Bezpieczenstwo mojego systemu

Dyskusje o wszystkim co służy ochronie systemu i danych przed nieautoryzowanym dostępem.
linuxquest
Piegowaty Guziec
Piegowaty Guziec
Posty: 2
Rejestracja: 03 sie 2017, 18:53
Wersja Ubuntu: 16.10
Środowisko graficzne: GNOME
Architektura: x86_64

Bezpieczenstwo mojego systemu

Post autor: linuxquest » 03 sie 2017, 18:55

Witam
Zależy mi na bezpieczeństwie ale w znajomości linuxa nie jestem zbyt dobry
Zaniepokoiłó mnie to co zobaczyłem po komendzie netstat a mianowicie lista połączeń.

Kod: Zaznacz cały

Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node   Path
unix  2      [ ]         DGRAM                    21613    /var/spool/postfix/dev/log
unix  3      [ ]         DGRAM                    1801     /run/systemd/notify
unix  2      [ ACC ]     STREAM     LISTENING     1803     /run/systemd/private
unix  2      [ ACC ]     STREAM     LISTENING     45286    @mateusz-com.canonical.Unity.Master.Scope.applications.T4895759039528
unix  2      [ ]         DGRAM                    13594    /run/systemd/journal/syslog
unix  2      [ ACC ]     STREAM     LISTENING     28904    @/tmp/.ICE-unix/2271
unix  2      [ ACC ]     STREAM     LISTENING     13597    /run/systemd/journal/stdout
unix  7      [ ]         DGRAM                    13599    /run/systemd/journal/socket
unix  2      [ ACC ]     STREAM     LISTENING     23769    @/tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     43931    @mateusz-com.canonical.Unity.Scope.applications.T4897652291018
unix  2      [ ACC ]     STREAM     LISTENING     13604    /run/systemd/fsck.progress
unix  2      [ ACC ]     STREAM     LISTENING     28965    /run/user/1000/pulse/native
unix  16     [ ]         DGRAM                    13606    /run/systemd/journal/dev-log
unix  2      [ ACC ]     SEQPACKET  LISTENING     13614    /run/udev/control
unix  2      [ ]         DGRAM                    28210    /run/user/1000/systemd/notify
unix  2      [ ACC ]     STREAM     LISTENING     13618    /run/lvm/lvmpolld.socket
unix  2      [ ACC ]     STREAM     LISTENING     28212    /run/user/1000/systemd/private
unix  2      [ ACC ]     STREAM     LISTENING     28342    @/tmp/dbus-pRZUEozsXK
unix  2      [ ACC ]     STREAM     LISTENING     20806    /sys/fs/cgroup/cgmanager/sock
unix  2      [ ACC ]     STREAM     LISTENING     275739   @mateusz-com.canonical.Unity.Scope.rhythmbox.T98390779119061
unix  2      [ ACC ]     STREAM     LISTENING     27362    @/tmp/ibus/dbus-WVwKgaIX
unix  2      [ ACC ]     STREAM     LISTENING     23122    /var/run/tor/control
unix  2      [ ACC ]     STREAM     LISTENING     27226    /run/user/1000/keyring/control
unix  2      [ ACC ]     STREAM     LISTENING     25947    /var/run/NetworkManager/private-dhcp
unix  2      [ ACC ]     STREAM     LISTENING     23150    /var/run/fail2ban/fail2ban.sock
unix  2      [ ACC ]     STREAM     LISTENING     13684    /run/lvm/lvmetad.socket
unix  2      [ ACC ]     STREAM     LISTENING     43930    @mateusz-com.canonical.Unity.Scope.scopes.T489764710733
unix  2      [ ACC ]     STREAM     LISTENING     45287    @mateusz-com.canonical.Unity.Master.Scope.files.T4895764709596
unix  2      [ ACC ]     STREAM     LISTENING     19862    /var/run/libvirt/virtlogd-sock
unix  2      [ ACC ]     STREAM     LISTENING     19864    /var/run/dbus/system_bus_socket
unix  2      [ ACC ]     STREAM     LISTENING     19867    /var/run/avahi-daemon/socket
unix  2      [ ACC ]     STREAM     LISTENING     27447    @/tmp/dbus-hzvdca1WAo
unix  2      [ ACC ]     STREAM     LISTENING     19112    /run/snapd.socket
unix  2      [ ACC ]     STREAM     LISTENING     19114    /run/snapd-snap.socket
unix  2      [ ACC ]     STREAM     LISTENING     28294    @/com/ubuntu/upstart-session/1000/1990
unix  2      [ ACC ]     STREAM     LISTENING     19116    /run/uuidd/request
unix  2      [ ACC ]     STREAM     LISTENING     19119    /var/run/cups/cups.sock
unix  2      [ ACC ]     STREAM     LISTENING     19122    /var/run/libvirt/virtlockd-sock
unix  2      [ ACC ]     STREAM     LISTENING     19125    /run/acpid.socket
unix  2      [ ACC ]     STREAM     LISTENING     45322    @mateusz-com.canonical.Unity.Scope.files.T4896635263648
unix  2      [ ACC ]     STREAM     LISTENING     27527    /home/mateusz/.gnupg/S.gpg-agent
unix  2      [ ACC ]     STREAM     LISTENING     27336    /run/user/1000/keyring/pkcs11
unix  2      [ ACC ]     STREAM     LISTENING     23770    /tmp/.X11-unix/X0
unix  2      [ ACC ]     STREAM     LISTENING     28905    /tmp/.ICE-unix/2271
unix  2      [ ACC ]     STREAM     LISTENING     27350    /run/user/1000/keyring/ssh
unix  2      [ ACC ]     STREAM     LISTENING     275309   @mateusz-com.canonical.Unity.Master.Scope.music.T98390332374441
unix  3      [ ]         STREAM     CONNECTED     29288   
unix  3      [ ]         STREAM     CONNECTED     29176   
unix  3      [ ]         STREAM     CONNECTED     290919   
unix  3      [ ]         STREAM     CONNECTED     32480    @/dbus-vfs-daemon/socket-o0Bf1ret
unix  3      [ ]         STREAM     CONNECTED     29220   
unix  3      [ ]         STREAM     CONNECTED     29168    @/tmp/dbus-pRZUEozsXK
unix  2      [ ]         DGRAM                    30045   
unix  3      [ ]         STREAM     CONNECTED     27626    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     28697   
unix  3      [ ]         STREAM     CONNECTED     30843   
unix  2      [ ]         DGRAM                    27202   
unix  3      [ ]         STREAM     CONNECTED     129717   
unix  3      [ ]         STREAM     CONNECTED     29296   
unix  3      [ ]         STREAM     CONNECTED     30457    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     275740   
unix  3      [ ]         STREAM     CONNECTED     45291    @mateusz-com.canonical.Unity.Master.Scope.files.T4895764709596
unix  3      [ ]         STREAM     CONNECTED     32190   
unix  3      [ ]         STREAM     CONNECTED     29230   
unix  3      [ ]         STREAM     CONNECTED     29933    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     25804    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     290375   @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     30734    @/tmp/ibus/dbus-WVwKgaIX
