Essential System Administration Pocket Reference by Frisch, Æleen -- Read -- Imperial Library of Trantor

Index

Essential System Administration Pocket Reference

1. Essential System Administration Pocket Reference

1.1. Introduction and Font Conventions 1.2. The root Account

su Limiting direct root logins to the console

1.2.1. Granting Limited root Powers

sudo+ AIX system roles Solaris profiles and roles

1.3. Essential Administrative Tools

Vendor-provided system administration tools chroot date file find grep makewhatis startsrc, stopsrc, and lssrc (AIX) xargs Package management commands

1.4. Devices and Device Files

dmesg Vendor-specific device listing commands

1.4.1. Special File Formats

Disk partition special filenames CD-ROM device special filenames Floppy disk special filenames Network interface names Tape special filenames Serial line special files Printer special filenames USB device special files Other devices found on some systems

1.5. File Ownership and Protection

chmod chownchgrp umask

1.5.1. Access Control Lists (ACLs)

AIX ACLs HP-UX ACLs POSIX ACLs (Linux and Solaris)

1.6. System Messages and Log Files

File locations /etc/syslog.conf file format syslogd logger logrotate+ The AIX error log The HP-UX error log swatch+

1.7. Startup and Shutdown

Booting the system manually System V-style run levels init Enabling single-user mode password protection Boot script locations shutdown sync

1.8. User Accounts

/etc/passwd Shadow password files /etc/group /etc/gshadow gpasswd FreeBSD user classes cap_mkdb (FreeBSD)

1.8.1. Solaris Projects

projaddprojmod projdel projects newtask

1.8.2. User Account Management Commands

useradd, usermod, userdel (HP-UX, Linux, Solaris) adduser, chpass, rmuser (FreeBSD) mkuser, chuser, rmuser (AIX)

1.8.3. User Account Attributes

Locking and unlocking a user account User account resource limits System-wide initialization files

1.8.4. User Authentication and Login Controls

1.8.5. Password Selection and Aging

Password lifetimes Password selection triviality checks Password history lists Forcing a password change

1.9. Process and Resource Management

Job control ps kill renice vmstat Display amount of physical memory iostat sar sa ac

1.9.1. The cron Facility

File locations crontab cronttab file format cron.allow and cron.deny files

1.9.2. Managing Paging Space

View paging spaces list and usage pagesize (FreeBSD, AIX, Solaris) Defining paging areas swapon Adding a filesystem paging area

1.10. Filesystems and Disks

1.10.1. Filesystem Configuration File

/etc/fstab /etc/vfstab (Solaris) /etc/filesystems (AIX) Filesystem types Filesystem mounting options

1.10.2. Filesystem-Related Commands

df du quot fsck fuser mount umount mknod MAKEDEV mkfsnewfs mkreiserfs (Linux) crfs (AIX) Increasing the size of an existing filesystem

1.10.3. Adding a New Disk

1.10.3.1. AIX (using LVM) 1.10.3.2. FreeBSD 1.10.3.3. HP-UX (using LVM) 1.10.3.4. Linux 1.10.3.5. Solaris

Display disk list/data

1.10.4. Logical Volume Managers

Terminology variations Vendor-specific preparatory steps Volume group commands Logical volume commands Displaying LVM information Disk mirroring Software disk striping Software RAID 5 volumes The FreeBSD vinum volume manager Configuring Linux md devices: /etc/raidtab

1.10.5. Sharing Local Filesystems with NFS

/etc/exports /etc/dfs/dfstab (Solaris) exportfs showmount

1.10.6. Backups

dump fbackup (HP-UX) restore frecover (HP-UX) dd mt Backing up the system filesystem Creating rescue floppies

1.11. Printing

Printing subsystem components

1.11.1. The BSD and LPRng Spooling Subsystems

lpq lprm lpc /etc/printcap configuration file LPRng /etc/printcap file LPRng lpd.perms file

1.11.2. The System V Spooling Subsystem

lpstat cancel lpmove acceptreject enabledisable lpshut lpadmin lpalt (HP-UX)

1.11.3. AIX Spooling Subsystem

qmov qhld /etc/qconfig configuration file

1.12. Serial Lines

Termcap/terminfo file stty

1.12.1. Serial Line Configuration Files

/etc/ttys (FreeBSD) /etc/inittab (AIX, HP-UX, Linux, Solaris) getty programs

1.13. Networking

ifconfig Network interface configuration files Displaying the system's MAC address CIDR suffixes and subnet masks Important services and their associated ports

1.13.1. Network Client Configuration

Name service configuration route DHCP client configuration

1.13.2. Network Servers

inetd xinetd (Linux) DNS Determining the BIND version DHCP server DHCP relay server SNMP server snmptranslate

1.13.3. Networking Administrative Commands

arp hostname nfsstat nslookup netstat ping traceroute

1.14. Electronic Mail

/etc/aliases file

1.14.1. sendmail

File/directory locations sendmail Building the sendmail.cf configuration file Configuration source file macros

1.14.2. procmail and fetchmail

Invoking procmail /etc/procmailrc and $HOME/.procmailrc configuration files formail fetchmail

1.15. Security

1.15.1. System Hardening Checklist

1.15.1.1. Preliminary planning 1.15.1.2. Physical system security 1.15.1.3. Operating system installation 1.15.1.4. Securing local filesystems 1.15.1.5. Configuring and disabling services 1.15.1.6. Securing the root account 1.15.1.7. User authentication and user account attributes 1.15.1.8. Securing remote authentication 1.15.1.9. Setup ongoing system monitoring 1.15.1.10. Backups 1.15.1.11. Miscellaneous activities

1.15.2. Security Monitoring Commands

last lastcomm acctcom

1.16. Kernel Configuration

Default kernel location Kernel build directory Building a custom kernel View kernel parameters Modify kernel parameters

1.16.1. Configuring Boot Loaders

FreeBSD boot loader lilo (Linux) Grand Unified Boot Loader (grub)

Index

← Prev
Back
Next →

← Prev
Back
Next →