2
votes
2answers
124 views

Connecting to a port-knocking protected resource

Considering the excellent answers on the SF question "Preventing brute force attacks against SSH", I am considering configuring port knocking on a test server. I am debating how I will connect to this ...
2
votes
2answers
82 views

Are passwords sent via a bash script retrievable?

As part of running a backup script for a linux server, I have commands like mysqldump within a bash script which contain the mysql root password, and certain ftp server passwords. Are these ...
0
votes
3answers
387 views

How to set the ulimit (fd) when you fork a process?

Normally /etc/security/limits.h only work when you login into a shell. How about when you fork a process in Linux, where is the value of Max open files of /proc/PID/limits is controlled by?
0
votes
1answer
96 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...
1
vote
0answers
38 views

When a possible hacker logs into my server, how can I see what they're doing? [duplicate]

Possible Duplicate: Monitor an incoming SSH session in real time I have a CentOS VPS running lfd, and occasionally I see someone logging into my server from an unexpected location. I'm ...
3
votes
2answers
865 views

Test if an IP is being used in an internal network without using nmap

I can perform port scan using nmap to test if a given IP is being used, e.g. nmap -PR 192.168.1.9 However, nmap is not installed in most server, is it possible to have the same result (e.g. check ...
2
votes
1answer
1k views

Create restricted user on Debian server

I want to create a user account for each of the key programs installed on my debian server. For example, for the following programs: Tomcat Nginx Supervisor PostgreSQL This seems to be recommended ...
0
votes
2answers
411 views

Can I use an IP-list include file for iptable blacklisting?

I would like to block all countries except mine in iptables, that is a list with about 100.000 Entries. How can I define this blacklist file in a script, so iptables blocks all those IP ranges? ...
0
votes
1answer
147 views

Whats the best way to strip grave accents from bash scripts

I have a bash script which runs as root: #!/bin/bash /var/bin/svn_co -h $1 >> /var/log/svn/status.log If the following should somehow occur, I'm in trouble. /var/svn/hooks.d/post-commit -h ...
1
vote
1answer
227 views

Scripting postgres synchronization--is this secure?

I have written a script to synchronize (recreating from scratch) a production database with a development database, and I wanted insight into potential security flaws/issues, the script is posted ...
1
vote
2answers
691 views

Linux server “hacked”, trying to find out how it was done [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY About a week ago, a bot broke into one of our linux-servers and sent 70k spam-mails from it. I had a look into the logs and found ...
1
vote
2answers
861 views

CentOS: E-mail notification of failed ssh login attempts

Under CentOS, I need a script that will run every 10 minutes and e-mail me if there are any new failed ssh login attempts in /var/log/secure.
0
votes
2answers
1k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
3
votes
2answers
590 views

BASH Script as xinetd service

I have recently found out that a server I am working on has an xinetd service that is in fact a shell script that calls another shell script with arguments retrieved via respective network ...
19
votes
4answers
3k views

Ordinary users are able to read /etc/passwd, is this a security hole?

ls -l /etc/passwd gives $ ls -l /etc/passwd -rw-r--r-- 1 root root 1862 2011-06-15 21:59 /etc/passwd So an ordinary user can read the file. Is this a security hole?
1
vote
3answers
2k views

How do I prevent PHP from executing shell commands?

how to prevent apache from executing bash scripts?? That any php script can't execute command in bash (for example command that will add links to my php and html files). Is there a way to do that?? ...
5
votes
1answer
969 views

Should the 'nobody' user on my headless Ubuntu server have shell access?

I've read conflicting stuff on a few forums etc. regarding this. When I enter the following line: grep nobody /etc/passwd I get the following output ...
1
vote
4answers
944 views

Securing bash scripts

Does anybody know what is the best way to secure bash scripts. I have a script which creates database and source code backup and ftp it to other server. And login/password for destination ftp are ...
8
votes
1answer
622 views

Is it possible to hide a malicious alias in Bash on Linux?

Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?
21
votes
5answers
2k views

Avoid to keep command in history

I use bash and I would like to avoid some commands being kept in the history. Is it possible to do that for the next command only? Is it possible to do that for the entire session?