4
votes
2answers
46 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
1
vote
1answer
237 views

w command not showing users when not root

I have multiple users logged on my server (ubuntu 12.10), with ssh. None of them has root privileges. If I log in with my admin account and type w the resulting output is: 17:21:05 up 10 days, ...
0
votes
1answer
342 views

Prevent setuid from dropping setcap user privileges (VirtualBox)

I'm trying to run a web server from a headless, NAT'd VirtualBox guest. VirtualBox needs to bind to port 80, but the only way to do so is by running VirtualBox as root. To get around this, I tried ...
1
vote
2answers
903 views

Why can't I change the mode of /proc/sys/kernel/pty/max even when I am root?

Since pty is limited, I want to modify the content of /proc/sys/kernel/pty/max. The original value in max is 4096, and now I want to modify it to 10000. [root@home pty]# pwd /proc/sys/kernel/pty ...
2
votes
3answers
720 views

Why Remove Shell Access for the Apache/Nginx User?

Is it a bad idea to grant shell access to the user account destined to be running Apache/Nginx? I ask because, the Guvnr, in his VPS Bible series, sets up a new user with visudo'd guvnr ALL=(ALL) ...
5
votes
1answer
237 views

Ports below 1024

DISCLAIMER: I know how to run daemons that either listen on ports <1024 by using privbind or some iptables REDIRECT. Or more generally spoken, how to make daemons available on priviliged ports that ...
1
vote
2answers
326 views

Restrict privileges for ssh user login to php script

I'm needing to work out a way of restricting a user (ssh login on ubuntu 10.04) to only be allowed to do the following: Upload txt files only (through SCP or SFTP) Execute the php command "php ...
1
vote
1answer
865 views

how do i duplicate the nobody user?

how do i duplicate the nobody user? i have a couple of webprojects and need to chown the diffrent projects to diffrent users with absolutly no privileges i currently use nobody on a project. works ...
0
votes
1answer
169 views

User's privilegies (Mysql, Nginx, Php-fpm)

got questions of unsuccessful searches 1 - Why almost every software should run with its own user, is so simple run everything with a single user, why no one do that ? 2 - Why can't I just set the ...
0
votes
3answers
1k views

Best practice to create an ftp administrator account on vsftpd

Background: My manager would like me to create an administration account for out FTP server. When logged in via ftp, it should instantly display all of the home directories of the users, and be able ...
1
vote
3answers
308 views

Change EUID of running process

On Linux how can I change EUID of running process from command line (provided I have root access)? Thanks
0
votes
2answers
366 views

Safe to run backup script as root? or other way to aproach privileges?

I'm writing a backup script in BASH on a linux machine (gentoo) The script will backup all folders in a certain directory. The folders will have varying privileges and belong to different users and ...
6
votes
3answers
3k views

How do I create a user with read only access over SSH to a limited subtree of folders?

I have a Debian server, and I want to give several users read only access to a subtree of folders on that server. Is there a way to do this without manually changing the rights of all files and ...