unix  3      [ ]         STREAM     CONNECTED     28642    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         DGRAM                    24744   
unix  3      [ ]         STREAM     CONNECTED     129718   @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     30861    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29301   
unix  3      [ ]         STREAM     CONNECTED     34753   
unix  3      [ ]         STREAM     CONNECTED     29382    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     30096   
unix  3      [ ]         STREAM     CONNECTED     295378   @/tmp/ibus/dbus-WVwKgaIX
unix  3      [ ]         STREAM     CONNECTED     30819    @/dbus-vfs-daemon/socket-GKrFRJ5k
unix  3      [ ]         STREAM     CONNECTED     29427    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29365   
unix  3      [ ]         STREAM     CONNECTED     30637   
unix  3      [ ]         STREAM     CONNECTED     27508   
unix  3      [ ]         STREAM     CONNECTED     290913   
unix  3      [ ]         STREAM     CONNECTED     29638   
unix  3      [ ]         STREAM     CONNECTED     43879    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     30407    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29041   
unix  3      [ ]         STREAM     CONNECTED     28716   
unix  3      [ ]         STREAM     CONNECTED     24857   
unix  3      [ ]         STREAM     CONNECTED     290374   
unix  3      [ ]         STREAM     CONNECTED     45305    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     30882    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     29204    @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     20431    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     45290    @mateusz-com.canonical.Unity.Master.Scope.applications.T4895759039528
unix  3      [ ]         STREAM     CONNECTED     30867    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29226   
unix  3      [ ]         STREAM     CONNECTED     28842    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     28808   
unix  3      [ ]         STREAM     CONNECTED     30965    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     30733   
unix  3      [ ]         STREAM     CONNECTED     30638    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29292    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29173   
unix  3      [ ]         STREAM     CONNECTED     20007   
unix  3      [ ]         STREAM     CONNECTED     290920   @/tmp/ibus/dbus-WVwKgaIX
unix  3      [ ]         STREAM     CONNECTED     45289   
unix  3      [ ]         STREAM     CONNECTED     29239    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     28714   
unix  3      [ ]         STREAM     CONNECTED     28662    @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     28681    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     30821   
unix  3      [ ]         STREAM     CONNECTED     28425   
unix  3      [ ]         STREAM     CONNECTED     29636   
unix  3      [ ]         STREAM     CONNECTED     29358    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29242   
unix  3      [ ]         STREAM     CONNECTED     19216    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     38020    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     30092   
unix  3      [ ]         STREAM     CONNECTED     290368   
unix  3      [ ]         STREAM     CONNECTED     27329   
unix  3      [ ]         STREAM     CONNECTED     296297   /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29627    @/tmp/dbus-pRZUEozsXK
unix  2      [ ]         DGRAM                    26067   
unix  3      [ ]         STREAM     CONNECTED     29640   
unix  3      [ ]         STREAM     CONNECTED     45280   
unix  3      [ ]         STREAM     CONNECTED     30866   
unix  3      [ ]         STREAM     CONNECTED     29227    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     28698    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     27330    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29426   
unix  3      [ ]         STREAM     CONNECTED     29366   
unix  3      [ ]         STREAM     CONNECTED     27509    @/tmp/ibus/dbus-WVwKgaIX
unix  3      [ ]         STREAM     CONNECTED     129730   @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29609   
unix  3      [ ]         STREAM     CONNECTED     29180   
unix  3      [ ]         STREAM     CONNECTED     43883    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29238    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29018   
unix  3      [ ]         STREAM     CONNECTED     28829    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     290902   @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     30932   
unix  3      [ ]         STREAM     CONNECTED     30673    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29864    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     27196   
unix  3      [ ]         STREAM     CONNECTED     28972    /run/user/1000/pulse/native
unix  3      [ ]         STREAM     CONNECTED     29880   
unix  3      [ ]         STREAM     CONNECTED     29617    @/dbus-vfs-daemon/socket-TlbbM4Gy
unix  3      [ ]         STREAM     CONNECTED     28426    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29610    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29357   
unix  3      [ ]         STREAM     CONNECTED     20196   
unix  3      [ ]         STREAM     CONNECTED     275741   @mateusz-com.canonical.Unity.Scope.rhythmbox.T98390779119061
unix  3      [ ]         STREAM     CONNECTED     37115   
unix  3      [ ]         STREAM     CONNECTED     29236   
unix  3      [ ]         STREAM     CONNECTED     29042    @/tmp/.ICE-unix/2271
unix  3      [ ]         STREAM     CONNECTED     29900   
unix  3      [ ]         STREAM     CONNECTED     28661   
unix  3      [ ]         STREAM     CONNECTED     28680   
unix  3      [ ]         STREAM     CONNECTED     30964   
unix  3      [ ]         STREAM     CONNECTED     30847   
