Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
0answers
7 views

Setting up muli-project web development server

I'm trying to set up a development server that will be used for several (web) projects by different teams (consisting of different people, some of which may be involved with more than one project). I ...
1
vote
0answers
16 views

Restricting the network access of Docker container

I'm in the process of creating an SFTP only Docker container, one that will be used by multiple people for the sole purpose of uploading and managing files in their own Chrooted Environment. On ...
0
votes
0answers
12 views

How do you stop tomcat after changing the shutdown word in server.xml?

Running tomcat-7.0.33 on CentOS. I have a security requirement to change the tomcat shutdown word in server.xml to a random string of characters, so I need to go from this: <Server port="8005" ...
1
vote
1answer
12 views

Microsoft Windows .NET/Visual Studio SDKs installed on production server

We have a variety of SDKs installed on a production Microsoft Windows 2003 SP2 server and I'd like to know if there is any good reason for them to be there, or if they represent a security risk. ...
1
vote
0answers
32 views

Hardening Windows Server 2012 r2 for production [on hold]

We have some Windows Server 2012 R2 boxes which will be going into production in the next few weeks. Our security guy is telling us to harden the boxes before we do. I am just wondering what people ...
0
votes
0answers
39 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
0
votes
0answers
24 views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
0
votes
0answers
7 views

Java JCE Files Safe from Package Manager

My Java application requires JCE. I followed the typical installation method and copied the JCE files over those provided by my package manager (apt-get, Ubuntu 14.04). I recently ran general software ...
2
votes
1answer
124 views

sudo still ask for password when NOPASSWD is used

I read all sudo posts on serverfault, but I still cannot figure out what I'm doing wrong. Normally I finally find the solution but not this time : I want apache user to be able to execute this ...
3
votes
2answers
89 views

Use of rpm and yum for application installation in large installation environment

Our very large organization has developed a standard for hosting of applications which dictates that the application and all components on which it relies must reside in a dedicated application volume ...
-1
votes
0answers
25 views

Installing multi-domain SSL certificate on Linux [closed]

I have purchased a multi-domain ssl certificate, and have successfully installed it on my AWS load balancer I want to install it on my local linux development environment, but can't find much ...
1
vote
0answers
43 views
+100

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
0
votes
3answers
67 views

locking up a linux box on a foreign network

I have an app that runs on a Linux server and is accessed via each user's web browser. My app contains proprietary code that I need to keep secure. I want to install the app in a client's private ...
2
votes
1answer
17 views

auditctl - logging when a user logs out

Is it possible to log when a user logs out of a session on Linux using Auditctl? My current audit.rules relating to users are: -w /etc/login.defs -p xwa -k login -w /etc/securetty -p xwa -k login -w ...
-1
votes
0answers
13 views

/boot/.IpTables use high cpu in my server [duplicate]

i am newbie in network administrator.. One week ago, my server work perfectly. My Server can serves 600++ users at the same time and only use 40% cpu. Today there is something wrong with my server. ...
1
vote
0answers
27 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
0
votes
0answers
11 views

Wordpress wp-login permissions issue

I'm having this curious issue, wp-login change its permissions from time to time without any visible reason from 644 to 000. That produces a blank page error for user access, so I have to change file ...
0
votes
1answer
39 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
-12
votes
0answers
44 views

What is the latest cyber threats in network security in IT industry? [closed]

I would like to know the latest cyber threat in network security in wireless as well as router
0
votes
0answers
6 views

Samhain log monitoring rules

The Samhain system offers a log correlation facility, but I can't find any rule sets written for it, or any references to the correlation facility. Are there any Logmon rulesets I can use with my ...
0
votes
0answers
21 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
0
votes
1answer
24 views

How to secure private communication among Apache servers with SSL (sign IP only)

I have 2 Apache servers (with PHP): public server A which hosts web pages, it has domain name etc. public server B which hosts some services (built as PHP application) and those services are used ...
-1
votes
0answers
19 views

How to map the network drive using key based authentication?

Our server is currently being attacked using a dictionary based Brute Force attack. I am considering switching the server to only allowing public/private key authentication. However the server is also ...
-1
votes
1answer
24 views

Can I salvage a project from a compromised server? [duplicate]

Our server was compromised last week. The developer team I was working on hadn't been backing up our work or using GIT Hub, so everything that we've been working on is on the server. I know that we ...
3
votes
1answer
37 views

using /bin/bash in a chroot environment - symlink or mount

A user connects via ssh. The user is also chroot-ed to their home directory. The goal is security. Since the user is chroot-ed, when they login /bin/bash is not found. Obviously the user needs ...
0
votes
2answers
35 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
-7
votes
1answer
33 views

Put ZIP file on server for public [closed]

I was wondering if I can upload a ZIP file to my server and then make it public by sharing the link with others For example I was thinking about an URL like this: ...
6
votes
1answer
65 views

Restricted shell for managing files and git repositories

Think about a web hosting company that wants to let users manage files and git repositories via ssh. This includes: secure copy (scp) creating, copying, moving/renaming and deleting files executing ...
20
votes
7answers
2k views

Restrict a Linux user to the files he owns

Imagine a server setup of a shared webhosting company where multiple (~100) customers have shell access to a single server. A lot of web "software" recommends to chmod files 0777. I'm nervous about ...
4
votes
3answers
68 views

Will mailing lists “break” if SPF is too restrictive?

