Home
Paul's_Page
UK_NetDirect
PhotoAlbum:
Phoebe 1,
2, 3,
4
Francie 1, 2
Pets 1, 2
Family 1, 2,
3
Special Occasions
Photo Art
Pre-USAF
Devner
Panama 1, 2,
3, 4-misc
Korea & misc
Germany & misc
Soham & misc
Daws_
Hill:
Page 1, 2,
3,
& misc
Leave '96 Mom
UK
Panama '98: 1, 2,
3
Colorado_ Springs:
Leave '98
Springs 1, 2,
3, 4
& misc
Francie's Birth
Rodriguez'
Holiday
Colorado_Homes
PCI_Systems
Online_Documents:
Catalogs
'n Manuals
Howto's
Linux
Microsoft
Security
Mirrored_Sites:
Hardening
Port
Reference
Reghacks
| | For both personal use as well as at work, I was able to start with a
standard installation of the Red Hat Linux distribution and provide
services “out-of-the-box” with little or no changes to
default configuration settings. However, there were a number of small changes and extra services
that were necessary to provide all the Internet, file & print
services, and other services that are in use at my place of employment.
The local administrator should be aware of the following: The
``/etc/rc.d/rc.local'' file is
executed upon system start-up and contains any extra services you have
added to your server that should be executed upon
bootup. Look in /etc for any site-specific changes that may be
required. These may include: Anything in
``/usr/local/'' (and
subdirectories) are extra packages or modifications to existing ones that
you have installed here, if you have installed from things like tarballs
instead of using RPM. (Or at least, you should have installed them
here.) These files, particularly in /usr/local/src/, should be kept
up-to-date. See Chapter 10 for
details.
![Warning](../../images/warning.gif) | (WARNING: DISREGARD THIS SECTION!) |
Create an Internet user as per normal. The
“shell” account should be
``/bin/bash'' (as FTP requires a
valid shell). ``cd /home ; chown root.root theuser''
This makes “theuser”'s directory belong to root, for
security reasons. ``cd /home/theuser ; mkdir www ; chown
theuser.theuser'' This creates their “www”
directory, and sets ownership so they can read/write to
it. ``echo "exit" > .profile''
This creates a ``.profile'' file
with the single line ``exit'' in it. If the user tries
to log in via telnet, they will get disconnected
immediately. Do an ``ls -l'' and make sure there
are only 2 files in the directory (not including ``..'' and
``.''): All other files can be deleted (eg. ``rm .less ; rm .lessrc'') If the user needs to have e-mail forwarding enabled you
could create a .forward file which simply has the proper e-mail as the
first and only line in the file.
That's it. The user can use FTP to update the pages. |