Security Strategies in Linux Platforms and Applications (Jones & Bartlett Learning Information Systems Security & Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Security Strategies in Linux Platforms
and Applications (Jones & Bartlett

Learning Information Systems Security
& Assurance) 2nd Edition, (Ebook PDF)
Visit to download the full and correct content document:
https://ebookmass.com/product/security-strategies-in-linux-platforms-and-applications
-jones-bartlett-learning-information-systems-security-assurance-2nd-edition-ebook-pd
f/
Contents vii
CHAPTER 6 Securing Services 138

Starting a Hardened System 140
Service Management 145
SysV Init 146
Upstart 151
Systemd 152
Hardening Services 154
Using Mandatory Access Controls 157
Security Enhanced Linux 157
AppArmor 159
Servers Versus Desktops 160
Protecting Against Development Tools 161
CHAPTER SUMMARY 163
KEY CONCEPTS AND TERMS 164
CHAPTER 6 ASSESSMENT 164
CHAPTER 7 Networks, Firewalls, and More 166

Services on Every TCP/IP Port 167
Protocols and Numbers in /etc/services 168
Protection by the Protocol and Number 168
Obscurity and the Open Port Problem 169
Obscure Ports 169
Opening Obscure Open Ports 169
Obscurity by Other Means 170
Protect with TCP Wrapper 171
What Services Are TCP Wrapped? 171
Configure TCP Wrapper Protection 171
Packet-Filtering Firewalls 173
Basic Firewall Commands 174
Firewalld 183
A Firewall for the Demilitarized Zone 185
A Firewall for the Internal Network 187
Alternate Attack Vectors 187
Attacks Through Nonstandard Connections 188
Attacks on Scheduling Services 189
Wireless-Network Issues 191
Linux and Wireless Hardware 191
Encrypting Wireless Networks 191
Bluetooth Connections 192
viii Contents
Security Enhanced Linux 193

The Power of SELinux 194
Basic SELinux Configuration 194
Configuration from the Command Line 194
The SELinux Administration Tool 196
The SELinux Troubleshooter 197
SELinux Boolean Settings 197
Setting Up AppArmor Profiles 202
Basic AppArmor Configuration 202
AppArmor Configuration Files 202
AppArmor Profiles 203
AppArmor Access Modes 204
Sample AppArmor Profiles 204
AppArmor Configuration and Management Commands 204
An AppArmor Configuration Tool 206
Best Practices: Networks, Firewalls, and TCP/IP Communications 206
CHAPTER SUMMARY 208
CHAPTER 8 Networked Filesystems and Remote Access 210

Basic Principles for Systems with Shared Networking Services 211
Configure an NTP Server 212
Install and Configure a Kerberos Server 212
Basic Kerberos Configuration 213
Additional Kerberos Configuration Options 215
Securing NFS as If It Were Local 216
Configure NFS Kerberos Tickets 216
Configure NFS Shares for Kerberos 216
Keeping vsftp Very Secure 217
Configuration Options for vsftp 217
Additional vsftp Configuration Files 219
Linux as a More Secure Windows Server 219
Samba Global Options 220
Samba as a Primary Domain Controller 224
Making Sure SSH Stays Secure 225
The Secure Shell Server 225
The Secure Shell Client 228
Create a Secure Shell Passphrase 228
Contents ix
Basic Principles of Encryption on Networks 230

Host-to-Host IPSec on Red Hat 231
Host-to-Host IPSec on Ubuntu 231
Network-to-Network IPSec on Red Hat 233
Network-to-Network IPSec on Ubuntu 233
Helping Users Who Must Use Telnet 233
Persuade Users to Convert to SSH 234
Install More Secure Telnet Servers and Clients 235
Securing Modem Connections 235
The Basics of RADIUS 236
RADIUS Configuration Files 236
Moving Away from Cleartext Access 236
The Simple rsync Solution 238
E-mail Clients 238
Best Practices: Networked Filesystems and Remote Access 239
CHAPTER SUMMARY 241
CHAPTER 9 Networked Application Security 243

Options for Secure Web Sites with Apache 244
The LAMP Stack 245
Apache Modules 247
Security-Related Apache Directives 248
Configure Protection on a Web Site 251
Configure a Secure Web site 252
Configure a Certificate Authority 252
mod_security 254
Working with Squid 255
Basic Squid Configuration 256
Security-Related Squid Directives 257
Limit Remote Access with Squid 258
Protecting DNS Services with BIND 258
The Basics of DNS on the Internet 258
DNS Network Configuration 259
Secure BIND Configuration 259
A BIND Database 261
DNS Targets to Protect 261
Domain Name System Security Extensions 261
x Contents
Mail Transfer Agents 263

Open Source sendmail 263
The Postfix Alternative 266
Dovecot for POP and IMAP 267
More E-mail Services 268
Using Asterisk 268
Basic Asterisk Configuration 269
Security Risks with Asterisk 269
Limiting Printers 270
Printer Administrators 271
Shared Printers 271
Remote Administration 271
The CUPS Administrative Tool 272
Protecting Time Services 273
Obscuring Local and Network Services 273
Best Practices: Networked Application Security 274
CHAPTER SUMMARY 275
CHAPTER 10 Kernel Security Risk Mitigation 278

Distribution-Specific Functional Kernels 279
Kernels by Architecture 280
Kernels for Different Functions 281
The Stock Kernel 282
Kernel Numbering Systems 283
Production Releases and More 283
Download the Stock Kernel 284
Stock Kernel Patches and Upgrades 284
Managing Security and Kernel Updates 285
Stock Kernel Security Issues 285
Distribution-Specific Kernel Security Issues 286
Installing an Updated Kernel 286
Development Software for Custom Kernels 287
Red Hat Kernel Development Software 287
Ubuntu Kernel Development Software 288
Kernel-Development Tools 288
Before Customizing a Kernel 289
Start the Kernel Customization Process 289
Kernel Configuration Options 291
Contents xi
Building Your Own Secure Kernel 299

Download Kernel Source Code 300
Download Ubuntu Kernel Source Code 300
Download Red Hat Kernel Source Code 300
Install Required Development Tools 301
Navigate to the Directory with the Source Code 301
Compile a Kernel on Ubuntu Systems 302
Compile a Kernel on Red Hat Systems 302
Compile a Stock Kernel 302
Install the New Kernel and More 303
Check the Boot Loader 303
Test the Result 303
Increasing Security Using Kernels and the /proc/ Filesystem 304
Don’t Reply to Broadcasts 304
Protect from Bad ICMP Messages 305
Protect from SYN Floods 305
Activate Reverse Path Filtering 305
Close Access to Routing Tables 306
Avoid Source Routing 306
Don’t Pass Traffic Between Networks 307
Log Spoofed, Source-Routed, and Redirected Packets 307
Best Practices: Kernel Security Risk Mitigation 307
CHAPTER SUMMARY 309
PART THREE Building a Layered Linux Security Strategy 311
CHAPTER 11 Managing Security Alerts and Updates 312

Keeping Up with Distribution Security 313
Red Hat Alerts 314
Red Hat Enterprise Linux 314
CentOS Linux 314
Fedora Core Linux 315
Ubuntu Alerts 315
Keeping Up with Application Security 316
The OpenOffice.org Suite 317
Web Browsers 317
Adobe Applications 318
Service Applications 318
xii Contents
Antivirus Options for Linux Systems 320

The Clam AntiVirus System 321
AVG Antivirus 322
The Kaspersky Antivirus Alternative 322
SpamAssassin 322
Detecting Other Malware 323
Using Bug Reports 323
Ubuntu’s Launchpad 324
Red Hat’s Bugzilla 325
Application-Specific Bug Reports 325
Security in an Open Source World 327
The Institute for Security and Open Methodologies 328
The National Security Agency 328
The Free Software Foundation 328
User Procedures 329
Deciding Between Automated Updates or Analyzed Alerts 329
Do You Trust Your Distribution? 330
Do You Trust Application Developers? 330
Do You Trust Service Developers? 330
Linux Patch Management 331
Standard yum Updates 332
Updates on Fedora 332
Updates on Red Hat Enterprise Linux 333
Standard apt-* Updates 333
Options for Update Managers 335
Configuring Automated Updates 335
Automatic Red Hat Updates 337
Pushing or Pulling Updates 338
Local or Remote Repositories 338
Configuring a Local Repository 338
Commercial Update Managers 339
The Red Hat Network 340
Canonical Landscape 341
Novell’s ZENworks 341
Open Source Update Managers 342
Various apt-* Commands 342
Various yum commands 343
Red Hat Spacewalk 345
Best Practices: Security Operations Management 345
CHAPTER SUMMARY 346
Contents xiii
CHAPTER 12 Building and Maintaining a Security Baseline 349

Conﬁguring a Simple Baseline 350
A Minimal Red Hat Baseline 351
A Minimal Ubuntu Baseline 353
Read-Only or Live Bootable Operating Systems 354
Appropriate Read-Only Filesystems 355
Live CDs and DVDs 356
Keeping the Baseline Up to Date 356
A Gold Baseline 357
Baseline Backups 359
Monitoring Local Logs 359
The System and Kernel Log Services 359
Logs from Individual Services 363
Consolidating and Securing Remote Logs 365
Default rsyslog Configuration 365
The Standard rsyslog Configuration File 365
Identifying a Baseline System State 368
Collect a List of Packages 368
Compare Files, Permissions, and Ownership 369
Define the Baseline Network Configuration 370
Collect Runtime Information 370
Checking for Changes with Integrity Scanners 371
Tripwire 371
Advanced Intrusion Detection Environment 372
Best Practices: Building and Maintaining a Secure Baseline 373
CHAPTER SUMMARY 374
CHAPTER 13 Testing and Reporting 376

