Learn to use extended file attributes in Linux to boost security

Dec 16, 2009, 07:33 (0 Talkback[s])
(Other stories by Vincent Danen)

"With all the talk of enhanced file system security and security frameworks, some of the basic file protection enhancements provided by the Linux kernel have been forgotten. While there is certainly a distinct place for security applications like SELinux, GrSecurity and others, there are simple means for securing files as well. ACLs and extended attributes for files are simple and easy to use, and can go a long way in securing files.

"The first tools to use with extended attributes is chattr, which changes file attributes for files, and lsattr which lists those attributes. There are a number of extended attributes you can add or remove from files, including “a”, which makes a file append-only, and “i” which makes a file immutable (cannot be modified, deleted, or renamed, nor can any link be created to the file). There are other attributes that deal with compression, undeletion, secure deletion, and journaling as well."

Complete Story

Related Stories:

• DIY pfSense firewall system beats others for features, reliability, and security(Dec 08, 2009)
• Don't need groupware? Organize your life with Osmo(Dec 01, 2009)
• Learn to use Git version control for added flexibility(Nov 25, 2009)
• Fedora 12 boasts enhanced performance, improved reporting, better graphics(Nov 20, 2009)
• Configure Apache to support multiple SSL sites on a single IP address(Oct 20, 2009)
• Using Corkscrew to tunnel SSH over HTTP(Oct 06, 2009)
• Get network versatility with SSH tunneling and netcat(Sep 29, 2009)
• Monitor your system for threats with rsec alerts(Aug 24, 2009)