[TUHS] Off topic: Books on Unix security?

[TUHS] Off topic: Books on Unix security?

[Norman Wilson]

Aharon Robbins:

  So, before I just refer to them as "classics", can anyone recommend
  more recent books?  Feel free to answer in private.

===

`Unix security' is not the most-specific of terms.  Can
you give more context?

Norman Wilson
Toronto ON

[TUHS] Re: Off topic: Books on Unix security?

[arnold]

norman@oclsc.org (Norman Wilson) wrote:

> Aharon Robbins:
>
>   So, before I just refer to them as "classics", can anyone recommend
>   more recent books?  Feel free to answer in private.
>
> ===
>
> `Unix security' is not the most-specific of terms.  Can
> you give more context?
>
> Norman Wilson
> Toronto ON

Classic things like setuid programs, writing daemons, as well
as general secure coding practices for C and C++ in a *nix context.

Thanks,

Arnold

[TUHS] Off topic: Books on Unix security?

[Aharon Robbins]

Hi All.

In a book I'm updating, I have the following references for
Unix security.

1. Practical UNIX & Internet Security, 3rd edition, by Simson Garfinkel,
Gene Spafford, and Alan Schwartz, O’Reilly & Associates, Sebastopol,
CA, USA, 2003. ISBN-10: 0-596-00323-4, ISBN-13: 978-0596003234.

2. Building Secure Software: How to Avoid Security Problems the Right Way,
by John Viega and Gary McGraw. Addison-Wesley, Reading, Massachusetts,
USA, 2001. ISBN- 10: 0-201-72152-X, ISBN-13: 978-0201721522.

3. “Setuid Demystified,” by Hao Chen, David Wagner, and Drew
Dean. Proceedings of the 11th USENIX Security Symposium, August 5–9,
2002. http://www.cs.berkeley.  edu/~daw/papers/setuid-usenix02.pdf.

One of my reviewers asked if these weren't "dusty references".
So, before I just refer to them as "classics", can anyone recommend
more recent books?  Feel free to answer in private.

Thanks,

Arnold