0
votes
1answer
35 views

“File not found” from bash script executed by Apache (CentOS)

I have a bash script that sets up a classpath for accessing a series of JARs (it's tf, the cross-platform, command line tool for Team Foundation Server). The file structure is something like: ...
5
votes
1answer
2k views

Why are some CentOS 5 boxes still vulnerable to ShellShock after upgrading Bash?

I have two CentOS 5.10 boxen where I have upgraded bash to the latest version. However, in one of the boxes, bash is still vulnerable to CVE-2014-7169 (I am using the test from this ServerFault ...
11
votes
2answers
3k views

How does the updated Shellshock vulnerability test for CVE-2014-7169 work?

I understand the original test for CVE-2014-6271, which was: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" But I'm confused by the updated test and corresponding output for ...
68
votes
6answers
41k views

How to test if my server is vulnerable to the ShellShock bug?

How can I ensure my Bash installation is not vulnerable to the ShellShock bug anymore after the updates?
-2
votes
1answer
100 views

Is the Datadog install script safe to run? [closed]

I have a production server (CentOS 6, Apache, Nginx, MySQL, PHP, wordpress). I want to see some metrics (e.g., load bandwidth, RAM, CPU and so on). I chose a Datadog for this task. The instructions ...
2
votes
2answers
150 views

Connecting to a port-knocking protected resource

Considering the excellent answers on the SF question "Preventing brute force attacks against SSH", I am considering configuring port knocking on a test server. I am debating how I will connect to this ...
2
votes
2answers
87 views

Are passwords sent via a bash script retrievable?

As part of running a backup script for a linux server, I have commands like mysqldump within a bash script which contain the mysql root password, and certain ftp server passwords. Are these ...
0
votes
3answers
476 views

How to set the ulimit (fd) when you fork a process?

Normally /etc/security/limits.h only work when you login into a shell. How about when you fork a process in Linux, where is the value of Max open files of /proc/PID/limits is controlled by?
0
votes
1answer
102 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...
1
vote
0answers
41 views

When a possible hacker logs into my server, how can I see what they're doing? [duplicate]

Possible Duplicate: Monitor an incoming SSH session in real time I have a CentOS VPS running lfd, and occasionally I see someone logging into my server from an unexpected location. I'm ...
3
votes
2answers
1k views

Test if an IP is being used in an internal network without using nmap

I can perform port scan using nmap to test if a given IP is being used, e.g. nmap -PR 192.168.1.9 However, nmap is not installed in most server, is it possible to have the same result (e.g. check ...
3
votes
1answer
2k views

Create restricted user on Debian server

I want to create a user account for each of the key programs installed on my debian server. For example, for the following programs: Tomcat Nginx Supervisor PostgreSQL This seems to be recommended ...
0
votes
2answers
469 views

Can I use an IP-list include file for iptable blacklisting?

I would like to block all countries except mine in iptables, that is a list with about 100.000 Entries. How can I define this blacklist file in a script, so iptables blocks all those IP ranges? ...
0
votes
1answer
158 views

Whats the best way to strip grave accents from bash scripts

I have a bash script which runs as root: #!/bin/bash /var/bin/svn_co -h $1 >> /var/log/svn/status.log If the following should somehow occur, I'm in trouble. /var/svn/hooks.d/post-commit -h ...
1
vote
1answer
247 views

Scripting postgres synchronization--is this secure?

I have written a script to synchronize (recreating from scratch) a production database with a development database, and I wanted insight into potential security flaws/issues, the script is posted ...
2
votes
2answers
858 views

Linux server “hacked”, trying to find out how it was done [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY About a week ago, a bot broke into one of our linux-servers and sent 70k spam-mails from it. I had a look into the logs and found ...
1
vote
2answers
1k views

CentOS: E-mail notification of failed ssh login attempts

Under CentOS, I need a script that will run every 10 minutes and e-mail me if there are any new failed ssh login attempts in /var/log/secure.
0
votes
2answers
2k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
3
votes
2answers
616 views

BASH Script as xinetd service

I have recently found out that a server I am working on has an xinetd service that is in fact a shell script that calls another shell script with arguments retrieved via respective network ...
19
votes
4answers
3k views

Ordinary users are able to read /etc/passwd, is this a security hole?

ls -l /etc/passwd gives $ ls -l /etc/passwd -rw-r--r-- 1 root root 1862 2011-06-15 21:59 /etc/passwd So an ordinary user can read the file. Is this a security hole?
1
vote
3answers
2k views

How do I prevent PHP from executing shell commands?

how to prevent apache from executing bash scripts?? That any php script can't execute command in bash (for example command that will add links to my php and html files). Is there a way to do that?? ...
5
votes
1answer
1k views

Should the 'nobody' user on my headless Ubuntu server have shell access?

I've read conflicting stuff on a few forums etc. regarding this. When I enter the following line: grep nobody /etc/passwd I get the following output ...
1
vote
4answers
976 views

Securing bash scripts

Does anybody know what is the best way to secure bash scripts. I have a script which creates database and source code backup and ftp it to other server. And login/password for destination ftp are ...
9
votes
1answer
645 views

Is it possible to hide a malicious alias in Bash on Linux?

Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?
22
votes
5answers
2k views

Avoid to keep command in history

I use bash and I would like to avoid some commands being kept in the history. Is it possible to do that for the next command only? Is it possible to do that for the entire session?