3
votes
0answers
115 views

Security Warning: Enable “Jail Apache” in the “Tweak Settings”? [closed]

I have VPS running WHM on CentOS 6.5 and I have root access. A security warning appearing in the Security Advisor. Warning: Enable “Jail Apache” in the “Tweak Settings” area. I entered the tweak ...
0
votes
1answer
39 views

Protect against inadvertent command entry

I have a couple boxes in production and then some in a test environment. Anyone have any clever ways to protect against typing in inadvertent commands into boxes? i.e. I want to put a confirmation ...
2
votes
2answers
83 views

Are passwords sent via a bash script retrievable?

As part of running a backup script for a linux server, I have commands like mysqldump within a bash script which contain the mysql root password, and certain ftp server passwords. Are these ...
4
votes
2answers
1k views

Disabling the shell of user “daemon” (/bin/false)

on a Linux system there are lot's of users by default: daemon, bin, sys, games, etc. According to my /etc/passwd most of these users have a shell assigned (/bin/sh) which seems some kind of insecure ...
2
votes
1answer
2k views

Create restricted user on Debian server

I want to create a user account for each of the key programs installed on my debian server. For example, for the following programs: Tomcat Nginx Supervisor PostgreSQL This seems to be recommended ...
0
votes
2answers
145 views

Logging shell command executed by all users on Linux server [duplicate]

Possible Duplicate: How to log every linux command to a logserver I want to log the commands executed by all users on the server. Is there any better way than using script command?
3
votes
1answer
158 views

running arbitrary, encrypted shell commands via http(s)?

I'd like to be able to encode maintenance scripts to run on-demand remotely. edit: Good use-case: webhooks. e.g. trigger CI + staging deployment whenever someone pushes code to github. If I was to ...
10
votes
3answers
260 views

piping a password and security

I sometimes do echo "secret" | mysql -u root -p .... Now I'm concerend about security here: can someone listing all processes see the password? To check I tried with echo "test" | sleep 1000 and the ...
0
votes
2answers
752 views

How to secure svn+ssh checkout users?

All our SVN repositories are hosted on a dedicated machine on which all the developers have access. Every now and then we need to checkout a repository on a machine we don't own or operate ourselves. ...
18
votes
2answers
2k views

nologin in /etc/shells is dangerous.. WHY?

I found this on the internet, while putting up a FTP server in FreeBSD. Putting nologin into /etc/shells potentially creates a back door by which those accounts can be used with FTP. (see: ...
3
votes
2answers
681 views

Linux (Ubuntu) environment variables, shells and security

I'm attempting to understand some concepts surrounding security and environment variables for a web application running under Apache on Ubuntu 10.04 Server. I have a few applications that I would ...
0
votes
1answer
133 views

Protect against silent1.pl Perl Script

I operate a small shared hosting area. While I notice that people are unable/struggle to exploit with PHP I have found a small minority of people using Perl in order to obtain server information. So, ...
3
votes
4answers
2k views

Can I disable interactive shell access while tunneling web traffic through SSH?

I am looking into implementing SSH tunneling as a cheap VPN solution for outside users to access Intranet-only facing web applications. I currently am using Ubuntu Server 10.04.1 64 bit with OpenSSH ...
2
votes
1answer
378 views

What is the EGG environment variable?

A user on our (openSuSE) linux systems attempted to run sudo, and triggered an alert. He has the environment variable EGG set - EGG=UH211åH1ÒH»ÿ/bin/shHÁSH211çH1ÀPWH211æ°;^O^Ej^A_j<X^O^EÉÃÿ ...
-2
votes
3answers
113 views

Making a shell server

I am planning to make a public shell server. What things should I modify to secure my server. Please tell me general things to check
10
votes
7answers
11k views

How to log every linux command to a logserver

I want every single command typed to go to a logserver. Already configured is the syslog-ng to send all logs to the logserver. I'm interested in any and all methods to do this. I would expect ...
0
votes
2answers
378 views

One-App SSH Logins using login shell?

I want to run an application on a Linux machine which will be accessed by most users using PuTTY. I want to start that app and, when it's done, I want it to end the SSH session. Is it ...
0
votes
4answers
547 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
-3
votes
1answer
1k views

PuTTY - Server Unexpectedly Closed Network Connection

I have two servers that I have been able to connect fine as s1.website.com and s2.website.com I connected to s1.website.com earlier today without any issues, however, when I connected to ...
6
votes
6answers
4k views

Monitor the shell activity of a user on your Unix system?

Trust, but verify. Let's say I want to hire someone a sysadmin, and give them root access to my Unix system. I want to disable X windows for them, only allow shell usage (through SSH, maybe), so that ...
1
vote
5answers
2k views

Adding current directory to path

Here is a question that I can't seem to find a good answer to. Under Windows/DOS we have been "taught" that it is ok for use to be able to launch programs from the current directory without having to ...
0
votes
2answers
251 views

ModSecurity Error Entries

Recently, I was passed some error logs to take a look into, since we'd had some network spikes recently. However, I've never worked with modsecurity (I'm a programmer just doing this since we don't ...
2
votes
7answers
8k views

How can I prevent explorer starting as a shell in a kiosk setting?

I'm using an alternative shell (a simple program that restarts a kiosk application if it dies) for a project I'm working on. I've set it via the Shell value in the registry, and I'm not using ...
14
votes
9answers
10k views

Live view of Linux shell commands executed by another user?

Is it possible for the root user in Linux to have a real-time (or close to real-time) view of the shell commands being run by another user logged in via a terminal or SSH? Obviously they're stored in ...