Linux

Angin te Linux distributions n taai aikai a karaoi tabeua security features aika kakawaki n aron te software ae e karaoa ana mwakuri i bon irouna n akea kainanoan te aomata (automatic software) ke kabouan rongorongon te service (service updates), kawakinan mwin mwakuri aika a tia ni karaoaki i aon te kaombiuta (event logging), katautauan ke babairean aron karekean rongorongo (access control) ao ai bon bonganan te firewall ni kamanoa te kaombiuta bwa e na aki niniaki n aki akaka), aikai a bane ni kamwakuraki n aroia are a karaoaki iai ma n te Linux build. Aomata aika katea te Linux workstation a riai n iai aia atatai i aon kabutana ke mwakurina (operating system) ao a kona ni karekei kairiri ao ibuobuoki tabeua riki ngkana e noraki riaina (n aron ae man ana website te Linux distribution, ana tabo ni bowi ke ni maroro (forum) online te Linux ke te security mailing lists ibukin te Linux distribution ae kabonganaki).

Taian kanganga

Taian kanganga aika rekereke ma te anua ni maiu (Behaviour risks)

• Taian kanganga aika mwaiti n aron makuri n babakanikawai (fraud), kimoakin rongorongo rinanon te reitaki n te email (phishing), emails aika roko ni mwaiti ae aki kantaningaki rokoia (spam) ao kimoakin kinakim ma rongorongom, a kona ni karaoaki naba nakoia taan kabongana te Linux n ai aroia naba taan kabonganai operating systems tabeua.
• Aki nakoraoin ana babaire te user n aron aki kabonganan te password ke kabonganan te password ae e kai ataki, aki tutuoan mwakuri aika a tia ni karaoaki n te kaombiuta (event logs) ao aki barongan te Linux software n te aro ae eti.

Taian kanganga n rekereke ma te technology (Technology risks)

• E kona n rikirake mwaitin taian kanganga nakon te Linux workstations ma n karaoan taian service aika aki kainanoaki ike a kona n kauki taian network port bwa a na kakai rotaki ke n niniaki.
• Aki karaoan te bitaki ke te onono nakon te Linux software ma ana mwakuri n te tai ae waekoa, riki nakon kabwakana aika a tia n katanoataki ke ni boretiaki (published vulnerabilities).
• Karaoan taian mwakuri aika aki mano, n aekan kabonganan te system ae bon karaoaki ibukin kabonganana n te local area network i aon te internet.

Taian kanganga aika rekereke ma mwakuri n aonikai  (Exploitation risks)

• Kekeweaia ao kamwaneaia aomata bwa aonga ni kaoti rongorongoia (social engineering), ao kimoan taian rongorongo.
• Spam (emails aika roko ni mwaiti ae aki kantaningaki rokoia), Trojans (te software ae tara ni bon koaua ao ngaia bon te kewe), botnets (taian kaombiuta aika toma ma te internet ae a tia n rotaki n te malware – te software ae aia bwai taan kimoa n ninia nako am kaombiuta n anai rongorongom ma iai), back doors (kawai aika raba n rinnako n ninia te kaombiuta teuana), viruses (te program ae kona ni karawata mwaitina ao ni karaoa te urubwai ke ni bita ana program te kaombiuta), rootkits (te software ae e kona ni karekea rinin te aomata n ninia te kaombiuta teuana n akea atakina).
• Denial of service attacks – ninian ao uruakakin te network service ae toma ma te internet n te aro bwa e na aki kona ni kabonganaki.
• Unauthorised privilege escalation – te raka (privilege) ae e reke irouia aomata ae e na bon riai n aki reke irouia.

Tararuan ke kamanoan rongorongom ma am workstations

E nang moanaki

1. Karekean te Linux operating system software (te bwai ae uoua mwangana (binaries), karaoan taian file ao patches) ma n taabo aika onimakinaki ma n kinaki, n ai aron te Linux distribution CD/DVD ae kinaki ke te website ibukin te Linux distribution ae bon koaua.
2. Baronga te Linux workstation file systems ma nneia aika tatannako (te katoto bon kabonganan te fdisk (ke aekakina) ni karika teuana te root partition ae kaokoro, swap space (te marena n te hard disk ae e a onea mwin te physical memory), binary files (taian file aika aikoa koreaki n te text) ao te users file space (te system memory ae kabonganaki ibukin kabutan taian application).
3. Tuoa koauan taian Linux operating system software imwain karinaia (installing), (te katoto ma n kakoauan aia tiaina (digital signatures) ao/ke tuoa bwa te file ke te data a bon koaua ao ma n titebo (checksum values).
4. Tai kariniko (logging in) bwa ngkoe te user ae raka arom (privileged user) n ai aron te root. Ma, rinnako bwa te user account ngkoe ae akea rakam (non-privileged user) ao kabongana te kawai ke kaetieti ni karaoi mwakuri (administrative tasks) ibukin kabutan te bitineti.
5. Kamatea te autorun feature (ke aekakina) n totokoa te media bwa e na rikirake mwaitina.
6. Barongai taian user account bwa a na kona n rokana te session imwin akean te kakamwakuri iai (te katoto akean te kakamwakuri inanon 15 te miniti).
7. Kateimatoa kabouan rongorongon te Linux build (te katoto bon kateimatoan tutuoan updates ao onono aika kainanoaki (patches) ibukin te operating system ao taian application).

Barongan taian service ao users

1. Kamatea ke katautaua mwaitin taian service ke start up scripts aika aki kainanoaki (n ikotaki ma aika a rekereke ma te Bluetooth, USB, wireless networking ke te infrared – karaian taian data n akea kainanoan te uaea).
2. Totokoa kabonganan administration programs aika aki mano n aekakin te rlogin, telnet, tftp, ftp, rsh ao rexec, ao kabongana te remote login ae mano, karaian te file ao shell programs n aekakin te sftp, scp ao ssh.
3. User accounts aika aki kainanoaki (te katoto, guest) ao kurubu, ao taraia raoi bwa accounts ni kabane a na riai ni iai kakoauakia (te katoto bon kabonganan te password) i mwain ae a kariaiakaki rinnakoia n te Linux workstation.
4. Kabonganai passwords aika a kanganga atakia ibukin user accounts ni kabane i aon te Linux workstation (te katoto, waniua mwaitin manin te password ae e na irengan ma taian man n koroboki aika bubura ao aika uarereke, nambwa ao special characters).
5. Taian Linux workstation a kainanoi taian waaki aika kakaokoro. Angin waaki aikai a kaineti ma kaombiuta ni kabane n aki tabe ma tera te operating system software ae kabonganaki, n ikotaki ma te Microsoft Windows ao te Apple Mac OS X (te katoto bon tararuan ke kamanoan te boot sequence, katean karekean te kariaia ibukin taian file, barongan mwin mwakuri aika a tia ni karaoaki i aon te kaombiuta (event logging), katean taian backup ao ai bon tutuoan ao tarataran taian files ke waaki aika kararaoma.
6. Ngkana ko kainanoa riki te kaetieti ke te ibuobuoki ibukin tararuan ke kamanoan taian Linux workstation (n ikotaki ma firewalls, disk ao file encryption, kamanoan te email, barongan te web browser, ao ai te backup software), ko riai n reitaki ma te specialist ae tabena aio n te Linux ke te Linux security ibukin kaetieti ke ibuobuoki.