Security is not a product, but a process.

learn more… | top users | synonyms (1)

2
votes
1answer
27 views

Git: expire ssh keys just like passwords expire?

I'm setting up git in a corporate environment. Git operations will be primarily though SSH using a single account with SSH keys used for access control. (http will be used for account configuration, ...
1
vote
1answer
17 views

Audit Logs for Environment Path Changes

Something (or someone) keeps changing our environment path variables on several of our servers. I have the Audit Policy (under local sec pol) set to Success, Failure for all but Process Tracking ...
1
vote
1answer
415 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
47
votes
8answers
4k views

Why would I need a firewall if my server is well configured?

I admin a handful of cloud-based (VPS) servers for the company I work for. The servers are minimal ubuntu installs that run bits of LAMP stacks / inbound data collection (rsync). The data is large ...
1
vote
1answer
15 views

Postfix sender acces restriction - Security breach?

We encounter security problems with our mail server and would like some advice. The story behind it On our mail server (Postfix 2.9.6 + Dovecot 2.1.7) we would like to be able to create restricted ...
1
vote
0answers
15 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
0
votes
0answers
21 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
14
votes
4answers
2k views

Wipe is very slow. Too little entropy?

I have to hand off a Laptop including its hard disc. Since it was not encrypted I wanted to wipe it at least quickly. I know this is not optimal on SSD, but I thought better than just plain readable. ...
1
vote
4answers
1k views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
7
votes
1answer
172 views

Managing IAM security credentials for multiple docker containers

Within plain EC2 environment, managing access to other AWS resources is fairly straightforward with IAM roles and credentials (automatically fetched from instance metadata). Even easier with ...
-4
votes
0answers
29 views

A hacker changed my hosting password [on hold]

Im developing my own website from a template i bought from HTML5UP, my web is still under constructon, but it is uploaded to my server for testing. First suspicios things happend just after i bought ...
0
votes
1answer
30 views

IPtables on Linux for mysql server private interface

Looking to make a mysql database server for web-servers. The server has a public & private interface and I need some assistance writing the rules. I want to only allow SSH, mysql via private ...
2
votes
1answer
47 views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
4
votes
2answers
16k views

How can I edit local security policy from a batch file?

I am trying to write a utility as a batch file that, among other things, adds a user to the "Deny logon locally" local security policy. This batch file will be used on hundreds of independent ...
0
votes
0answers
28 views

Weak points of ssh tunnel and x11 server, hack investigation

So, today I've been hacked. It's very puzzling to me how it was done, so I'm looking for experienced people to show weak points in design of my systems. I have two servers. One is VPS with ...
0
votes
1answer
35 views

How do i know if this logs are normal, and if somenone got into my server?

last month i was logging into my server as usual and was a mess: programs not working, /home not mounting anymore etc etc Now i've downloaded all the Ubuntu server logs and i've noticed that auth is ...
-3
votes
0answers
23 views

How can i view password protected drives on my hardisk? [on hold]

I am not able to see my second partition of harddisk which is password protected. Whenever i connect my harddisk it only shows a single drive instead of showing both.
2
votes
1answer
55 views

How to create a private network between a VPS and 4 IPs?

I own a VPS running Debian and i want to avoid security breaches from "outside" (via Internet). I want to guarantee these rules: Allow all outbound traffic; Allow HTTPS connections from IP 1, 2, 3; ...
6
votes
2answers
3k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
6
votes
3answers
3k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
2
votes
2answers
52 views

What kinds of security vulnerabilities does providing DNSSEC expose?

I was thinking about signing my DNS zone with DNSSEC. My zone, the registrar and my DNS server (BIND9) all support DNSSEC. The only one who doesn't support DNSSEC is my secondary nameserver provider ...
1
vote
1answer
1k views

403 forbidden error going through aws load balancer

I am running a IIS 7 Server behind an aws load balancer. I am using a Verisign SSL certificate which is installed properly but whenever I put in the URL, or the DNS name of the load balancer I get a ...
0
votes
0answers
37 views

How to evaluate security risks of a git server installation

I need to evaluate the security risks of code being hosted on a virtual machine in a git repository. Its an area relatively new to me as a programmer. I want to setup the git repos, but I have to ...
0
votes
1answer
16 views

Windows Server Blocking Web Service?

I have a program that uses a webservice that connects to a server to get software licenses. This is blocked in Windows Server 2003, 2008, 2008 R2, 2012, 2012 R2 by default. However, in Windows XP, ...
8
votes
3answers
5k views

Is the PHP option 'cgi.fix_pathinfo' really dangerous with Nginx + PHP-FPM?

There has been a lot of talking about a security issue relative to the cgi.fix_pathinfo PHP option used with Nginx (usually PHP-FPM, fast CGI). As a result, the default nginx configuration file used ...
3
votes
2answers
5k views

Plesk HTTPS setup and directory problems [closed]

We are trying to configure SSL for one of our domains hosted on a Red Hat server running Plesk. Plesk version: 9.5.2 Apache: 2.2.3 Redhat: 2.6.18-194.el5 We created a new SSL certificate entry ...
0
votes
0answers
18 views

SSHFS mount with sudo - how to restrict privileges?

