Linked Questions

39
votes
10answers
6k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
36
votes
6answers
10k views

Hardware Firewall Vs. Software Firewall (IP Tables, RHEL)

My hosting company says IPTables is useless and doesn't provide any protection. Is this a lie? TL;DR I have two, co-located servers. Yesterday my DC company contacted me to tell me that because I'm ...
6
votes
6answers
6k views

In Linux/Debian, did the passwords (/etc/passwd) ever been stored as plain text?

Someone is telling me so and I have some doubt but I can't find any information on the web.
6
votes
1answer
687 views

SEO Consultant Wants System Credentials

An SEO consultant has asked (demanded) credentials to the web environment so he can do ... Whatever it is that they do. I'm new to the company but an experienced Systems Engineer. I've just now been ...
3
votes
1answer
1k views

Ubuntu PCI-DSS Compliance Issue

I'm trying to get PCI compliant and the PCI scanning company is flagging our Ubuntu 12.04 PHP 5.3.10-1ubuntu3.9 for CVE-2013-1635. According to http://people.canonical.com/~ubuntu-security/cve/2013/...
2
votes
3answers
3k views

decrypting AES files in an apache module?

I have a client with a security policy compliance requirement to encrypt certain files on disk. The obvious way to do this is with Device-mapper and an AES crypto module However the current system ...
2
votes
1answer
727 views

Why would a PCI scan fail because of components that are not even installed?

Recently a PCI scan was run against a web server and the result was a failure. Some of the issues could be fixed, however others simply make no sense to me. The machine was a clean install, there are ...
0
votes
1answer
55 views

Need help choosing a router and/or wireless AP for a 15-40 person office? [closed]

I've been tasked with improving the wireless network at my office / co-working space. I'm not particularly experienced with business network infrastructure, but I'm more experienced than probably all ...
3
votes
1answer
55 views

Please clarify for me how tcpwrappers works

We've recently gone through a security audit and among several valid and other, quite pointless findings is one that states that tcpwrappers is not disabled. I've never used tcpwrappers so I don't ...
-3
votes
2answers
79 views

What can root read that a regular user cannot?

A contractor is asking me to provide him with root access from day one. Skipping the obvious "no-no"... as he's arguing that in order to do a full review of the system and identifying SPOF/etc, he ...