Testing Every Component of a Layered Defense 377
Testing a Firewall 377
Testing Various Services 378
Testing Passwords 381
Testing Mandatory Access Control Systems 382
Checking for Open Network Ports 382
The telnet Command 382
The netstat Command 383
The lsof Command 386
The nmap Command 387
xiv Contents
Running Integrity Checks of Installed Files and Executables 392

Verifying a Package 393
Performing a Tripwire Check 394
Testing with the Advanced Intrusion Detection Environment 395
Ensuring that Security Does Not Prevent Legitimate Access 398
Reasonable Password Policies 398
Allowing Access from Legitimate Systems 401
Monitoring Virtualized Hardware 401
Virtual Machine Hardware 402
Virtual Machine Options 402
Monitoring the Kernel-Based Virtual Machine (KVM) 403
Standard Open Source Security-Testing Tools 404
Snort 405
Netcat and the nc Command 407
Vulnerability Scanners for Linux 408
Nessus 408
OpenVAS 410
Nexpose 410
Where to Install Security-Testing Tools 412
Hint: Not Where Attackers Can Use Them Against You 412
Some Tools Are Already Available on Live CDs 413
Best Practices: Testing and Reporting 415
CHAPTER SUMMARY 416
CHAPTER 14 Detecting and Responding to Security Breaches 418

Performing Regular Performance Audits 419
The Basic Tools: ps and top 420
The System Status Package 421
For Additional Analysis 421
Making Sure Users Stay Within Secure Limits 422
Appropriate Policies 423
Education 423
User Installation of Problematic Services 424
Logging Access into the Network 424
Identifying Users Who Have Logged In 424
System Authentication Logs 425
Monitoring Account Behavior for Security Issues 426
Downloaded Packages and Source Code 426
Executable Files 426
Contents xv
Creating an Incident Response Plan 427

Increased Vigilance 428
Should You Leave the System On? 428
Acquiring the Memory Contents 429
Having Live Linux CDs Ready for Forensics Purposes 433
Helix Live Response 433
SANS Investigative Forensics Toolkit 435
Digital Evidence and Forensics Toolkit 435
Build Your Own Media 435
Forensic Live Media 436
When You Put Your Plan into Action 437
Confirming the Breach 437
Identifying Compromised Systems 438
Having Replacement Systems in Place 438
Secure Backup and Recovery Tools 439
Disk Images for Later Investigation 439
The rsync Command 440
Mount Encrypted Filesystems 440
The Right Way to Save Compromised Data as Evidence 441
Basic Principles for Evidence 441
Remembering the Volatile Data 442
Preserving the Hard Disks 442
Disaster Recovery from a Security Breach 442
Determining What Happened 443
Prevention 443
Replacement 443
How and When to Share with the Open Source Community 444
If the Security Issue Is Known… 444
If the Security Issue Has Not Been Reported… 444
Best Practices: Security Breach Detection and Response 445
CHAPTER SUMMARY 446
CHAPTER 15 Best Practices and Emerging Technologies 448

Maintaining a Gold Baseline 449
Monitoring Security Reports 450
Working Through Updates 450
Recalibrating System Integrity 450
Ensuring Availability with Redundancy 451
A Gold Physical Baseline 451
A Gold Virtual Baseline Host 451
xvi Contents
Identifying Your Support Options 453

Red Hat Support Options 454
Canonical Support Options 455
Open Source Community Support 455
Checking Compliance with Security Policies 456
User Security 456
Administrator Security 456
Keeping the Linux Operating System Up to Date 457
Baseline Updates 457
Functional Bugs 458
New Releases 458
Keeping Distribution-Related Applications Up to Date 459
Server Applications 459
Desktop Applications 461
Managing Third-Party Applications 461
Licensing Issues 461
Support Issues 462
Sharing Problems and Solutions with the Community 462
Which Community? 462
Sharing with Developers 463
Sharing on Mailing Lists 464
Testing New Components Before Putting Them into Production 464
Testing Updates 465
Documenting Results 465
Beta Testing 466
Keeping Up with Security on Your Systems 466
A New Firewall Command 466
More Mandatory Access Controls 466
Penetration-Testing Tools 467
Single Sign-On 468
Incident Response 468
CHAPTER SUMMARY 469
APPENDIX A Answer Key 471

APPENDIX B Standard Acronyms 473
Glossary of Key Terms 477
References 491
Index 497
To my beautiful wife, Donna,
who has made life worth living again
—Michael Jang
To those who have made me who I am today:

Berkeley Breathed and Hunter S. Thompson
—Ric Messier
© Rodolfo Clix/Dreamstime.com
Preface
Purpose of This Book

This book is part of the Information Systems Security & Assurance Series from Jones
& Bartlett Learning (www.jblearning.com). Designed for courses and curriculums in
IT Security, Cybersecurity, Information Assurance, and Information Systems Security, this
series features a comprehensive, consistent treatment of the most current thinking and
trends in this critical subject area. These titles deliver fundamental information-security
principles packed with real-world applications and examples. Authored by professionals
experienced in information systems security, they deliver comprehensive information on
all aspects of information security. Reviewed word for word by leading technical experts
in the field, these books are not just current, but forward-thinking—putting you in the
position to solve the cybersecurity challenges not just of today, but of tomorrow as well.
Security Strategies in Linux Platforms and Applications, Second Edition, covers every
major aspect of security on a Linux system. The first part of this book describes the risks,
threats, and vulnerabilities associated with Linux as an operating system. Linux is one of
the predominant operating systems used for public-facing servers on the Internet. As a
result, a big focus for this book is on implementing strategies that you can use to protect
your system implementations, even in cases where they are public facing. To that end,
this book uses examples from two of the major distributions built for the server, Red Hat
Enterprise Linux and Ubuntu (Server Edition).
With Linux, security is much more than just firewalls and permissions. Part 2 of
the book shows you how to take advantage of the layers of security available to Linux—
user and group options, filesystems, and security options for important services, as well as
the security modules associated with AppArmor and SELinux. It also covers encryption
options where available.
The final part of this book explores the use of both open source and proprietary tools when
building a layered security strategy for your Linux operating system environments. With these
tools, you can define a system baseline, audit the system state, monitor system performance,
test network vulnerabilities, detect security breaches, and more. You will also learn basic
practices associated with security alerts and updates, which are just as important.
As with any operating system, a Linux implementation requires strategies to harden
it against attack. Linux is based on another operating system with a very long history,
and it inherits the lessons learned over that history as well as some of the challenges. With
Linux, you get a lot of eyes looking at the programs, which many consider to be a benefit
of using open source programs and operating systems. While there are advantages,
xix
xx Preface
however, there are risks associated as well. Fortunately, a large community is built
around improving Linux and the various software packages that go into it. This includes
the National Security Agency (NSA), which initially developed a set of security exten-
sions that has since been implemented into the Linux kernel itself.
When you are finished with this book, you will understand the importance of custom
firewalls, restrictions on key services, golden baseline systems, and custom local reposi-
tories. You will even understand how to customize and recompile the Linux kernel.
You will be able to use open source and commercial tools to test the integrity of various
systems on the network. The data you get from such tools will identify weaknesses and
help you create more secure systems.
Learning Features
The writing style of this book is practical and conversational. Each chapter begins with
a statement of learning objectives. Step-by-step examples of information security concepts
and procedures are presented throughout the text. Illustrations are used both to clarify
the material and to vary the presentation. The text is sprinkled with notes, tips, FYIs,
warnings, and sidebars to alert the reader to additional helpful information related to the
subject under discussion. Chapter assessments appear at the end of each chapter, with
solutions provided in the back of the book.
Throughout this book are references to commands and directives. They may be
included in the body of a paragraph in a monospaced font, like this: apt-get update.
Other commands or directives may be indented between paragraphs, like the directive
shown here:
deb http://us.archive.ubuntu.com/ubuntu/ lucid main restricted
When a command is indented between paragraphs, it’s meant to include a Linux

command line prompt. You will note two different prompts in the book. The first prompt
is represented with a $. As shown here, it represents the command-line prompt from
a regular user account:
$ ls -ltr > list_of_files
The second prompt is represented by a #. As shown here, it represents the command-line

