3
votes
2answers
1k views

Is there a way to disable the ptrace system call on RHEL5 Linux?

Is there any wat to disable the ptrace system call on RHEL5?
3
votes
3answers
3k views

How to chroot Apache on CentOS?

I have been advised by a sysadmin, to run Apache in a chroot jail, in order to prevent that an attacker could take control of server. So my question is: What is the best method to chroot ...
5
votes
3answers
8k views

The difference between /etc/pam.d/login and /etc/pam.d/system-auth?

I want to configure securetty to limit root directly access. Now I am clear if I add: auth required pam_securetty.so into /etc/pam.d/system-auth, and keep only "console" in ...
1
vote
1answer
944 views

rhel configure: limit root direct login to systems except through system consoles

I have to configure to limit root direct access except system consoles. That is, the ways of telnet, ftp, SSH are all prohibited. Root can only login through console. I understand that will require me ...
1
vote
2answers
191 views

In RHEL5, How to authorize common user to use command such as userdel and useradd

I want to authorize to common user to be administrators. So that those authorized users can create accounts, delete accounts, modify password, modify password rules. I know su could help, I wonder if ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
125 views

How to configure to require user to change password after create/reset in RHEL 5

I have to configure system RHEL5 to ensure the security. One requirement is: When a password is first created or reset by an administrator authorized to do so, system(RHEL 5) shall require ...
2
votes
3answers
664 views

Exploratory Question for Security Admins (/etc/passwd + PHP)

I've been seeing a few issues lately on a few of my servers where an account gets hacked via outdated scripts, and the hacker uploads a cPanel / FTP Brute forcing PHP script inside the account. The ...
1
vote
3answers
169 views

Giving supplier root access to server, and logging it?

One of our suppliers needs to debug a problem with an application by logging remotely into one of our servers. They'll need to have root access, which I plan to provide via ssh and sudo. I generally ...