This is a step-by-step practical guide to auditors when carrying out a Unix Audit. It mostly covers Sun Solaris systems, but it has cross-references for AIX and Linux.

It covers the following areas of an Audit:

1. Preliminary Steps
2. Documentation
3. Physical Security
4. Operating System Security
5. Network Security
6. Filesystem Security
7. User and Group Security
8. Sun Built-in Auditing
9. Backup and Emergency Response
10. Automated Auditing Tools
11. References

We have kept the focus on the practicality of conducting an audit, providing the reader with the commands, filenames, tools, and techniques for carrying out the audit.

It is also useful for security administrators, who might be looking to implement security on their Unix Servers.

[ Read more ]