Unix/Linux Users Best Practices

Unix/Linux Users Best Practices

 * The sudo and su command provides a comprehensive audit trail

   * Each successful authentication is logged to the file ”/var/log/messages”

   * The command issued along with the issuer’s user name is logged to the file ”/var/log/secure”

 * Add the ‘staff’ group to the ‘sudoers’ list

   * ”visudo”

   * Add this line: ”%staff ALL=(ALL) ALL”

 * Make all files under $HCIROOT readable, writable, and executable to hci and the staff group

   * ”chown -R hci:staff $HCIROOT”

   * ”chmod -R u+rwx,g+rwxs,o-rwx $HCIROOT”

     * The ‘s’ sets the setgid flag on the directory so that new files inherit the group ownership.

 * Add all cloverleaf users and hci to the