714
edits
安全信息: Difference between revisions
Jump to navigation
Jump to search
no edit summary
(初始化) |
No edit summary |
||
| Line 75: | Line 75: | ||
''' | '''黑客与骇客''' | ||
*Works with register_globals on or off (off highly recommended) <sup>[*2]</sup>. | *Works with register_globals on or off (off highly recommended) <sup>[*2]</sup>. | ||
| Line 91: | Line 91: | ||
''' | '''页面与文件访问''' | ||
*Pages and contents are protected by centralized entry code to check permissions (granted on groups or users for each functional module) <sup>[*4]</sup> <sup>[*10]</sup>. | *Pages and contents are protected by centralized entry code to check permissions (granted on groups or users for each functional module) <sup>[*4]</sup> <sup>[*10]</sup>. | ||
| Line 98: | Line 98: | ||
''' | '''登录保护''' | ||
*Delay anti brute force cracking on login page <sup>[*7]</sup>. Currently this delay is fixed (May be exponential with tries in a future version). | *Delay anti brute force cracking on login page <sup>[*7]</sup>. Currently this delay is fixed (May be exponential with tries in a future version). | ||
| Line 110: | Line 110: | ||
A list of fail2ban rules to add to your server is provided on chapter '''DOS and Brute force rate Mitigation''' later. | A list of fail2ban rules to add to your server is provided on chapter '''DOS and Brute force rate Mitigation''' later. | ||
''' | '''病毒''' | ||
*Possibility to run an external anti-virus on every uploaded files <sup>[*3]</sup>. | *Possibility to run an external anti-virus on every uploaded files <sup>[*3]</sup>. | ||
''' | '''安全信息中心''' | ||
*From version 14, you will find into menu Home - Admin tools - Security, a security information center that report you all recommandations done and to do related to your installation. | *From version 14, you will find into menu Home - Admin tools - Security, a security information center that report you all recommandations done and to do related to your installation. | ||
''' | '''用于安全性的 CTI''' | ||
A continuous integration platform run Security unit tests and static code analysis on each modification of code. | A continuous integration platform run Security unit tests and static code analysis on each modification of code. | ||
''' | '''每个版本的footprint''' | ||
Our release process bring each version with a footprint file (also available online) to validate all files of your local installation. | Our release process bring each version with a footprint file (also available online) to validate all files of your local installation. | ||