I need to mount a remote server (server1) with an SSHFS mount on server2 via an automated script. I need to be able to access some files on server1 that require root access, but I don't want to enable ...
0
votes
1answer
1k views

Event 4625 Audit Failure NULL SID failed network logons

In 3 separate systems, the following event is being logged many times (between 30 to 4,000 times a day depending on the system) on the domain controller: An account failed to log on. Subject: ...
2
votes
3answers
5k views

Do I have to have an ssl certificate for my mail server?

Question is really simple. If I want to setup a mail server, do i have to have it or is it just a security issue? What kind of problems can it cause?
10
votes
14answers
39k views

How to securely join two networks together over the Internet?

Let's say there are two locations. Both locations have their own fast Internet connections. How do you join these two networks together such that every computer can see every other computer? Do you ...
1
vote
2answers
243 views

Copying data between AWS EC2 machines

There are times where, in order to do some debugging or perhaps a manual migration, I need to copy large chunks of data from one EC2 instance to another. When the size of the data is tiny, it's simple ...
-1
votes
1answer
16 views

Server Blocked by Provider Sending UDP Packages to certain IP - what does that mean?

My webserver got blocked by my provider recently for the reason that it was performing an attack to another server. The email contained the following log: 08:26:39.219940 68:05:ca:07:02:01 > ...
2
votes
0answers
215 views

selinux “Possible mismatch between this policy…”

How do I go about troubleshooting the following error below: type=AVC msg=audit(1365523330.609:4846): avc: denied { append } for pid=12542 comm="FTPMan.pl" name="user_list" dev=dm-0 ino=2884237 ...
19
votes
12answers
2k views

What language for starting on Linux? [closed]

I am about to begin a 4-year information security degree at Purdue. The degree does not call for any programming courses. So the only time I will be able to take one is the occasional elective. So ...
-1
votes
0answers
25 views

Why openssl isn't in Debian Backports? [closed]

I was looking for openssl 1.0.1 for Squeeze on the official debian packages site and figured out that this package never had been backported. Then my question is: why openssl (and very important ...
1
vote
0answers
17 views

Frequent SIGTERM Apache

I suspect sometims is going wrong in my webserver (maybe possible DoS attack). In fact I see a lot of such entries: [Sun Jul 19 10:36:21 2015] [error] [client 141.212.122.18] client sent HTTP/1.1 ...
0
votes
2answers
241 views

Proper way to isolate PHP applications when using Apache and mod_php

I am running some Wordpress blogs for friends/family on a linux box and I would like to prevent the compromise of one from being able to inflict damage to all. It hasn't happened yet, but one of the ...
3
votes
4answers
2k views

WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine

I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
0
votes
1answer
15 views

How to use Snort generate packet logs when in the NIDS mode?

I am using Snort act like a network IDS by implementing snort configuration file and snort rules, I also want to capture all the packets (traffic) going through the specific network interface. My ...
0
votes
2answers
40 views

S3 backup with versioning plus lifecycle management to prevent malicious deletion of backups?

I just want to run this idea by some smarter people to make sure I'm not overlooking something obvious: I want to backup my Linux server to S3 using one of the many backup scripts that allow ...
7
votes
1answer
592 views

Hardware requirements for 100 virtualized high performance Windows 7 desktops?

We are debating whether to add Client Hyper-V or VMWare Player Pro to new Windows 10 desktops later this year and have our developers run their developer tools in a Windows 7 VM on their local ...
0
votes
1answer
157 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
3
votes
2answers
3k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
0
votes
2answers
29 views

Exim - password disclosure by world-readable exim.conf - is that necessary?

I saw /etc/exim.conf is world-readable. The issue with this is to configure Exim to use an SMTP service like Sendgrid to route all outgoing email, you put your username and password into that file, ...
-1
votes
0answers
7 views

Default “connect automatically” to disabled for new wireless networks [migrated]

I'm using Gnome NetworkManager and I don't want my wireless attempting to connect automatically to any network. For an individual network to which you have already attempted to connect, this is easy ...
0
votes
1answer
32 views

OpenSCAP incorrectly reporting false for RHSA-2014:1306: bash security update (Important)

I'm using the following command to test for RHSA-2014:1306 on CentOS 5.9: oscap oval eval --id oval:com.redhat.rhsa:def:20141306 com.redhat.rhsa-all.xml The result is: Definition ...
-2
votes
0answers
10 views

Secure dcom in AWS

We have 2 servers calling each other's services using dcom. These servers are in a single VPC in AWS and pass sensitive data to each other via dcom. We are told all server communications need to be ...
1
vote
2answers
1k views

How to secure Apache for shared hosting environment? (chrooting, avoid symlinking…)

I'm having problems dealing with Apache configuration: the problem is that I want to limit each user to his own docroot (so, a chroot() would be what I'm looking for), but: Mod_chroot works only ...
-4
votes
3answers
1k views

Allow non-root process to listen on port 80 without doing anything drastic [duplicate]

For reasons beyond my comprehension, GlassFish refuses to play ball with iptables. That is, with all the correct redirection rules in place, it won't receive any redirected traffic. So I'm at plan B ...
1
vote
1answer
43 views

Are Elastic Beanstalk's environment variables an appropriate place to store secret values?

I have deployed my Django application to Elastic Beanstalk with the intention of using its environment variable configuration interface to store my API keys instead of storing them in my source (as ...