1,029 reputation
1043
bio website
location United States
age
visits member for 2 years, 8 months
seen Apr 12 at 20:49

Mar
24
awarded  Notable Question
Mar
20
answered When does the Group Policy update interval start?
Mar
20
comment Linux utility to monitor for stupid / likely ill-advised commands
Yes, that was kind of what I was getting at. I know that many folks on here have no need for something that is going to offer them unnecessary advice, but for new bash users, Linux can be intimidating. They often do not realize that the training wheels are completely off. One thing I am wondering is how you would actually parse every command without modifying bash itself, but I am probably demonstrating my Linux ignornance
Mar
20
comment Linux utility to monitor for stupid / likely ill-advised commands
I know SELinux is well suited to the task in some respects, but it is a) incompatible with a bunch of software (Oracle, I believe) b) really intimidating for new or inexperienced admins, c) annoying.
Mar
20
comment Linux utility to monitor for stupid / likely ill-advised commands
I have to admit, one of my motivations for asking was a colleague I knew briefly who had inadvertently dropped an entire Oracle database and then tried to hide that he had done so by deleting the log files. He didn't realize at the time that we had monitoring and that the log files were not just in one place. It turned out that he thought he was working on a dev database and messed up - it ended up being fine, but it would have been nice to know that someone was doing a drop tablespace including contents and datafiles on a production db server.
Mar
20
accepted Autodiscover configures clients for IMAP
Mar
20
answered Autodiscover configures clients for IMAP
Mar
20
accepted Do I need a “smart switch” for VLAN support / VLAN for Multi-WAN?
Mar
20
comment Linux utility to monitor for stupid / likely ill-advised commands
@RobM, the validation would not modify any command - it would just run up against a dictionary of known potential issues and solutions, and kindly suggest to the admin not to go through with it. As far as bugs in the validation, applying regex should be fairly straightforward and there are many proven tools. I see what you are saying about over-reliance, but the same rules still apply - if you were really concerned about it, you could email all of the instances where it threw a concern to a superior so that he could see what's going on. I'm just a bit surprised this doesn't already exist...
Mar
20
comment Linux utility to monitor for stupid / likely ill-advised commands
Wouldn't you agree though that the probability that anybody - regardless of skill level - would have intended to use such commands is pretty low? And since it's only interactive sessions (ie relatively few commands, not bash scripts or whatnot), what would be the harm in just running it by some regex validation? If you're logged in as root, chmod 755 etc and chmod 755 /etc are a paltry character away, and it takes so little resources to check for these things...
Mar
20
revised Linux utility to monitor for stupid / likely ill-advised commands
edited body
Mar
20
asked Linux utility to monitor for stupid / likely ill-advised commands
Mar
20
accepted Implementing a form of port knocking + Phone Factor = 2 Factor auth for RDP?
Mar
20
comment pfsense: all interfaces up, but all non default gateways down
The "network view" thing makes a lot more sense to me heuristically - thanks for the info.
Mar
20
comment pfsense: all interfaces up, but all non default gateways down
@ChrisS, meaning is all traffic still just going to the default gateway, and then the floating firewall rule is applied there to forward along to another interface? ... and can you think of any reason why I was able to ping 8.8.8.8 despite the fact that the rule was being applied?
Mar
20
accepted pfsense: all interfaces up, but all non default gateways down
Mar
20
answered pfsense: all interfaces up, but all non default gateways down
Mar
20
comment Using DHCP with Multi-Homed NICs
I have read that this may impact the use of high availability features in VMWare, but I can't remember why that was the case. Maybe I am confusing the issue with something else.
Mar
17
asked pfsense: all interfaces up, but all non default gateways down
Mar
15
awarded  Popular Question