HostedDB - Dedicated UNIX Servers

Securing-Optimizing-RH-Linux-1_2_148
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca © Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ® 148 Linux Compilers functionality Overview We are now at one of the most interesting stage point where we will compile and install all the services that we wish to offer in our Linux server. Before we begin to explain how to compile and install server software with all the necessary securities and optimizations that we will need on our server, it is important to know the commands and programs we’ll use often to do the job. First of all, we must ensure that we have the necessary packages needed to make compilation on our system. Those packages must be installed on your server or you’ll not be able to compile programs. The necessary packages The following is the necessary packages needed to be able to make compilation on your system after recompilation of your kernel. Those software are on your Red Hat 6.1 Part 1 CD-ROM under RedHat/RPMS directory if there are not already installed. [root@deep /]# mount /dev/cdrom /mnt/cdrom/ [root@deep /]# cd /mnt/cdrom/RedHat/RPMS/ autoconf-2.13-5.noarch.rpm m4-1.4-12.i386.rpm automake-1.4-5.noarch.rpm   dev86-0.14.9-1.i386.rpm bison-1.28-1.i386.rpm byacc-1.9-11.i386.rpm cdecl-2.5-9.i386.rpm cpp-1.1.2-24.i386.rpm cproto-4.6-2.i386.rpm ctags-3.2-1.i386.rpm egcs-1.1.2-24.i386.rpm ElectricFence-2.1-1.i386.rpm flex-2.5.4a-7.i386.rpm gdb-4.18-4.i386.rpm glibc-devel-2.1.2-11.i386.rpm make-3.77-6.i386.rpm patch-2.5-9.i386.rpm · The RPM command to install a RPM package on your system is: [root@deep /]# rpm -Uvh foo-1.0-2.i386.rpm · The RPM command to verify if package are or are not installed on your system is: [root@deep /]# rpm -q foo Once again, after installation and compilation of all programs that you need on your server, it’s important to uninstall all sharp objects (compilers, etc) describe above. This will protect your system from unauthorized users trying to compile programs on your server without authorization. Another thing to do is to move the “rpm” binary program in a safe place like the floppy disk for the same reason that above. Imagine some evil peoples trying to compile program on your server and realize that compilers are not available. He will switch to import programs RPM on the server and install it with the RPM commands. Hops surprise! RPM commands are not available too. Of course in the future if you need to install new software on your server that require RPM program, all you have to do is to put it from the floppy disk to his original place.