prompt from a root administrative account:
# /usr/sbin/apachectl restart
Sometimes, the command or directive is so long, it has to be broken into multiple lines due
to the formatting requirements of this book. Line wraps are indicated by a curved arrow,
as is shown at the start of what looks like the second line of the iptables command.
It is just a continuation arrow, which would be typed as a continuous command on the
command line or an appropriate configuration file.
iptables -A RH-Firewall-1-INPUT -i eth0 -s 10.0.0.0/8
 -j LOG --log-prefix “Dropped private class A addresses”.
Preface xxi
Chapter summaries are included in the text to provide a rapid review of the material and
to help students understand the relative importance of the concepts presented.
Audience
The material is suitable for undergraduate or graduate computer science majors or
information science majors, students at a two-year technical college or community college
who have a basic technical background, or readers who have a basic understanding
of IT security and want to expand their knowledge. It assumes basic knowledge of Linux
administration at the command-line interface.
Acknowledgments
I would like to thank Jones & Bartlett Learning and David Kim of Security Evolutions
for the opportunity to write this book and be a part of the Information Systems Security
& Assurance Series project. This book required a more substantial team effort than ordinary
book projects. I would also like to thank the amazing project manager, Kim Lindros;
the top-notch technical reviewer, Mike Chapple; the sharp copy editor, Kate Shoup;
the marvelous compositor, Mia Saunders; the eagle-eyed proofreader, Ruth Walker;
and Larry Goodrich along with Angela Silvia of High Stakes Writing for facilitating
the entire process.
In addition, I acknowledge the gracious help of Billy Austin of the SAINT corporation,
along with Mike Johnson of AccessData with respect to their products. The author also
acknowledges the fortitude of Linux security professionals everywhere, white-hat hackers
at heart who have to deal with cultural biases from the mainstream security community
along with the legitimate fears of the open source community.
Most importantly, I could not do what I do without the help and support of my wife,
Donna. She makes everything possible for me.
Michael Jang
Writing any book is a process. Revising an existing book for a second edition is also a
process. It takes a team of people to get from conception to completion. Thanks to Mike,
Kate, Mia, Larry, and everyone else who helped get this second edition to the goal line.
Mostly, I’d like to acknowledge all those people who jump into things without any
idea what they are getting themselves into. This fearlessness is the best way to jump
into something new and guarantee that you are going to learn a lot. Try it some time
if you haven’t already.
Ric Messier
xxiii
About the Authors
MICHAEL JANG is a full-time writer, specializing in Linux and related certifications.
His experience with computers dates back to the days of badly shuffled punch cards. He
has written books such as RHCE Red Hat Certified Engineer Study Guide, LPIC-1 In Depth,
Ubuntu Server Administration, and Linux Annoyances for Geeks. He is also the author of
numerous video courses, and teaches preparation courses on Red Hat certification.
RIC MESSIER has been working with Unix and Unix-like operating systems since the
mid-1980s. In the intervening decades, he has done system administration, network
engineering, penetration testing, and programming; developed managed security services;
and worked in operations security and a number of other jobs in between.
Ric is a security professional who has worked with a number of companies from large
Internet service providers to small software companies. He has run a small networking
and security consulting practice for the last several years. Additionally, he has taught
courses at both the graduate and undergraduate level. Currently, in addition to writing
books and recording training videos, he is the program director for Cyber Security and
Digital Forensics at Champlain College in Burlington, Vt. He also maintains a blog
on information security and digital forensics at securitykilroy.blogspot.com.
PA R T O N E
Is Linux Really Secure?

Security Threats to Linux 2
Basic Components of Linux Security 18

CHAPTER
1 Security Threats to Linux
O
NE OF THE MOST SIGNIFICANT ATTACKS in the more than 40-year history of
the Internet happened in the late 1980s. The overall numbers may not have
been impressive, but when you look at it from a percentage perspective,
it may have been the most devastating attack ever. In November of 1988, Robert
T. Morris released a worm from a system located at the Massachusetts Institute
of Technology (MIT), although he was at Cornell. The worm is estimated to have
attacked 10 percent of the systems that were then connected to the Internet. The
impact of the attack continued over several days while various networks that were
attached to the NSFNet backbone were disconnected to get systems restored and
patched. (The NSFNet was created by the National Science Foundation in the 1980s
to pull together all the disparate specialized and regional networks. Initially, the
links to the NSFNet were 56Kbps. The NSFNet took over where the ARPANET left
off and became the launch point for what we now call the Internet.)
In addition to increasing the awareness of system vulnerabilities, the worm led to
the creation of a Computer Emergency Response Team (CERT) at Carnegie Mellon.
There were other actions taken to help coordinate activities in the case of another
network-wide attack. Less than 15 years later, these coordination efforts were
necessary when the first documented and large-scale distributed denial of service
(DDoS) attack took place in February of 2000. A young man from Montreal, who
called himself Mafiaboy, launched attacks against a number of prominent Web sites
using the Stacheldraht tool in control of a botnet.
The significance of these two events is that both targeted system weaknesses
on Unix-like operating systems. The worm attacked several Unix services that
could easily be exploited by remote users. Some of these services were weak and
unsecure to begin with, while others were simply a result of exploitable bugs in the
software. The DDoS attacks were a result, in part, of the way the networking stacks
within these operating systems were written. They were vulnerable to particular
types of attacks that rendered the systems incapable of taking in more network
requests. While some of this was because of the way the network protocols were
2
1
designed, some was also a result of the implementation of these protocols within
the operating system itself.
Security Threats
to Linux
According to W3 Techs Web technology surveys, servers based on the Unix
operating system make up two-thirds of the systems on the Internet. So the better
we can understand how to provide security to these servers, the less vulnerable
to attack they will be. Of course, the reality is that no operating system is secure.
Security isn’t a state. Security results from appropriate controls and processes, and
can’t be measured at a point in time. Understanding the appropriate technical
means that need to be implemented is part of the process, but the state of a
system constantly changes. This is due in no small part to influences from the
outside. Among these is the so-called “research” constantly performed both by
those who hope to improve the resilience of the system against attack and by
those who wish to weaken that resilience.
Because the topic under consideration here is Linux, how does Unix factor into
the equation? As it turns out, one must go back several decades to explain it.
Chapter 1 Topics
This chapter covers the following topics and concepts:
• What the origins of Linux are
• How security works in the open source world
• What distributions of Linux exist
• What the C-I-A triad is
• How Linux operates as a security device
• What Linux’s place in the enterprise is
• What some examples of recent security issues are
Chapter 1 Goals
When you complete this chapter, you will be able to:
• Describe the basics of security in an open source world
• Explain various roles of Linux systems in the IT architecture
• Differentiate between Linux and the operating environment that runs
on top of Linux
• Explain threats that can target Linux
3
4 PART 1 | Is Linux Really Secure?
The Origins of Linux

The Linux operating system is part of a very long and complicated family tree that began
in the 1960s. In 1964, MIT joined with General Electric and Bell Labs to create a multi-
user, time-sharing operating system. At the time, computers cost hundreds of thousands
if not millions of dollars and were generally used only by a single user or process at a
time. The goal of this project was to create an operating system that would allow multiple
processes to run, seemingly simultaneously. The operating system was named Multics,
short for Multiplexed Information and Computing Service, and its design reflected the
concern about protecting one user from another user.
Two members of the Multics team from Bell Labs, Ken Thompson and Dennis Ritchie,
became concerned that the system was becoming overly complex because of the design
goals. In 1969, Bell Labs pulled out of the five-year-old project. When that happened,
Thompson and Ritchie decided to develop their own operating system with goals almost
entirely opposite to those of Multics. Thompson and Ritchie called their operating system
Unics as a play on the name Multics. The “Uni” in Unics stood for uniplexed, suggesting
that the goal was to create a small, workable operating system that didn’t have multiuser
functionality as one of its aims. Where Thompson and Ritchie felt Multics was over-
designed, they worked to create a system that was easier to use but still employed the
hierarchical file system and the shell that were created for Multics. In general, though,
where Multics favored large, complex user commands, Unics was developed with a lot
of very small, single-purpose commands that could be chained together to create more
complex functionality.
Fast forward 20 years or so and the name Unics had been changed to Unix, AT&T
had been broken apart, and there were several versions of Unix available from AT&T,
University of California at Berkeley, Microsoft, and others. By the mid-1980s, one of the
advantages of Unix was that the source code was readily available and the design was
simple enough that it made a good source of study for computer science students.
In 1987, a computer science professor and textbook author named Andrew Tanenbaum
released a Unix-like operating system called MINIX in an appendix to an operating system
textbook. The operating system was also available on a set of floppy disks. Where Unix
Linux is only the operating system, also called the kernel. This is what interfaces with the hardware
to manage memory and file systems and make sure programs are run. Sun Microsystems used
to make a distinction between its operating system, which it called SunOS, and the operating
environment, which was Solaris. The operating environment is all of the programs and the user
interface that communicates with the user and the kernel.
1
CHAPTER 1 | Security Threats to Linux 5
Security Threats
to Linux
Because the GNU project developed the common Unix utilities that users would employ if
they were using a command-line shell, not to mention the compiler that is commonly used to
build the Linux kernel, many GNU proponents prefer that the entire package be referred to as
GNU/Linux. This has been the source of a number of long and heated debates over the years.
In fact, it is sometimes referred to as a religious war because neither side is likely to convert
the other side to their way of thinking. While it may be slightly inaccurate, the term Linux is
generally used to describe the entire operating environment. Otherwise, you may have to start
referring to a complete system as KDE/Apache/GNU/Linux or something equally unwieldy just
to make sure all the different groups get appropriate billing.
was primarily a large system operating system, MINIX was targeted at IBM PC-compatible
systems. Not surprisingly, a large number of students began using the source code and
talking about it on USENET. One of those students was Linus Torvalds, who began adding
features and modifying what was in MINIX. Torvalds went on to release his version of the
operating system, which he called Linux. Linux was first released on October 5, 1991.
Since its release, a number of open source projects have contributed to Linux. One of
the most significant over the last 20 years has been GNU’s Not Unix (GNU), which was an
attempt to create a Unix-like operating system.
Linux itself is a very fractured collective of different distributions. A distribution is a
collection of a kernel, userland, graphical interface, and package-management system.
The package-management system is used to install software. Package management is
developed by the maintainers of the distribution, and there are many package-management
systems available. RedHat (Fedora, RedHat Enterprise Linux, CentOS) uses RedHat
Package Manager (RPM), though it also supports the Yellowdog Updater, Modified (Yum)
that will check dependencies and download and install requested packages. Debian-
based systems like Mint and Ubuntu use the Advanced Package Tool (APT) and the
related utilities.
Security in an Open Source World

Linux is part of a large collection of software developed by teams that provide access to
the source code and all the programming language text from which the final executable
is generated for anyone who wants to look at it. This approach is called open source
because the source code is open for anyone to see. Software developed by companies
that ask you to pay for the program is commonly called closed source in addition to being
commercial software.
The idea behind open source goes back many decades to a

