Shulou(Shulou.com)06/01 Report--

1.5 Kali Linux Policy

As far as possible, Kali Linux strives to follow Debian's policy, but there are places where we make significantly different design choices due to the special needs of security professionals.

1.5.1 default order root user

Most Linux distributions clearly encourage the use of an unprivileged account to run the system and various utilities, using the sudo command when administrator privileges are required. This sounds like a safe suggestion to provide an additional layer of protection between the user and any command or operation that potentially destroys or destroys the operating system. This is especially true for multi-user systems. In this case, the separation of user rights is required-the wrong behavior of one user can disrupt or destroy the work of many other users.

In Kali Linux, because many tools can only be executed under root permissions, this is why root is used as the default account for Kali. Unlike other Linux distributions, you will not be prompted to create an unprivileged account when installing Kali. This special strategy is very different from most Linux systems, which can be very confusing for inexperienced users. Because most destructive errors occur when operating with root permissions, beginners should be very careful when using Kali.

1.5.2 disable network services by default

Compared to Debian,Kali Linux, any installed services, such as HTTP and SSH, that listen on public network cards are disabled by default.

The reason for this decision is to minimize the possibility of exposure during testing, because unexpected network interactions can declare your presence and increase the risk of being detected, which are disadvantageous.

Of course, with the systemctl enabvle service command, you can still manually enable the services you want. We will also talk about this in Chapter 5, "configuring Kali Linux."

1.5.3 Auxiliary application collection

The goal of Debian is to become a general-purpose operating system with no restrictions on what packages are available and each package has a maintainer.

In contrast, Kali Linux does not package every tool. Instead, our goal is to provide only the best freely licensed tools that cover most of the tasks that testers might want to perform.

Kali developers have promoted this choice as testers, and we have made a wise choice by taking full advantage of their experience and expertise. In some cases, it is a fact that there are other more difficult choices that simply boil down to personal preferences.

The following aspects are considered when evaluating a new application:

The usefulness of the application in the * test environment

Unique functionality of application features

LICENSE of the application

Resource requirements for the application

Maintaining the update and usefulness of the software repository of test tools is a challenging task. We welcome suggestions for tools in the column (new tool requirements) in the Kali Bug tracker. New tool requests are best received before submission, including explaining why this tool is useful, compared to other similar applications, and so on.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.