unix  3      [ ]         STREAM     CONNECTED     30672    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     30880    @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     29302    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     29174    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     45288   
unix  3      [ ]         STREAM     CONNECTED     28973    /run/user/1000/pulse/native
unix  3      [ ]         STREAM     CONNECTED     29754    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     295377   
unix  3      [ ]         STREAM     CONNECTED     28691   
unix  3      [ ]         STREAM     CONNECTED     27468    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     27506   
unix  3      [ ]         STREAM     CONNECTED     30862    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29932   
unix  3      [ ]         STREAM     CONNECTED     28715    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     29723    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     28581   
unix  3      [ ]         STREAM     CONNECTED     45308    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29667    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     30818   
unix  3      [ ]         STREAM     CONNECTED     29369    /var/run/dbus/system_bus_socket
unix  3      [ ]         DGRAM                    24743   
unix  3      [ ]         STREAM     CONNECTED     29291   
unix  2      [ ]         DGRAM                    23293   
unix  2      [ ]         DGRAM                    22044   
unix  3      [ ]         STREAM     CONNECTED     29237   
unix  3      [ ]         STREAM     CONNECTED     29630    @/dbus-vfs-daemon/socket-Y9lCEQei
unix  3      [ ]         STREAM     CONNECTED     296302   
unix  3      [ ]         STREAM     CONNECTED     29635   
unix  3      [ ]         STREAM     CONNECTED     29289    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     20605   
unix  3      [ ]         STREAM     CONNECTED     30449    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29167   
unix  3      [ ]         STREAM     CONNECTED     28671   
unix  3      [ ]         STREAM     CONNECTED     29368   
unix  3      [ ]         STREAM     CONNECTED     28814   
unix  3      [ ]         STREAM     CONNECTED     27210    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     29297    @/tmp/dbus-hzvdca1WAo
unix  3      [ ]         STREAM     CONNECTED     29177    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     45279   
unix  3      [ ]         STREAM     CONNECTED     30676    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     30297    @/tmp/.X11-unix/X0
unix  2      [ ]         STREAM     CONNECTED     29906   
unix  3      [ ]         STREAM     CONNECTED     45307   
unix  3      [ ]         STREAM     CONNECTED     30665    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29298    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29182    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     28410   
unix  3      [ ]         STREAM     CONNECTED     30409    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     26060    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     45304   
unix  3      [ ]         STREAM     CONNECTED     32431   
unix  3      [ ]         STREAM     CONNECTED     25800   
unix  3      [ ]         STREAM     CONNECTED     30362   
unix  3      [ ]         STREAM     CONNECTED     27471   
unix  3      [ ]         STREAM     CONNECTED     28411    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     130548   
unix  3      [ ]         STREAM     CONNECTED     30431    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     29775    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29859   
unix  3      [ ]         STREAM     CONNECTED     30645   
unix  3      [ ]         STREAM     CONNECTED     30516   
unix  3      [ ]         STREAM     CONNECTED     29827    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29850   
unix  3      [ ]         STREAM     CONNECTED     45326    @mateusz-com.canonical.Unity.Scope.applications.T4897652291018
unix  3      [ ]         STREAM     CONNECTED     30430   
unix  3      [ ]         STREAM     CONNECTED     29770    /var/run/dbus/system_bus_socket
unix  2      [ ]         DGRAM                    20206   
unix  3      [ ]         STREAM     CONNECTED     45312   
unix  3      [ ]         STREAM     CONNECTED     27397    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     30660    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     24850    /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     21587   
unix  3      [ ]         STREAM     CONNECTED     43933   
unix  3      [ ]         STREAM     CONNECTED     29779   
unix  3      [ ]         STREAM     CONNECTED     29374   
unix  3      [ ]         STREAM     CONNECTED     30287    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         DGRAM                    14038   
unix  2      [ ]         DGRAM                    30428   
unix  3      [ ]         STREAM     CONNECTED     29101   
unix  3      [ ]         STREAM     CONNECTED     25494   
unix  2      [ ]         DGRAM                    20848   
unix  3      [ ]         STREAM     CONNECTED     129713   
unix  3      [ ]         STREAM     CONNECTED     29793    @/tmp/.X11-unix/X0
unix  3      [ ]         STREAM     CONNECTED     30648   
unix  3      [ ]         STREAM     CONNECTED     30517   
unix  3      [ ]         STREAM     CONNECTED     29858    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     19632   
unix  3      [ ]         STREAM     CONNECTED     130551   /run/systemd/journal/stdout
unix  3      [ ]         STREAM     CONNECTED     30408   
unix  3      [ ]         STREAM     CONNECTED     29774    /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     21469   
unix  3      [ ]         STREAM     CONNECTED     30649    @/tmp/dbus-pRZUEozsXK
unix  3      [ ]         STREAM     CONNECTED     29826   
Czy to są bezpieczne procesy ? Mógłby ktoś rzucić okiem ?
Kolejne pytanie zalezy mi na bezpieczenstwie a na routerze mam funkcje Firewall - Filtr usług sieciowych
Jakie usługi sieciowe mógłbym zablokować zakładajać ,że korzystam z komputera tylko do przeglądania internetu