NOTE time when programmers just wrote programs for the fun of it,
In a university setting, leaving the source around for someone else to look at and improve.
having access to source code You didn’t pay for software. The system software came with the
enabled you to learn from machine you bought and the computer companies made their
what others were doing. If money on hardware.
someone else had a better The thing about programming is that everyone has a different
idea and improved what was style. Some people are far better at writing efficient code, while
there, then everyone could others are better at writing code that performs a lot of checks,
learn and benefit from it.
making the resulting program more resistant to attack. Because
of this, having access to source code means a couple of things:
• You can learn from the source code. You can see clearly what it does. You can
have a better understanding of how the program operates.
• If you are so inclined, you can make fixes to the source in case there are bugs.
One of the leading proponents of open source software is Richard Stallman, who created
the GNU project while he was at MIT. Stallman believed all source code should be available.
This should not be read as a belief that everything should be without cost. There is a
concept of gratis versus libre, commonly rendered in the open source community as
“free as in free speech, not free as in free beer.” Gratis means without cost, as in free beer.
Libre means without restriction, as in free speech. Stallman has long said that he believes
that if he finds something that isn’t working right with a piece of software, he should be
able to go into the source code and fix it. Without access to the source, he doesn’t have
that freedom, which he believes is essential.
What sorts of security issues are there with open source? First, just because the source
code is open doesn’t mean the project has processes in place to ensure code is written
securely. It also doesn’t mean there has been rigorous testing. If the only testing that has
been done is by the developer, then there hasn’t been sufficient testing done on the source
code. Developers have a different focus when they are testing code they have written
than someone who is intent on doing complete security testing or even just regression
There are a number of well-known aphorisms that suggest that the more bugs you find,
the more bugs there are. Proponents of open source suggest that making sure everyone has
access to the code will lead to fewer bugs. More eyeballs means there are more people who
can find issues and fix them. Open source detractors may counter that by saying not all open
source developers are highly skilled and trained. This can lead to more bugs because the best
programmers may not always contribute to well-used software projects.
1
Security Threats
to Linux
testing. Larger projects have the advantage of ensuring that
people who are competent at testing perform full testing before NOTE
releases are issued. Smaller projects don’t have the luxury of Malicious code modifications
dedicating a lot of people to testing, which can potentially put have happened with open source
them at risk. projects in the past. One example
Open source projects put their source code out on the was the ProFTP server that was
open Internet at public repositories. Along with the source hijacked in 2010. The source code
code, there is generally a cryptographic hash generated to available for download had been
demonstrate that what you downloaded is what you are replaced with an altered copy that
included a back door. Ironically,
actually looking for. Where you are protected with this is if the
the person got in through an
download gets corrupted. It doesn’t protect you if the tarball
unpatched vulnerability in the FTP
has been altered unless the person doing the altering is really
server software that was serving
dumb. If the tarball gets modified, an attacker is going to up the source code.
generate a new MD5 and replace the existing one so everything
looks correct. If an attacker can get access to the repository,
he or she can upload modified source code that may include
a back door or some other malicious modification.
Commercial software may suffer from the problem of lengthy processes that can get
in the way of the speedy resolution of problems. A vulnerability must be logged, investi-
gated, and then perhaps brought before a program or project manager for prioritization
before the issue can be resolved. Once it’s been resolved, the fix likely has to wait for the
next build schedule, at which point the entire build must be regression tested and unit
tested to make sure all the issues have been resolved. A company like Microsoft batches
all of its updates (unless they are considered critical) and releases them all at one time. An
advantage to an open source project is that it may not suffer from this process-heavy path
to get a vulnerability fixed. This can be an enormous benefit,
but it can sometimes be balanced by less documentation or NOTE
less testing in a rush to get the fix out with an updated version.
Nessus is a vulnerability scanner
Open source projects, depending on their size, may be less
that began life as an open source
concerned with release schedules and just issue a new minor project. However, the primary
version when a bug gets resolved. This isn’t always the case, of developers discovered they
course. weren’t getting a lot of help,
One of the key ideas behind open source projects like Linux so they closed the source and
(and all of the packages that go into a regular Linux distri- started a business selling Nessus.
bution) is that you are less constrained by human resource
issues. Anyone can pick up the source code and also pick up
a bug and go fix it. This helps with speed to resolution, but it may not guarantee a high-
quality fix. It also doesn’t guarantee you will actually get contributors to your project.
One of biggest advantages to open source projects is the ability for anyone to start
a project and have anyone else who is interested work on it. It doesn’t require business
plans and meetings to determine funding levels and returns on investment or marketing
Stallman developed the GNU General Public License (GPL). Stallman doesn’t use the term
copyright when talking about rights and privileges that are due software authors. Instead, he uses
the term copyleft. Under copyleft and the GPL, any software that is based on GPLed software is
required to retain the same rights as the original software. In other words, if I create a software
project that I license using the GPL and you take my software, make some modifications to it,
and want to release it yourself, you would also have to release it under the GPL.
strategies. It just takes someone willing to get started. There are a lot of ways to post
source code so someone else can take a look at it and make alterations. Most open source
software is licensed in such a way that any changes are required to also remain open.
This is another contribution of the GNU Project and its founder Richard Stallman
in particular.
Linux Distributions
There are a large number of Linux distributions, and their popularity waxes and wanes
over time. Slackware, one of the early Linux distributions, retained tremendous popularity
for a number of years. Now, however, it doesn’t even register in the top 25 Linux distri-
butions according to DistroWatch. At the time of this writing, it sits at number 33.
Other distributions have fallen over time. RedHat was popular for a long time. Its level of
support made it a top choice for a lot of users looking for Linux. Now, however, there is no
so-called RedHat distribution. It has fragmented into RedHat Enterprise Linux, a piece of
commercial software that you have to buy from RedHat, and Fedora, which is the devel-
opment distribution for RedHat. Fedora is more cutting-edge and is where RedHat tries
out new concepts to get them stable before rolling them into RedHat Enterprise Linux.
Currently at the top of the popularity charts are Mint and Ubuntu, both derivatives of
Debian. Debian has been around for a long time. It was created about 20 years ago by
Ian Murdock, who wanted to pay homage to his girlfriend at the time, Debra. Debian is a
merging of the name Ian with the name Debra. Debian has long been known in the Linux
community as a very stable distribution of Linux. Often, it has been well behind what are
considered current versions of packages because the maintainers were more interested
in an operating system that was solid and didn’t crash than they were with keeping up
with the bleeding edge.
NOTE Most distributions have pre-compiled packages. The distribution
Gentoo is named after
determines all the dependencies, meaning you might end up with a lot
a particular species of of extra packages that you don’t really want because some package has
small, fast penguin. dependencies built in from another package. One way to avoid this is to
build your own version of Linux. Some distributions, such as Linux From
1
Security Threats
to Linux
Scratch and Gentoo Linux, are source-based distributions. The idea
behind these sorts of distributions is that you decide how much or ! WARNING
how little you want to put into it. This may have the upside of making Source-based distributions
it much faster and more responsive. However, the downside to these are not for the faint of
distributions is that all packages must be compiled from source, and heart, and are probably
compilation and installation can be a very time-consuming process. not best attempted by
Getting one of these distributions up and running may take several novice users.
hours or even the better part of a day, depending on the speed of your
machine and your Internet connection. When you are finished, you
will have exactly what you want, but every time you want to update, you will need to
go through the compilation process again.
The C-I-A Triad

When it comes to security, there are three fundamental concepts. You may sometimes
hear these referred to as C-I-A, the C-I-A triad, the A-I-C triad (to distinguish it from the
U.S. intelligence agency), or maybe just the triad. The three concepts are as follows:
• Confidentiality—Keeping secrets is the essence of confidentiality. If someone
says something to you in a crowded room, you won’t be assured of much in the
way of confidentiality because it would be very easy for someone to overhear
what the two of you are saying. If someone were to tap your phone and listen
to your conversations, your confidentiality would be violated. This is certainly
true when it comes to computer communications. If someone could listen in on
network communications by port spanning on a switch, performing a spoofing
attack, tapping the physical network cable, or some other method, your confi-
dentiality would be violated. One common way to protect against this is to use
encryption. This is not a flawless answer, of course, because not all encryption
is created equal. Also, there are issues with keeping the encryption keys secret
and protected. In general, however, if you are worried about confidentiality,
you will want to find a way to ensure someone can’t listen in on or intercept
your conversations.
• Integrity—Ensuring that the data that is sent is the data that is received is what
integrity is all about. It’s also about protecting against corruption. The MD5
hash mentioned earlier that often accompanies software distributions is used to
maintain the integrity of the data that is being transmitted. Note that integrity
pertains to more than software downloads or messages that are emailed. It also
relates to data at rest on disks. Any magnetic media like a hard drive or tape drive
can be altered unexpectedly over a long period of time or from large electromag-
netic pulses. Additionally, hardware sometimes fails, which might mean that data
that is either written or read gets corrupted. Fortunately, you can use cyclical
redundancy checks or cryptographic hashes as ways of ensuring that