I have recently configured my own mail server (Linux-based postfix + dovecot scenario). This is just for personal use - I have no bulk mail going out, no automatically generated mail outbound from the ...
0
votes
0answers
21 views

How to config Squid SSL bump to let Paloalto PA series firewall recognize App-ID

A Paloalto firewall(PA-2050,POS 4.1x) was capable of recognizing the websites which users are visiting(thru http/https) then flag them with a App-ID and apply application control on the traffic, for ...
0
votes
0answers
11 views

IIS Security - prevent web script to navigate upper level

I would like to know how to prevent the web script to be able to navigate his upper level ? For instance, the web script is located at C:\Websites\Website-A and it shouldn't able to navigate to upper ...
6
votes
1answer
129 views

How to handle security updates within Docker containers?

When deploying applications onto servers, there is typically a separation between what the application bundles with itself and what it expects from the platform (operating system and installed ...
-1
votes
1answer
49 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
0
votes
1answer
16 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
-3
votes
1answer
48 views

Keeping your server safe [closed]

I have a typical vps server with some custom sites on it running on port 80, a mail server, I don't have a DNS server and it is a default ubuntu 12.04. I don't have any admin panel, I am doing all the ...
2
votes
1answer
26 views

Preventing SecAst access from across the network

I have SecAst up and running great, and I realize that any workstation on the network can access the SecAst telnet interface. Is there a way to limit this to only my laptop? I don't want one of the ...
1
vote
1answer
14 views

Obtain an offline image of an Xserve disk

We have an Intel Xserve with Mac OS X 10.4. It seems to have been infected by a virus. We want to obtain the disk image without booting into the OS. Preferably, we would want to boot via a USB disk ...
2
votes
1answer
32 views

Robocopy Ext USB HD to Server 2008

I tried copying data from an external usb drive to my W2008 server, g:\parent_directory d:\server_shared\parent_directory. Unfortunately, I picked the "copyall" paramenter which copies over D=Data, ...
1
vote
0answers
22 views

How to resolve security warning concerning WebAdministrationProvider?

I have a new Windows Server 2012 install, and have just installed IIS. I see the following warning in the Application Log: A provider, WebAdministrationProvider, has been registered in the ...
4
votes
3answers
81 views

ESXi hosted on public IP without firewall

So I've got an interesting problem. I currently rent a couple of servers from Hetzner (a German hosting provider). Each server has a soft firewall and does something like web hosting / database. I ...
0
votes
2answers
31 views

How to restrict access to root to daemon user?

I have Apache 2.4 with PHP 5.5.14 installed on latest Debian. According to Apache security tips&tricks I've set my httpd.conf to this: <Directory /> AllowOverride none Require all ...
1
vote
0answers
18 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
3
votes
1answer
118 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
1answer
52 views

Failed PCI DSS Compliance

I got this from my compliance check results. To me it looks like my router is responding to their test but I'm not sure where to go . ( might be off track completely though) Description: PCI DSS ...
0
votes
0answers
23 views

Restricted logins + almost all ports closed : secure? [migrated]

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
-1
votes
1answer
122 views

How to block incoming login attempts to postfix, pop3, imap?

We are running CentOS 6.5 with Plesk and have to send email but don't need to receive. I would like to block all incoming login attempts to postfix, pop3 and imap. I have found hints to iptables or ...
20
votes
2answers
1k views

Why should I start to replace Windows Server 2003?

Windows Server 2003 is a very good operating system from Microsoft, and we're relying on it on a daily basis. I have heard that I should replace it by something "newer" and more "modern". Why should ...
2
votes
3answers
48 views

is there a PAM module for DNSBL lookups?

I have been enumerating the remaining security concerns on one of my back-end production servers, when I came to the realization that something which could be incredibly useful was missing from my ...
1
vote
1answer
33 views

How does one achieve in Windows 7 a level of security comparable to setting a file's permissions to 0600 in Unix?

I want to store securely the file .pgpass, which contains the authentication credentials (including passwords) for client programs to be able to log in to PostgreSQL servers. The Pg documentation ...