Learn to use extended file attributes in Linux to boost security | Linux and Open Source | TechRepublic.com

Learn to use extended file attributes in Linux to boost security

• Date: December 15th, 2009
• Author: Vincent Danen
• Category: General
• Tags: Attribute, File, ACL, Linux, UNIX, Open Source, Operating Systems, Security, Software, Vincent Danen
• Special Reports » See more posts on: Linux Tip

ACLs and extended attributes for files are simple and easy to use in Linux, and can go a long way in securing files. Vincent Danen goes over some of the basic file protection enhancements provided by the Linux kernel.

—————————————————————————————

With all the talk of enhanced file system security and security frameworks, some of the basic file protection enhancements provided by the Linux kernel have been forgotten. While there is certainly a distinct place for security applications like SELinux, GrSecurity and others, there are simple means for securing files as well. ACLs and extended attributes for files are simple and easy to use, and can go a long way in securing files.

The first tools to use with extended attributes is chattr, which changes file attributes for files, and lsattr which lists those attributes. There are a number of extended attributes you can add or remove from files, including “a”, which makes a file append-only, and “i” which makes a file immutable (cannot be modified, deleted, or renamed, nor can any link be created to the file). There are other attributes that deal with compression, undeletion, secure deletion, and journaling as well.

Read more...
http://blogs.techrepublic.com.com/opensource/?p=1116

Don