unix安全加固

linux系统下： vi /etc/vsftpd/vsftpd.conf

anonymous_enable=NO

保存退出重启vsftp服务：service vsftpd restart

2、HP-UNIX修改SNMP团体名：

一、修改SNMP配置文件/etc/SnmpAgent.d/snmpd.conf

常用配置及其解释如下：

get-community-name: public #读团体名，也就是读的密码

set-community-name: # enter community name，写团体名

contact: # enter contact person for agent，联系方式，可选参数。

location: # enter location of agent，位置，可选参数。

max-trap-dest: # enter max no. of trap-dest entries to be maintained.最大接受数目。

trap-dest: # enter trap destination。接受的地址

可以做个软链接：ln –s /etc/SnmpAgent.d/snmpd.conf /etc/snmpd.conf

二、配置snmp启动项

/etc/rc.config.d/Snmp*

SnmpHpunix

SnmpIpv6

SnmpMaster

SnmpMib2

SnmpNaa

SnmpTrpDst

以/etc/rc.config.d/SnmpMaster配置信息如下：

#

# FILENAME: /etc/rc.config.d/SnmpMaster

#

# FILESET: /Networking/SnmpAgent/MASTER

#

# DESCRIPTION: Configuration file corresponding to /sbin/init.d/SnmpMaster.

# Users may make changes to this file to control whether

# the snmp network management agent (snmpdm) is started by

# /sbin/rc on power up. The default is for the snmp agent

# to be started.

#

# To control whether the snmpd agent is started uncomment one of the

# lines below:

#

# SNMP_MASTER_START=0 # Don't start the agent

# SNMP_MASTER_START=1 # Start the agent. This is the default value.

# SNMP_MASTER_START="" # Actually, any value other than 0 will cause the

# # the agent to be started. Including unsetting

# # SNMP_MASTER_START.

#

# This environment variable SNMP_MASTER_OPTIONS may be set to influence the

# way the SNMP Master Agent is started. See snmpd(1M) or snmpdm(1M) for

# possible values. Please note that only a very small number of MIB objects

# are implemented directly by the Master Agent. Other subAgents (like MIB2

# and HpUnix) must be started to obtain the whole suite of MIB objects.

#

# This file corresponded to /etc/rc.config.d/agent_run on HP-UX 10.00. The

# Software Distributor installation scripts for subsequent releases converts

# the contents of the users old file to match the new environment variable

# names.

#

#

# SEE ALSO:

# /etc/rc.config.d/SnmpMib2 // Startup config for MIB2 subAgent

# /etc/rc.config.d/SnmpHpunix // Startup config for HpUnix subAgent

# libSaMib2.sl(1M) // MIB2 subAgent

# libSaHpunix.sl(1M) // HpUnix subAgent

# snmpd(1M) // Manual startup script

# snmpd.conf(4) // SNMP configuration

#

#

SNMP_MASTER_START=1 # Start the master SNMP agent.

export SNMP_MASTER_START

如需关闭snmp，则修改SNMP_MASTER_START=0 即可，重

启生效，即下次重启机器时，就不会自动启动snmp服务了，为了彻底关闭snmp服务，同时还需将其它文件做类似相关修改。

三、启动SNMP服务。

# /usr/sbin/snmpd信息如下：

Start SNMP Master Network Management daemon

SNMP Research SNMP Agent Resident Module Version14.0.1.0

Copyright 19, 1990, 1991, 1992, 1993, 1994, 1995, 1996 SNMP Research, Inc.

Start SNMP HP-UNIX Network Management subAgent

Start SNMP MIB-2 Network Management subAgent

Start SNMP Trap Dest Network Management subAgent

Start SNMP FDDI Network Management subAgent

或者这样启动，与/usr/sbin/snmpd效果一样

Snmp相关启动脚本

/sbin/init.d/snmp*

SnmpFddi4

SnmpHpunix

SnmpIpv6

SnmpMaster

SnmpMib2

SnmpNaa

SnmpTrpDst

以SnmpMaster为例：

# ./ SnmpMaster start

# ./SnmpMaster stop

snmpdm stopped