Useful Linux Security Tools

Many programs are available which can help avoid break-ins and limit the damage done.  Since these programs used to protect the security of your system, make sure you get any such tools from trusted sites.  Be especially careful about pre-compiled binaries, especially if you run these programs as root.

 

  • Install ssh and SSL ftp . Using these applications instead of telnet, rlogin, rsh, and ftp prevent unencrypted passwords from being sniffed from off the network.

    •  

  • Install TCP Wrappers to prevent access from untrusted sites or to limit access only to specific sites.

    •  

  • Use shadow passwords so that the system file containing the actual encrypted passwords is not accessible to others.  Redhat's default configuration does not use shadow passwords, but this can be easily changed by using the pwconv tool.

    •  

  • Use tripwire (Tripwire, Open Source) to be notified when system files have been modified or when possible trojan horses have been inserted into your system.