020-03-19 01:39 yum.log 기준 : 로그 기록의 검토, 분석, 리포트 작성 및 보고 등이 정기적으로 이루어지는 경우 [U-43] : 수동 ####################################################################################### [U-73] 정책에 따른 시스템 로깅 설정 ####################################################################################### 결과 : 로그 기록 정책이 정책에 따라 설정되어 수립되어 있음 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $IncludeConfig /etc/rsyslog.d/*.conf $SystemLogRateLimitInterval 10 $SystemLogRateLimitBurst 50000 kern.* /var/log/kern.log *.alert /dev/console *.info;mail.none;authpriv.none;cron.none /var/log/messages authpriv.* /var/log/secure mail.* -/var/log/maillog cron.* /var/log/cron *.emerg * uucp,news.crit /var/log/spooler local7.* /var/log/boot.log *.* @211.61.51.51 기준 : 로그 기록 정책이 정책에 따라 설정되어 수립되어 있는 경우 [U-73] : 양호 ####################################################################################### [DB-1] 디폴트 ID 및 패스워드 변경 및 잠금 ####################################################################################### 결과 : DBMS가 설치되지 않음 기준 : 디폴트 ID에 패스워드를 설정하거나 잠금설정이 되어있는 경우 [DB-1] : 양호 ####################################################################################### [DB-2] 불필요한 계정 삭제 및 잠금 ####################################################################################### 결과 : DBMS가 설치되지 않음 기준 : 불필요한 계정이 존재하지 않거나 잠금설정이 되어있는 경우 [DB-2] : 양호 ####################################################################################### [DB-3] 원격에서 DB 서버로의 접속 제한 ####################################################################################### 결과 : DBMS가 설치되지 않음 기준 : 원격에서 DB접근 제한이 되어있는 경우 [DB-3] : 양호