TIP data has not been altered.
If an event falls into • Availability—If software is really buggy and crashes a lot, you
one of these buckets— will have availability issues. If you have integrity issues, as described
confidentiality, integrity, in the preceding bullet, it might lead to availability issues. A denial
or availability—it is
of service (DoS) attack is a specific and malicious form of a denial
considered to be a
of service condition. If a service fails for whatever reason, you
security issue.
will have a denial of service condition because normal users will
be denied the use of the service. If the Ethernet card on a Web
server suddenly fails, for instance, you will have a denial of service
condition because the users who are trying to get to the Web server
will be denied service. However, it’s not malicious, so it’s not an
attack. It is definitely a problem of availability, however.
Some security professionals don’t consider the C-I-A triad to be sufficient to discuss
all the problems in the world of security. As a result, you will sometimes hear the
term nonrepudiation discussed separately because it doesn’t fit nicely within the triad.
Nonrepudiation is usually about preventing a party involved in a transaction from
denying that the transaction occurred. One way this manifests is through cryptog-
raphy. In public key cryptography, everyone has a private and a public key. Sometimes
the private key is used to digitally sign a document, like an e-mail message. The
private key is supposed to be protected and under the control of the owner of the key.
If someone receives a message that was signed with that key, non-repudiation dictates
that the private key owner can’t say it didn’t come from him or her. If the owner does,
he or she is admitting that the key is no longer appropriately controlled.
In the late 1990s, Donn Parker, a security professional, proposed an expansion of
the C-I-A triad to cover additional concepts he felt were critical to the realm of infor-
mation security. This collection of ideas is called the Parkerian hexad and includes
the following:
• Confidentiality
• Possession or control
• Integrity
• Authenticity
• Availability
• Utility
Although the Parkerian hexad is well-respected within the security community, it

hasn’t overtaken the C-I-A triad as the core and defining set of concepts with respect
to information security.
Another random document with
no related content on Scribd:
Keith turned on him almost savagely. “How dare you ask me that,
Ewen Cameron! Do you think I baulked Guthrie only to go in cold
blood and bring you to the scaffold myself? Are you like the Duke,
that you can fancy I would do such a thing for any consideration on
earth . . . and witness moreover to acts by which I had been the
gainer?”
“I beg your pardon,” said Ewen mildly. “In truth I was not thinking
of the implications of what I said. But, Windham,” he went on
anxiously, “has not your refusal involved you once more in
Cumberland’s displeasure? I’m sure it has!”
“No, no,” said Keith mendaciously. “He was angry, but he has not
punished me further. He could not force me to be a witness; and
Lord Albemarle has subsequently shown me some favour, and holds
out hopes of employing me, which is why I am here at Fort
Augustus. As far as I am concerned, therefore, good may yet come
out of evil.—But, tell me, to what does this evidence at Fort William
amount?”
But Ewen replied by another question. “What was the bribe which
Cumberland offered you to give evidence against me?”
“Bribe!” exclaimed Keith, rather over-hastily. “I said nothing about
a bribe. I want to hear about these witnesses at Fort William.”
“But I want to know what you have sacrificed for my sake? Or
perhaps it would be truer to say, for the sake of your own self-
respect? Cumberland did offer you something, did he not?”
“Nothing of consequence,” answered Keith carelessly.
“You will not tell me what it was? Then I know that it was
something which you coveted. I seem fated to bring you misfortune,
Windham,” said the Highlander rather sadly. “And yet I never really
wished you other than well.”
“But I have brought you even more,” said Keith; “and indeed I
wished you well, too.” His eyes were on the heap of straw in the
corner which constituted Ewen’s bed. “If I had not ridden by the
shieling hut that day, you would be lying quietly among the
mountains of your own land and not—not about to set out for the
chance, at least, of a death far away, and . . . and much less
merciful. I should like to hear you say that you forgive me for that.”
“Forgive you for saving my life!” exclaimed Ewen. “My dear
Windham, you are really absurd! Don’t, for God’s sake, go recalling
the crazy things I said to you at our last meeting! You must
remember that I was nearly out of my senses then.”
“I know that, and I have never given them another thought, I
assure you. But there is a count,” said Keith rather hesitatingly, “on
which you must find it hard to forgive me—suffering of the mind for
which I must always hold myself in a measure responsible. You know
to what I refer.”
Ewen looked down at the floor. “I had some dark days, it is true. .
. . Yes, they were very dark . . . but not so dark after your return. You
gave me hope; and above all you gave me back that night in the
hut.” He smiled. “I often think of it. I think of it when I hear very
different stories of the English. And I suppose you know that nothing
came of my betrayal—they never even searched the place for
Lochiel, I believe. And, moreover”—he suddenly looked almost
boyishly elated and mischievous—“by some wonderful mischance I
never gave the name of the mountain where the secret place was. In
my sleep I presented them with the name of Ben Loy, where you
came upon me, and they did not discover the error until too late.”
Keith put his hand on the speaker’s knee. “I heard at Inverness,
to my satisfaction, that Lochiel had escaped capture. Then that is all
over, and your mind at rest; I am thankful.”
Ewen looked grave again. “No, it cannot be at rest until I am sure
that Lochiel knows the truth.”
“But why should he ever hear anything at all about the matter?”
“And I have thought that at my trial,” went on Ewen without taking
notice of the interruption, “I may get the chance of publicly denying
that I gave the information knowingly. And then I believe that I could
die in peace.”
Keith withdrew his hand. “Why do you make so sure of your
condemnation?” he asked almost irritably. “Of what real worth is the
testimony of persons who imagine that they saw you during a siege?
No one could swear to you out of so many Camerons!”
“You think we are all as alike as sheep?” queried Ewen, looking
amused. “But I had at least one hand-to-hand conflict with the Argyll
militia, and another day I encountered a writer of Maryburgh with
whom I had had dealings; he knew me at once, and will be only too
glad to give evidence against me; I cannot think how they have not
got hold of it already.—No, Windham, ’tis better to face the truth;
once I reach Fort William I am certainly for Carlisle, and with such
good evidence against me I have small chance of acquittal. I have
known that for the last ten days; though naturally I have not
acquainted the authorities with the excellent case they are like to
have.”
And to this Keith found nothing to say. It was strange, it was
alarming, to feel, as by this time he did, how strongly their intimacy
had progressed in two months of absence and, on his side, of
deliberate abstention from communication—like the roots of two
trees growing secretly towards each other in darkness. But it was so;
and now the roots must be severed.
“I hear that some of the prisoners at Inverness intend to swear
that they were forced out,” he remarked after a silence.
“I dare say that may be true of some of them,” replied Ewen with
composure. “But you are not suggesting that I should employ that
plea, are you?”
“I know too well that you would not,” returned his visitor, and then
murmured something about transportation as a possible alternative
to a worse fate.
“Transportation!” exclaimed the Highlander. “To be sent to work in
the plantations oversea as an indentured servant! I’d far liefer be
hanged and quartered!”
Keith sighed heavily. “Yes, I have brought you nothing but harm. I
would give my right hand to save you—and I can do nothing!”
Ewen twisted round on his stool. “How can you say that? Who
knows what the want of your evidence at Carlisle may mean to me?
For there is always a chance that the witnesses at Fort William may
have left or died.”
“You have just said that once you reached Fort William there was
no chance of escaping Carlisle. I am not a child, Ardroy!” retorted
Keith, glowering at him in his own pain.
“Neither am I,” replied Ewen with a sudden smile. “Do not,
therefore, talk about wishing in vain to give your right hand for my
sake, for I strongly suspect that you have already given what means
as much or more to you.”
Keith got up, that the speaker might not see in his face how near
this guess went to the truth. “Even in my refusal to witness against
you,” he said gloomily, “I begin to think that I acted like a fool. For, as
I told His Royal Highness, if he sent me to Carlisle by force, as he
threatened to do, nothing should have prevented my testifying also
to your granting me my life in Lochaber and my liberty in Edinburgh. I
have thought since that, on that score, it might have been better to
agree to go. . . . But no, I could not have done it!” he added.
Ewen smiled up at him with a look that was almost affection, and
laid his manacled hand on his cuff. “I almost wish that you had
consented, so that we might meet again. For, if old Angus is right,
this is our last meeting—I have counted them many times. And,
indeed, I do not see how it could be otherwise. So”—his voice was
very gentle—“we cannot bring each other misfortune any more.”
The words knocked sharply at Keith’s heart. And how young the
speaker looked, for all his half-starved air; a boy going to extinction,
while he, only four years his senior, felt as if he were middle-aged.
(But no, at their last meeting, when he had trembled before him,
Ewen had not been a boy.)
“Is there nothing I can do for you?” he asked painfully. “Do your
kindred know of your situation; I suppose so?”
“I am not sure if my aunt knows. If she does, she has no doubt
tried to communicate with my wife in France, but——”
“Your wife! Then you——”
“Yes. Miss Grant and I were married at Inverness in March. She
is in France with her sick father, and since the battle I have been
unable to write to her, so that, unless my aunt has contrived to do so,
she may not know whether I am alive or dead. If you would write to
her, Windham—you remember her, no doubt—that would indeed be
a kindness. Will you?”
“Certainly, if you wish it,” answered Keith, though he did not like
the prospect. “But,” he went on with a little hesitation, “why do you
not write yourself, and I would use my best endeavours that the letter
should reach her.”
“I cannot write,” said Ewen. “They will not allow me the materials;
I have often tried to come by them. You must tell her of me, if you
will; and I particularly charge you not to omit how you saved my life
and visited me, and . . . and all the rest that you have done,” he
concluded a trifle unsteadily. “That is a last command, Windham.”
But Keith had drawn a pencil from his pocket. “You had a book in
your hand when I came in; can you not tear out a blank page and
write upon that? I promise you that, if I can compass it, no eye shall
see the letter but your wife’s.”
“A book?” queried Ewen. “Ah, yes, but ’tis only a little Gaelic
psalter which I contrived to get hold of. However——” He took it out
of his pocket, remarking that the pages were but small, and, carefully
tearing out the fly-leaf, accepted the proffered pencil. Keith, unable
to withdraw as he would have wished, walked slowly up and down
the narrow place with bent head. “I have saved him for this!” was still
the burden of his thoughts. Had Ardroy been shot that day he would
have known little about it; he was barely conscious. It would have
been over in a moment, and it would have been a man’s death, too.
Now . . . he shuddered to think of the alternative, purposely
prolonged and horrible, the death of an animal in the shambles. He
hoped with all his heart that Alison Cameron, away in France, did not
know, and would never hear, the details of the English sentence for
treason.
Ewen did not write much, for there was not a great deal of space
on his paper. He read it over very composedly and signed his name.
Then he folded the letter, stooped his head and put his lips to it.
Keith turned his back, but the distance between them was so small
that he knew that the writer, after that, had buried his face in his
hands.
Ah, if only he had listened to him on that evening last summer,
which now seemed such centuries ago, he would not now be giving
up his love, as well as his life and lands!
But there was a clashing behind him; Ewen was getting to his
feet. “I beg your pardon for keeping you waiting so long. Since you
are so good I think that I should like to send my wife also the only
remembrance that I can send. Have you a knife, and can you trust
me with it?—or, better still, will you cut off a piece of this for her?”
He indicated his hair, and coming closer, bent his head. So Keith,
with a rather blunt penknife, and not particularly good eyesight at the
moment, sawed off a little lock on his temple.
“Women like such things,” said the young man half apologetically
as Keith, his mouth tight shut, wrapped the trophy in his
handkerchief. “And the more of which one can cheat Carlisle gate
the better.” He spoke quite lightly and calmly, but his little letter,
which he gave Keith the moment after, had been so tightly held in his
hand that it was marked with his nail-prints. “I have written the
direction upon it,” he went on, watching the Englishman put it
carefully away. “Perhaps I may be able to write to her once more
from Carlisle, but who knows? And the messenger might not be
trustworthy, whereas I know that you are.—Now, Windham, there is
another matter. The money you so generously left for my use——”
“For God’s sake don’t think of that now!” cried Keith, quite
distracted.
“But I must! Miss Cameron, if I can communicate with her, which
may be allowed at Carlisle——”
“Will you waste time over a few guineas? In Heaven’s name, take
them as a gift—cannot you see that it would be kinder to me?”
Ewen evidently saw; he could hardly fail to see it. “Very well, then
I will; and thank you for the gift. After all, I took a greater at your
hands on Beinn Laoigh. And do you remember the money you left as
payment for my clothes at Fassefern House? My sorrow, but I was
angry with you! I threw it away into the bushes, and Clanranald’s and
Keppoch’s men hunted for it all night, so I heard afterwards.” His
tone suddenly changed. “Do you mean to leave this penknife here—
is that a gift, too?”
He pointed to that object, lying where Keith had laid it down on
one of the stools in order to have both hands free to wrap up the lock
of hair. The Englishman hesitated, looking from it to the prisoner, and
read, plain to see in his eyes, the value which he would set on even
so small and blunt a weapon to-morrow. For a moment he was
tempted, against honour and duty.
“Why did you put me in mind of it?” he asked reproachfully. “I had
indeed honestly forgotten it, and had I so left it, you could have taken
it with you to-morrow! . . . But I gave Lord Albemarle my word not to
help you in any way to escape . . .”
Ewen instantly picked up the penknife, shut it, and held it out to
him. “Take it. They are sure, too, to search me before I go to-morrow.
Come,” he still held it out, “you have sacrificed enough for me; your
honour you shall not sacrifice!”
As Keith reluctantly took the knife from the shackled hand he had
a shock as if a lightning flash had stabbed asunder the sky above
him and shown him something he had never seen—never wished to
see—before. The barren and solitary path which he had marked out
for himself through life was not the best! Here was a man who would
never willingly fail friend or lover, much less play them false. Now, at
this their last meeting, when friendship with him was a thing
impossible of realisation, he knew that he would have asked nothing
better—he who never wished for a friend.
Like a lightning flash too in its speed the revelation was over.
Mechanically he put the penknife away, and Ewen limped the few
paces back to his stool. “Come and sit down again, Windham,” he
said, “for once more you cannot get out if you wish to. And there is a
matter about which I have long been curious. Why do you bear a
Scots name—if I may ask without indiscretion? Have you perhaps
Scottish kin?”
Keith, sitting down beside him again, shook his head. “There’s
not a soul of my blood north of Tweed. But my father, who was a
soldier also, had once a Scottish friend, killed at Malplaquet before I
was born, for whom he must have had a great affection, since he
gave me his name.”
They looked at each other, and the shadowy dead Scot of
Marlborough’s wars seemed, to his namesake at least, to assume
the shape of a symbol or a prophecy. Keith shivered suddenly.
“I can hardly hope,” said the Jacobite, “that you will care to name
your son after me when I have ended . . . not on a battlefield . . . but I
should like to feel that you will remember sometimes, not me, but
what you did for me. For whereas you think but poorly of your fellow-
men and yourself—or am I wrong?—you act, Keith Windham, very
much otherwise!”
Moved and startled, Keith dropped his gaze and stared between
his knees at the floor. Yes, they might have been friends; they were
meant to be friends—Ardroy felt that too, did he? “I . . . in truth I do
not well know what I think,” he murmured; “and, as for my actions,
why, I seem to have failed on every side.—But one thing I do know,”
he went on with a touch of defiance, “and that is, that I do not believe
in your Highland second sight. Who can say that we shall not meet
again—and you a free man?”
Ewen looked hard at him a moment. Outside the jangling of keys
could be heard coming nearer. “I wish very much that I could think so
too,” he answered simply, as he rose to his feet with a corresponding
clashing. And again the strange constriction in his throat betrayed
Keith into irritation.
“Are you so superstitious, Ardroy, that you’ll read into an old
man’s maunderings a menace that was never there? Did your foster-
father say a word about death in his precious prophecy? I warrant he
did not!”
Ewen smiled. “My dear Windham, at bottom I believe as little in
the two sights as you. But surely ’tis not superstition to realise that I
am at least threatened with that fate. Yet who knows? If it pass me
by, and we ever meet again in this world, then maybe I’ll have more
time to thank you fitly for all you have done and given up for me. Yet
I do thank you now, from my heart—from my inmost heart!”
He held out his fettered hands, and Keith as he took them was
hardly capable of speech.
“I have failed in everything,” he muttered. “But your letter—I
promise you it shall go by a safe hand. I . . . I . . .” The door, opening,
recalled him to an Englishman’s last obligation, the suppression of
emotion before witnesses. “To-morrow,” he said, loosing his grasp,
and in a tolerably composed voice, “to-morrow you will at least be
out of this dismal place and free of those irons.”
“Aye, will he,” commented the gaoler in the doorway. “And riding
a braw horse forbye!”
“I doubt I’ll make much show as a horseman,” replied Ewen. “I
fear I shall fall off.”
“Ye’re no’ like tae hae the chance, Mr. Cameron,” replied the man
dryly. “Ye’ll be tied on.—Noo, sir, if ye please.”
“What time is he to start?” asked Keith.
“Sax o’ the clock.” The keys jingled impatiently.
Keith took a resolve. But he did not put it into words. All he said
was “Good-bye,” and, for fear of being totally unmanned, stole only
the most cursory glance at the pale, gravely smiling face under the
rather untidy auburn hair.
But Ewen held out his hand again. “Beannachd leat, as we say in
the Erse. ‘Blessings go with you; may a straight path be before you,
and a happy end to your journey’!”
Without answering Keith wrung the hand and went quickly up the
steps past the gaoler and into the passage. He was hardly there
before the heavy door clanged to between him and his last meeting
with Ewen Cameron.
“A peety,” said the gaoler reflectively, taking the key from the lock,
“a peety yon muckle young man behoves to hae a rope aboot his
thrapple. But there, wha will tae Cupar maun tae Cupar . . . Yon’s the
way up, sir.”
At twenty minutes to seven next morning Keith Windham, having

