> For the complete documentation index, see [llms.txt](https://book.bsdcn.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.bsdcn.org/life/di-si-bu-fen-unix-zhi-wai/10.-unix-fu-wu/10.7.-an-quan-fu-wu.md).

# 10.7 安全服务

传统上，UNIX 系统提供的安全措施相对匮乏。虽然现代版本提供了更好的防护手段，但也比以前更加复杂。用户和系统管理员可能体会不到计算机攻击的种种微妙之处，也可能根本抽不出时间，去时刻审查计算机的使用情况，提防可能的入侵者和滥用行为。

下面简要列出一些常见的安全问题（其中有些并非 UNIX 独有）：

* 用户环境的问题：特洛伊木马、家目录中古怪的权限、未受保护的文件、未经许可的游戏复制品、易受攻击或可被读取的临时文件、过于宽松的 `PATH`。
* 密码文件的问题：假冒的登录程序、容易被猜中的密码、用户 ID 重复或使用 root 用户 ID 的用户。
* 其他系统文件的问题：未受保护的文件、未经许可的 setuid 文件、藏匿的特洛伊木马。
* 易受攻击的 uucp、邮件及其他假脱机文件：经由网络进行的文件或命令访问不当。
* 已知的安全 bug。
* 物理灾难：火灾、地震、水灾、电压波动、磁头碰撞。
* 备份不足。

有几家公司提供安全分析。这类分析可能会运行一些程序，去试探 UNIX 的已知漏洞。另一种办法是，安排专业人手对你的系统发动一次攻击——美国国防部在验证安全系统时，就常用这种测试。提供安全分析的公司有：Lachman Associates, Inc. 和 Spectrum Technology Group, Inc.。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://book.bsdcn.org/life/di-si-bu-fen-unix-zhi-wai/10.-unix-fu-wu/10.7.-an-quan-fu-wu.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.