path: root/shandbook/gettext/ru/shb-kernel.xml.po

msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2010-10-22 00:56+0600\n"
"PO-Revision-Date: 2010-10-22 00:56+0600\n"
"Last-Translator: Automatically generated\n"
"Language-Team: none\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Language: ru\n"
"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(version):10
msgid "1.2"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(date):11
msgid "2008-04-15"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(title):14
msgid "Removing functionality"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):17
msgid ""
"The basic rule when configuring the kernel is to remove everything that you "
"do not need. This will not only create a small kernel but also remove the "
"vulnerabilities that may lie inside drivers and other features."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):23
msgid ""
"Also consider turning off loadable module support. Even though it is "
"possible to add root kits without this features, it does make it harder for "
"normal attackers to install root kits via kernel modules."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(title):32
msgid "The proc filesystem"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):35
msgid ""
"Many kernel parameters can be altered through the <path>/proc</path> file "
"system or by using <c>sysctl</c>."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):40
msgid ""
"To dynamically change kernel parameters and variables on the fly, you need "
"<c>CONFIG_SYSCTL</c> defined in your kernel. This is on by default in a "
"standard 2.4 kernel."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):46
msgid "Deactivate IP forwarding"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):46
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"0\" &gt; /proc/sys/net/ipv4/ip_forward</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):50
msgid ""
"Make sure that IP forwarding is turned off. We only want this for a multi-"
"homed host. It's advised to set or unset this flag before all other flags "
"since it enabled/disables other flags as well."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):56
msgid "Drop ping packets"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):56
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"1\" &gt; /proc/sys/net/ipv4/icmp_echo_ignore_all</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):60
msgid ""
"This will cause the kernel to simply ignore all ping messages (also known as "
"ICMP type 0 messages). The reason for this is that an IP packet carrying an "
"ICMP message can contain a payload with information other than you think. "
"Administrators use ping as a diagnostic tool and often complain if it is "
"disabled, but there is no reason for an outsider to be able to ping. "
"However, since it sometimes can be handy for insiders to be able to ping, "
"you can disable ICMP type 0 messages in the firewall (allowing local "
"administrators to continue to use this tool)."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):71
msgid "Ignore broadcast pings"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):71
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"1\" &gt; /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):75
msgid ""
"This disables response to ICMP broadcasts and will prevent Smurf attacks. "
"The Smurf attack works by sending an ICMP type 0 (ping) message to the "
"broadcast address of a network. Typically the attacker will use a spoofed "
"source address. All the computers on the network will respond to the ping "
"message and thereby flood the host at the spoofed source address."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):83
msgid "Disable source routed packets"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):83
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"0\" &gt; /proc/sys/net/ipv4/conf/all/accept_source_route</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):87
msgid ""
"Do not accept source routed packets. Attackers can use source routing to "
"generate traffic pretending to originate from inside your network, but that "
"is actually routed back along the path from which it came, so attackers can "
"compromise your network. Source routing is rarely used for legitimate "
"purposes, so it is safe to disable it."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):95
msgid "Disable redirect acceptance"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):95
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"0\" &gt; /proc/sys/net/ipv4/conf/all/accept_redirects</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):99
msgid ""
"Do not accept ICMP redirect packets. ICMP redirects can be used to alter "
"your routing tables, possibly to a malicious end."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):104
msgid "Protect against bad error messages"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):104
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"1\" &gt; /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):108
msgid "Enable protection against bogus error message responses."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):112
msgid "Enable reverse path filtering"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):112
#, no-wrap
msgid ""
"\n"
"# <i>for i in /proc/sys/net/ipv4/conf/*; do\n"
"        /bin/echo \"1\" &gt; $i/rp_filter\n"
"done</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):118
msgid ""
"Turn on reverse path filtering. This helps make sure that packets use "
"legitimate source addresses by automatically rejecting incoming packets if "
"the routing table entry for their source address does not match the network "
"interface they are arriving on. This has security advantages because it "
"prevents IP spoofing. We need to enable it for each <path>net/ipv4/conf/*</"
"path> otherwise source validation isn't fully functional."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(warn):127
msgid ""
"However turning on reverse path filtering can be a problem if you use "
"asymmetric routing (packets from you to a host take a different path than "
"packets from that host to you) or if you operate a non-routing host which "
"has several IP addresses on different interfaces."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):134
msgid "Log all spoofed, source routed and redirect packets"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):134
#, no-wrap
msgid ""
"\n"
"# <i>/bin/echo \"1\" &gt; /proc/sys/net/ipv4/conf/all/log_martians</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):138
msgid "Log spoofed packets, source routed packets and redirect packets."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):142
msgid ""
"All these settings will be reset when the machine is rebooted. I suggest "
"that you add them to <path>/etc/sysctl.conf</path>, which is automatically "
"sourced by the <path>/etc/init.d/bootmisc</path> init script."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):148
msgid ""
"The syntax for <path>/etc/sysctl.conf</path> is pretty straightforward. "
"Strip off the <path>/proc/sys/</path> from the previously mentioned paths "
"and substitute <path>/</path> with <path>.</path>:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre:caption):154
msgid "Translating to sysctl.conf"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(pre):154
#, no-wrap
msgid ""
"\n"
"<comment>(Manual using echo):</comment>\n"
"/bin/echo \"0\" &gt; /proc/sys/net/ipv4/ip_forward\n"
"\n"
"<comment>(Automatic in sysctl.conf:)</comment>\n"
"net.ipv4.ip_forward = 0\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(title):165
msgid "Grsecurity"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):168
msgid ""
"The patch from <uri link=\"http://grsecurity.net\">Grsecurity</uri> is "
"standard in the <c>sys-kernel/hardened-sources</c> but is disabled by "
"default. Configure your kernel as you normally do and then configure the "
"Grsecurity options. An in-depth explanation on the available Grsecurity "
"options is available on the <uri link=\"/proj/en/hardened\">Gentoo Hardened</"
"uri> project page."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):176
msgid ""
"Recent <c>hardened-sources</c> provide the 2.* version of Grsecurity. For "
"more information on this improved Grsecurity patch set, please consult the "
"documentation available on the <uri link=\"http://www.grsecurity.net/"
"\">Grsecurity home page</uri>."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(title):186
msgid "Kerneli"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):189
msgid ""
"<uri link=\"http://www.Kerneli.org\">Kerneli</uri> is a patch that adds "
"encryption to the existing kernel. By patching your kernel you will get new "
"options such as cryptographic ciphers, digest algorithms and cryptographic "
"loop filters."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(warn):195
msgid ""
"The kerneli patch is currently not in a stable version for the latest "
"kernel, so be careful when using it."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(title):203
msgid "Other kernel patches"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri:link):207
msgid "http://www.openwall.com"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri):207
msgid "The OpenWall Project"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri:link):208
msgid "http://www.lids.org"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri):208
msgid "Linux Intrusion Detection System"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri:link):209
msgid "http://www.rsbac.org"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri):209
msgid "Rule Set Based Access Control"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri:link):211
msgid "http://www.nsa.gov/selinux"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri):211
msgid "NSA's security enhanced kernel"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri:link):213
msgid "http://sourceforge.net/projects/wolk/"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(uri):213
msgid "Wolk"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(p):216
msgid "And there are probably a lot more."
msgstr ""

#. Place here names of translator, one per line. Format should be NAME; ROLE; E-MAIL
#: ../../gentoo/xml/htdocs/doc/en/security//shb-kernel.xml(None):0
msgid "translator-credits"
msgstr ""