https://wiki.schokokeks.org/wiki/index.php?action=history&feed=atom&title=Sicherheit 2026-06-06T08:02:03Z Versionsgeschichte dieser Seite in schokokeks.org Wiki MediaWiki 1.45.3 https://wiki.schokokeks.org/wiki/index.php?title=Sicherheit&diff=8847&oldid=prev 2009-08-11T13:43:34Z

<p><span class="autocomment">Abschaltung unsicherer SSL-Cipher</span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 11. August 2009, 15:43 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4">Zeile 4:</td> <td colspan="2" class="diff-lineno">Zeile 4:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Mit folgender Einstellung für SSL-Cipher wird verhindert, dass alte Verfahren (SSLv2) oder solche mit niedrigen Verschlüsselungsstandards (MEDIUM, LOW) eingesetzt werden:</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Mit folgender Einstellung für SSL-Cipher wird verhindert, dass alte Verfahren (SSLv2) oder solche mit niedrigen Verschlüsselungsstandards (MEDIUM, LOW) eingesetzt werden:</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;SSLv3:TLSv1:!SSLv2:HIGH:!LOW:!<del style="font-weight: bold; text-decoration: none;">MEDIUM</del>:!<del style="font-weight: bold; text-decoration: none;">EXP</del>:!<del style="font-weight: bold; text-decoration: none;">NULL</del>@STRENGTH&lt;/pre&gt;</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;SSLv3:TLSv1:!SSLv2:HIGH<ins style="font-weight: bold; text-decoration: none;">:MEDIUM</ins>:!LOW:!<ins style="font-weight: bold; text-decoration: none;">EXP</ins>:!<ins style="font-weight: bold; text-decoration: none;">NULL</ins>:!<ins style="font-weight: bold; text-decoration: none;">aNULL</ins>@STRENGTH&lt;/pre&gt;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Filter für Timestamps ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Filter für Timestamps ==</div></td></tr> </table>

Hanno https://wiki.schokokeks.org/wiki/index.php?title=Sicherheit&diff=8635&oldid=prev 2008-05-02T14:47:33Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 2. Mai 2008, 16:47 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l3">Zeile 3:</td> <td colspan="2" class="diff-lineno">Zeile 3:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abschaltung unsicherer SSL-Cipher ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Abschaltung unsicherer SSL-Cipher ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Mit folgender Einstellung für SSL-Cipher wird verhindert, dass alte Verfahren (SSLv2) oder solche <del style="font-weight: bold; text-decoration: none;">mitniedrigen </del>Verschlüsselungsstandards (MEDIUM, LOW) eingesetzt werden:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Mit folgender Einstellung für SSL-Cipher wird verhindert, dass alte Verfahren (SSLv2) oder solche <ins style="font-weight: bold; text-decoration: none;">mit niedrigen </ins>Verschlüsselungsstandards (MEDIUM, LOW) eingesetzt werden:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;SSLv3:TLSv1:!SSLv2:HIGH:!LOW:!MEDIUM:!EXP:!NULL@STRENGTH&lt;/pre&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;SSLv3:TLSv1:!SSLv2:HIGH:!LOW:!MEDIUM:!EXP:!NULL@STRENGTH&lt;/pre&gt;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l17">Zeile 17:</td> <td colspan="2" class="diff-lineno">Zeile 17:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== TRACE/TRACK in Apache deaktiviert ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== TRACE/TRACK in Apache deaktiviert ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>TRACE/TRACK ist ein Debug-Feature, nessus <del style="font-weight: bold; text-decoration: none;">empfielt </del>Deaktivierung:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>TRACE/TRACK ist ein Debug-Feature, nessus <ins style="font-weight: bold; text-decoration: none;">empfiehlt </ins>Deaktivierung:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;TraceEnable Off&lt;/pre&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;TraceEnable Off&lt;/pre&gt;</div></td></tr> </table>

Morpheus https://wiki.schokokeks.org/wiki/index.php?title=Sicherheit&diff=8296&oldid=prev 2007-07-30T21:37:19Z

<p></p> <p><b>Neue Seite</b></p><div>Sicherheitsfeatures auf dem Keks.<br /> <br /> == Abschaltung unsicherer SSL-Cipher ==<br /> <br /> Mit folgender Einstellung für SSL-Cipher wird verhindert, dass alte Verfahren (SSLv2) oder solche mitniedrigen Verschlüsselungsstandards (MEDIUM, LOW) eingesetzt werden:<br /> &lt;pre&gt;SSLv3:TLSv1:!SSLv2:HIGH:!LOW:!MEDIUM:!EXP:!NULL@STRENGTH&lt;/pre&gt;<br /> <br /> == Filter für Timestamps ==<br /> <br /> Empfehlung von nessus, icmp-timestamps via iptables:<br /> &lt;pre&gt;-A INPUT -p icmp -m icmp --icmp-type 13 -j DROP<br /> -A INPUT -p icmp -m icmp --icmp-type 14 -j DROP&lt;/pre&gt;<br /> <br /> tcp-timestamps (sysctl):<br /> &lt;pre&gt;net.ipv4.tcp_timestamps = 0&lt;/pre&gt;<br /> <br /> == TRACE/TRACK in Apache deaktiviert ==<br /> <br /> TRACE/TRACK ist ein Debug-Feature, nessus empfielt Deaktivierung:<br /> <br /> &lt;pre&gt;TraceEnable Off&lt;/pre&gt;<br /> <br /> == suidctl ==<br /> <br /> Mittels des portage-features suidctl wird die Anzahl der SUID-Root-Programme auf das notwendigste reduziert.</div>

91.34.198.154