6
votes
1answer
97 views

RHEL6 Keeping 1 old kernel and security

I have my RHEL 5&6 servers set to keep 1 old kernel after updates, I do this in case I need to recover the system for any number of reasons. My question is related to security of the system when ...
0
votes
1answer
28 views

In sysctl.conf settings, what is the difference between 'all' & 'default'?

In context of sysctl.conf settings, what is the difference between (all vs. default) like net.ipv4.conf.all.accept_source_route & net.ipv4.conf.default.accept_source_route in sysctl settings ? ...
0
votes
1answer
105 views

Modifications to sysctl.conf in openVZ container, do they even take effect?

I'm following a security guide(http://www.thefanclub.co.za/how-to/how-secure-ubuntu-1204-lts-server-part-1-basics) to strengthen my OpenVZ based VPS webserver running Ubuntu 12.04 , a part of that ...
0
votes
1answer
52 views

How to update/maintain a patched kernel?

If I patch my linux kernel with grsecurity, will I still be able to update my system with yum (or apt-get)? Won't the updates available via yum be incompatible with my patched "non standard" version ...
3
votes
2answers
314 views

“Never take kernel updates” — Any truth to this?

So I am having a discussion with a coworker today, and he let something out that I thought was bizarre, as I'm getting ready to apply security updates to one of our production servers. "You should ...
7
votes
2answers
488 views

/dev/shm & /proc hardening

I've seen mention of securing /dev/shm and /proc and I was wondering how you do that and what it consists of doing? I assume this involves /etc/sysctl.conf editing of some kind right. Like these? ...
1
vote
1answer
131 views

ip_conntrack ideal or not for server stability

By default the module ip_conntrack is installed into the kernel. My question is simple, is having ip_conntrack a performance booster for better tracking of connections? On VPS nodes they do not have ...
2
votes
1answer
114 views

Do I need to manually administer EC2 kernel updates?

I run some Ubuntu Server instances on EC2, and I always install the latest apt security updates. It only just occurred to me that AMIs have a fixed AKI (kernel ID) / that Amazon only has a certain ...
1
vote
3answers
445 views

Suspicious temp directories on CentOS 5.5

I just noticed a weird directories stored on both in /tmp within two of my CentOS boxes. On one machine the temp directory is called /tmp/www4-679109 while on my second machine the temp directory is ...
2
votes
3answers
268 views

Do you need to update or patch the kernel for security

I used to use ASL for my server protection. This is an overall security suite for your server. One of the things it did is update or patch the kernel. I do not use it anymore, should I manually ...
2
votes
2answers
776 views

Can I disable Pam Loginuid? Can I find out options used to configure kernel?

I am getting a lot of the following types of error in my secure log on a CentOS 5.4 server: crond[10445]: pam_loginuid(crond:session): set_loginuid failed opening loginuid sshd[10473]: ...
0
votes
1answer
798 views

Slackware and SELinux

I would like to learn and play with SELinux on Slackware, my distro of choice. The kernel already includes SELinux code, so that is not a problem. Slackware does not ship with PAM, and I would prefer ...