propped himself up on one elbow in his camp bed, was staring with
incredulous and remorseful eyes at the watch which he had just
drawn from beneath his pillow. That he should not wake in time to
catch a final glimpse of Ardroy as he rode away had never occurred
to him; the question last night had rather been whether he should
ever get to sleep . . .
Well, evidently old Angus MacMartin’s fates were determined that
he should not see Ewen Cameron again. And after all, he thought,
trying to stifle regret, did I really desire to see him carried away,
bound upon a horse, by Kingston’s dragoons?
When he was dressed he went to the door of the tent, which
opened towards Loch Ness, and looked out. It was a beautiful, fresh
morning, and the loch was smiling up at the flanking hills. Even the
ruins of the fort, rearing themselves against that brightness, looked
less blackened in the sunshine. But for Keith those gutted buildings
held nothing now; and the busy camp around him was empty, too.
How far on the road were they got by this time, and were the
troopers riding too fast . . . ?
He dropped the flap of the tent and, going over to the table, took
out from the breast of his uniform the handkerchief with the curl of
hair and the scrap of a letter, and sealed them up carefully in a little
packet, first copying down the address and scrupulously averting his
eyes from the rest of the torn fly-leaf in doing so. Then, wondering
how soon and in what manner he should find an opportunity of
fulfilling his trust, he sat on, staring at the packet, now directed in his
own hand to Mrs. Ewen Cameron at an address in Havre-de-Grâce.
What was it that Ardroy had wished him yesterday—a straight
path and a happy end to his journey. Ewen’s own path seemed
straighter than his, now, but the end to which it led? Keith had a
sudden horrible vision, corollary of those which had haunted him in
the night. He pressed his hands over his eyes and bade it begone,
bade himself be as little perturbed at the prospect as Ewen himself
had been yesterday—Ewen who would certainly go cheerfully and
courageously to that ghastly business, but who, had it not been for
his interference, might be lying now unmutilated under the turf of Ben
Loy, with only the plovers and the curlews to disturb his rest.
Keith suddenly got up and began to pace restlessly to and fro, his
head on his breast. He was finding his self-defensive philosophy of a
very meagre assistance now. If he were again the child he had been,
the child who every night at his nurse’s knee asked so simply and
naturally for what he desired, it would have been easy to utter the
prayer in his heart. But of what use such supplication to the Power
whose only concern with the world was that He had set it a-rolling?
Yet it was some time before he came to a standstill, and, with a
heavy sigh, replaced in his breast the little packet for Ewen
Cameron’s wife; with this for consolation in his mind, that he who
was riding southward was not yet condemned, and that till the
sentence was spoken his case was not hopeless.
All that afternoon there came marching wearily back to Fort