Program Rkhunter dał takie alarmy
/usr/bin/lwp-request [ Warning ]
Checking for hidden files and directories [ Warning ]
Checking /dev for suspicious file types [ Warning ]
linuxquest
Piegowaty Guziec
Piegowaty Guziec
Posty: 2
Rejestracja: 03 sie 2017, 18:53
Wersja Ubuntu: 16.10
Środowisko graficzne: GNOME
Architektura: x86_64

Re: Bezpieczenstwo mojego systemu

Post autor: linuxquest » 05 sie 2017, 13:08

Czy może ktoś pomóc ?
Awatar użytkownika
mario_7
Administrator
Administrator
Posty: 7518
Rejestracja: 30 sie 2006, 13:11
Płeć: Mężczyzna
Wersja Ubuntu: 18.04
Środowisko graficzne: GNOME
Architektura: x86_64

Re: Bezpieczenstwo mojego systemu

Post autor: mario_7 » 08 sie 2017, 10:02

Co takiego niepokojącego jest w tych logach?

Jeśli chodzi o firewall - lepszym podejściem jest zablokowanie wszystkiego i odblokowanie tego co potrzebne.

Przejrzyj logi rkhunter i sprawdź o co dokładnie chodzi.
Czytelnia - poczytaj, Google - poszukaj
ODPOWIEDZ

Wróć do „Bezpieczeństwo Ubuntu”