Augustus, in a woeful state of fatigue and rags, the various units of
the fifteen hundred men whom Cumberland had sent out in his last
battue for Prince Charles nearly a fortnight before. They had met
with no success whatever.
At nine o’clock that evening Keith, to his surprise, received a
summons from Lord Albemarle, and found him heated and
discomposed.
“’Tis a most extraordinary and vexatious thing,” declared the Earl,
pacing up and down his quarters with his heavy tread. “It seems as
though the Pretender’s son must have broken through the chain of
sentry posts round Clanranald’s country, and yet I can scarce believe
it, they were so close together. I shall make a fresh effort, with fresh
men; these poor fellows are quite worn out with their exertions. For
my part, Major Windham, I declare that to capture that young man,
source of all our woes, I should with infinite pleasure walk barefoot
from Pole to Pole!”
Had Lord Albemarle but known, no such heroic pilgrimage was
required of him; a ten-mile expedition that night to a certain cave in
Glenmoriston would have been sufficient.
“Your Lordship’s zeal is common knowledge,” murmured Keith,
wondering what the Commander-in-Chief wanted him for. “If it could
only be crowned with success . . .”
“Aye, if only it could! One report says,” continued the Earl, going
to a table and turning over some papers, “that the Pretender’s son is
in Badenoch on his way to the east coast; another that he has gone
north to Caithness. Some say he is still in Morar and Knoidart; and
the very latest of all declares that he has gone back to the Long
Island—as you know they call that chain of islands from South Uist
to Lewis. It is distracting!”
It was; but Keith could not think why he should have been
summoned to hear this truth.
“Why, bless my soul,” said Albemarle, as if he had read his
thoughts, “I am so prodigiously put about that I have forgotten, I
believe, to tell you, Major Windham, that you are one of the officers
whom I design to employ in my new effort.”
“My Lord!” ejaculated Keith, flushing.
“Yes, I intend to send you without delay to the neighbourhood of
Arisaig, not because I think that the young man is there at the
moment, though one report says so, but because I think it not
unlikely he may try in the end to escape from the very spot where he
landed last July.”
“Your Lordship is really too good,” stammered Keith, rather
overcome. “If the most active vigilance——”
“Yes,” cut in Albemarle, “I depend upon you to show that, Major
Windham. Your future is in your own hands, and my reputation, too.
For reasons upon which I touched the other day, it is you whom I am
sending to what I cannot but consider the most likely spot for
securing the person of the arch-rebel. The day that you bring him
back a prisoner your difference with His Royal Highness will be no
more remembered against you. And perhaps I, too,” added the Earl
with a sigh, “shall be able to leave this most distasteful country.”
“I assure your Lordship,” said Keith with a beating heart, “that
failure shall not be due to any want of exertion on my part. Your
generous selection of me for this expedition overwhelms me with
gratitude, and whether I secure the prize or no I shall be your
Lordship’s lifelong debtor for the opportunity.”
Lord Albemarle nodded, pleased as one who knows that he
confers a benefit. “You will march at daybreak with a hundred men. I
do not say that you are to station yourself exclusively at this Loch
nan—on my soul, I cannot pronounce its outlandish name. Dispose
your men as you think best. My secretary is preparing a few notes
for your guidance. The devil of it is, however,” confessed the
harassed commander in a further burst of confidence, “that these
informations, when one receives them, are always a se’nnight or two
out of date.” And, after adding a few more recommendations as to
Keith’s conduct, he said kindly, “Now go and get some sleep,
Windham—and good luck to your endeavours!”
Keith went out as one who walks on air. A chance at last—the
greatest, if only he could seize it! So the day which had taken from
him something which he felt that he had never really possessed had
brought him . . . no, not compensation for the loss, for that, perhaps,
he could never have, but opportunity to do more than purge his
disgrace—to make himself the most envied man in the three
kingdoms.
V
THE HERON’S FLIGHT IS ENDED
“Hereafter, in a better world than this,
I shall desire more love and knowledge of you.”
—Shakespeare.
CHAPTER I
It was fortunate for Ewen that the sorrel horse on which he was tied
had easy paces, and that the troopers did not ride fast; fortunate too
that his arms had been bound to his sides and not behind his back,
as had at first been proposed when, limping badly, and shielding his
eyes against the unaccustomed daylight, he was brought out into the
courtyard of the fort to be mounted. For by midday so many hours in
the saddle, under a July sun, were making heavy demands on a man
come straight from close confinement and not long recovered of a
severe wound.
But from Ewen’s spirit a much heavier toll was being exacted; not
by the prospect of the death which was in all likelihood awaiting him,
not even by the remembrance of his lost Alison, but by the pain
which was actually tearing at him now, this taking leave of what he
loved better than life, the lakes and mountains of his home. This was
the real death, and he kept his lips locked lest he should cry out at its
sharpness.
The picture which had been tormenting Keith Windham he could
look at without undue shrinking; or rather, he did not trouble to look
at it any more now. Like the man who had saved him, he could not
avoid the thought that Guthrie’s musket balls had been more
merciful, but the choice had not lain in his hands; and for the last two
months it had been more important to try to keep his equanimity day
after day in the cold and darkness of his prison than to think what he
should do or feel when he came to stand in the hangman’s cart. And
the parting with Alison was over; and because he had known that the
kiss in the cabin of the brig might be their last, it had held the
solemnity which had enwrapped their hurried marriage and the bridal
night whose memory was so holy to him. Alison had been his,
though for so brief a space; and one day, as he firmly believed, they
would meet again. But Beinn Tigh . . . would he ever see again, in
that world, his beloved sentinel of the stars?
Ever since its peak had appeared, all flushed by the morning sun,
as they began to ride by Loch Oich, he had kept his eyes hungrily
upon it, praying that the horses might go slower, or that one might
cast a shoe; watching it like a lover as it revealed more of its
shapeliness and dominated the shoulder, between it and the loch,
behind which, as they went farther, it would inevitably sink. And Loch
na h-Iolaire, his loch, away behind there, invisible, secluded by its
own mountains! If only he could get free of these cords, swim the
water between, climb those intervening miles of scree and heather,
and see the Eagle’s Lake once more! No, never again; neither in this
world nor the next. For Loch na h-Iolaire was not like Alison and him;
it had not a soul free of time and space. Loch na h-Iolaire existed
over there, only there, on that one spot of earth, and in all the fields
of heaven there would be no lake so lovely, and in heaven the grey
mists would never swoop down on one who ambushed the deer.
At Laggan-ach-drum they had halted and rested and eaten. It
was Glengarry’s country, yet on the border of the Cameron, and
Ardroy was known there; but in the burnt and ravaged clachan there
seemed to be no man left, and no risk of a rescue. The troopers of
Kingston’s Horse had shown themselves rough but not unkindly, and
the sergeant, probably thinking that unless they gave the prisoner
some attention they would hardly get him to Fort William at the end
of the day, had him unfastened and taken off the sorrel and set down
amongst them by the roadside with food and drink. But they were
very careful of him, tying his ankles together, and putting a cord from
one wrist to the belt of the next man. And Ewen had eaten and drunk
in silence, looking at the sunlit desolation. This was what had been
done in the Glen . . . done in all the countryside . . .
A young girl had passed once or twice to a half-burnt croft
carrying a bucket of water, and presently the sergeant, wanting some
for the horses, called to ask where the water came from, since here
they were no longer by a lake side. Setting down the heavy bucket,
she came and stood before him, looking on the troopers with eyes
like coals, and only once at their prisoner. (But the softness of
evening was in them then.) The sergeant, without harshness, put his
question, but the girl shook her head, and Ewen knew that she had
not the English. Already he had seen a sight that set his heart
beating, for as she stooped to put down the bucket he had caught a
glimpse of the black handle of a sgian dubh in her bosom.
“Shall I ask her for you?” he suggested to the sergeant, and,
hardly waiting for the answer, he spoke rapidly to her in Gaelic,
putting the question about water indeed, but adding at the end of it,
“Try to give me your knife when I am on the horse again—if you have
another for yourself!”
The girl gave him a glance of comprehension, and turned away to
show where to fetch the water; and the sergeant had no inkling that
another question besides his had been put and answered. He even
threw a word of thanks to the interpreter.
But while they were tying Ewen on again the girl came among
them, as if curiosity had brought her to see the sight, and, heedless
of the jests which she did not understand, slipped nearer and nearer
among the horses until she seemed to be jostled against the sorrel’s
shoulder. And Ewen felt the little knife, warm from its hiding-place,
slide into his right stocking; it was only with an effort that he kept his
eyes averted and seemed unaware of her presence. But he turned
his head as they rode away, and saw her standing at gaze with her
hands joined, as though she were praying.
That was an hour agone and more. How he should ever get at,
much less use, the blade against his leg he had no idea, seeing that
his arms were immovably pinioned, but to know it there made a
world of difference. His thoughts reverted to Major Windham, to that
interview yesterday. They might have been friends had Fate willed it
otherwise; indeed he could not but think of him already as a friend,
and with wonder at what he had done for him. But why had Angus’s
heron brought them together to so little purpose, to meet, and meet,
and then to part for ever, as they had met at first, ‘by the side of
water’—Loch Oich and Loch Ness? Yet he owed his life to one of
those encounters; there was no possible doubt of that. But it was still
a mystery to him why the Englishman should have cared so much for
his fate as to wreck his own career over it. He had really behaved to
Loudoun and (as far as he could make out) to Cumberland—all
honour to him for it—as if he were fey. And he had seemed at the
outset of their acquaintance of so mocking a temper, so lightly
contemptuous as scarcely even to be hostile. One saw him with
different eyes now.
But Keith Windham was swept from his thoughts again, as he
realised afresh that he was going for the last time along Loch Lochy
side. It was bright pain to look at it, but Ewen looked greedily, trying
to burn those high green slopes for ever on his memory, to be
imaged there as long as that memory itself was undissolved. There
was the steep corrie and the wall shutting out his home. What
though the house of Ardroy were ashes now, like Achnacarry and a
score of others, there were things the marauders could not touch,
things dearer even than the old house—the sweeps of fern and
heather, the hundred little burns sliding and tinkling among stones
and mosses, the dark pine-trees, the birches stepping delicately
down the torrent side, the mist and the wind, the very mountain air
itself. But these, though they would remain, were not for him any
more.
And then Ewen bit his lip hard, for, to his horror, his eyes had
begun to fill, and, since he could not move a hand, all that was left
was to bow his head and pray desperately that the troopers on either
side might not observe his weakness. But they were just then
absorbed in heartfelt complaints at the detour which they were
obliged to make on his account, instead of setting out with the rest of
Kingston’s Horse, in two days’ time, for Edinburgh; and Ewen quickly
swallowed the salt upon his lips, thinking, ‘Since I am so little of a
man, I must fix my mind on something else.’ Yet here, in this dear
and familiar neighbourhood, he could think of nothing else but what
was before his eyes; and his eyes told him now that the radiance of
the morning was gone, and that clouds were coming up the Glen
from the south-west, from Loch Linnhe, with that rapidity which he
knew so well of old. In an hour it would very likely be raining hard; in
less, for beyond the Loch Arkaig break he could see that it was
raining . . .
Here he was, looking just as intently at the hills as before! So he
shut his eyes, afraid lest moisture should spring into them again; and
also a little because the waters of Loch Lochy, still bright, despite the
advancing clouds, were beginning queerly to dazzle him. And when
his eyes were shut he realised with increasing clearness that
physically too he was nearing the boundary-line of endurance. He
had wondered himself how he should ever accomplish the thirty-mile
ride, but the problem had not troubled him much, and the untying
and rest at Laggan had been a relief. Now—and they still had a long
way to go—it was astonishing how this sea of faintness seemed to
be gaining upon him. He reopened his eyes as he felt himself give a
great lurch in the saddle.
“Hold up!” said the trooper who had the reins. “Were ye asleep?”
Ewen shook his head. But what curious specks were floating over
the darkening landscape! He fixed his eyes on his horse’s ears; but
once or twice the whole head of the animal disappeared from his
sight altogether; and the second time that this phenomenon occurred
he felt a grip on his arm, and found the soldier on the other side
looking at him curiously. However, the man released him, saying
nothing, and Ewen, mute also, tried to straighten himself in the
saddle, and looked ahead in the direction of Ben Nevis, since
perhaps it was a mistake to look at anything close at hand. The
mountain’s top was veiled. The last time that he had seen it . . . with
Lochiel . . .
But that memory had poison in it now. Oh, to have speech with
Lochiel once before he went hence! Ewen set his teeth, as waves of
faintness and of mental pain broke on him together. If he could only
say to Donald . . .
And there followed on that, surprisingly, a period in which he
thought he was speaking to Lochiel; but it must have been by some
waterfall—the waterfall near the hiding-place, perhaps—and through
the noise of the rushing water he could not make Lochiel hear what
he was saying to him. He tried and tried . . . Then all at once
someone was holding him round the body, and a voice called out,
miles away, yet close, “He was near off that time, Sergeant!”
Ewen left the waterfall and became conscious, to his
astonishment, that they were away from Lochy and within full sight of
Ben Nevis and all his brethren. Also that the whole escort had
stopped. Landscape and horses then whirled violently round. His
head fell on a trooper’s shoulder.
“The prisoner’s swounding, Sergeant! What are we to do?”
Swearing under his breath, the sergeant brought his horse
alongside. “Shamming? No, he ain’t shamming. Here,” he brought
out something from his holster, “give him a drink of his own Highland
whisky—nasty stuff it is!”
They held up Ewen’s head and put the spirit to his lips. It revived
him a little, and he tried to say something, but he himself did not
know what it was. The sergeant eyed him doubtfully.
“I’ll tell you what,” he remarked to his men, “we’ll untie his arms—
not his feet, mind you—and maybe then he can help himself by
taking a holt of the mane.—Can ye do that?”
Ewen nodded, too sick and dizzy to realise what possibilities
would thus be put within his reach.
The dragoons unfastened the cords round his arms and body,
gave him some more spirit, rubbed his cramped arms, and in a little
while he was able to do what the sergeant suggested; and presently,
he leaning hard upon the sorrel’s crest, his fingers twined in the
mane, they were going slowly down the moorland slope towards the
Spean. Ewen felt less faint now, after the whisky and the release of
his arms; the fine misty rain which had now set in was refreshing,
too, so, although the landscape showed a disposition to swim at
times, he could certainly keep in the saddle—indeed, how could he
fall off, he thought, with this rope passing from ankle to ankle
beneath the horse’s belly? And he began to think about High Bridge,
still unseen, which they were approaching, and of the part which it
had played in this great and ill-fated adventure—and in his own
private fortunes, too. For down there the first spark of revolt had
flashed out; down there Keith Windham had been turned back by
MacDonald of Tiendrish and his men; and because he had been
turned back, Ewen himself was alive to-day, and not mouldering by
Neil MacMartin’s side on Beinn Laoigh.
But he was none the less on his way to death, and there was no
one to stay the redcoats from passing High Bridge now. Tiendrish,
marked for the scaffold, lay already in Edinburgh Castle; Keppoch,
his chief, slept with his broken heart among the heather on Culloden
Moor; Lochiel was a wounded outlaw with a price on his head. The
gods had taken rigorous dues from all who had been concerned in
the doings of that August day here by the Spean. Yes, strangely
enough, even from Keith Windham, who was on the other side. They

Security Strategies in Linux Platforms and Applications (Jones &amp; Bartlett Learning Information Systems Security &amp; Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Uploaded by

Copyright:

Available Formats

You might also like

Security Strategies in Linux Platforms and Applications (Jones &amp; Bartlett Learning Information Systems Security &amp; Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Security Strategies in Linux Platforms and Applications (Jones &amp; Bartlett Learning Information Systems Security &amp; Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Uploaded by

Copyright:

Available Formats

Security Strategies in Linux Platforms

and Applications (Jones & Bartlett

CHAPTER 6 Securing Services 138

CHAPTER 7 Networks, Firewalls, and More 166

Security Enhanced Linux 193

CHAPTER 8 Networked Filesystems and Remote Access 210

Basic Principles of Encryption on Networks 230

CHAPTER 9 Networked Application Security 243

Mail Transfer Agents 263

CHAPTER 10 Kernel Security Risk Mitigation 278

Building Your Own Secure Kernel 299

PART THREE Building a Layered Linux Security Strategy 311

CHAPTER 11 Managing Security Alerts and Updates 312

Antivirus Options for Linux Systems 320

CHAPTER 12 Building and Maintaining a Security Baseline 349

CHAPTER 13 Testing and Reporting 376

Running Integrity Checks of Installed Files and Executables 392

CHAPTER 14 Detecting and Responding to Security Breaches 418

Creating an Incident Response Plan 427

CHAPTER 15 Best Practices and Emerging Technologies 448

Identifying Your Support Options 453

APPENDIX A Answer Key 471

To those who have made me who I am today:

Purpose of This Book

When a command is indented between paragraphs, it’s meant to include a Linux

The second prompt is represented by a #. As shown here, it represents the command-line

Is Linux Really Secure?

Security Threats to Linux 2

Basic Components of Linux Security 18

1 Security Threats to Linux

The Origins of Linux

Security in an Open Source World

The idea behind open source goes back many decades to a

The C-I-A Triad

redundancy checks or cryptographic hashes as ways of ensuring that

Although the Parkerian hexad is well-respected within the security community, it

At twenty minutes to seven next morning Keith Windham, having

All that afternoon there came marching wearily back to Fort

You might also like

Security Strategies in Linux Platforms and Applications (Jones & Bartlett Learning Information Systems Security & Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Security Strategies in Linux Platforms and Applications (Jones & Bartlett Learning Information Systems Security & Assurance) 2nd Edition, (Ebook PDF) full chapter instant download

Security Strategies in Linux Platforms and Applications (Jones & Bartlett Learning Information Systems Security & Assurance) 2nd Edition, (Ebook PDF) full chapter instant download