New answers tagged

1

The script itself would not help in figuring out the attack vector. You might gain a general idea by identifying the script location and user it was ran as. If it was root, it won't help either. So yeah, the important part here is that from now on your server will remain compromised no matter what you do. I assume you have deleted the malicious cron job ...


0

Normal server ops (exception: using php as an apache module) file permissions are set to 644 and the files are owned by you. Most servers now run php-as-cgi or an equivalent and use some version of 'su' to allow the httpd process to run properly without ownership and thus permission issues. Actual problem: there are hard-coded file-system permissions in a ...


0

I believe you should add the Subsystem sftp internal-sftp to /etc/ssh/sshd_config (and not to /etc/ssh/ssh_config)


0

This is an old question, but the answer can be useful to other... One common cause of "sudden" MySQL/MariaDB crashes is the kernel OOM killer - basically, if the machine is short on RAM, the kernel kill the most RAM-consuming process. The kernel OOM killer is partially configurable, so one should be able to "protect" an important process. However, the real ...


0

I had a similar problem with a CentOS instance. This AWS support article gives quite a good overview. Here's how I and managed to solve my problem: Shut down the original EC2 instance and then detach the /dev/sda1 disk Start a new, temporary EC2 instance, and attach the disk as /dev/sdp to the new EC2 instance SSH into the new EC2 instance and mount /dev/...


1

NFS write access is a bit tricky at the first time :-) 1: Please check if your user and group webadmin has the same user ID and group ID as on the webservers. NFS access is based on the IDs. In a multi-user setting the first thing most admins do is somehow synchronize user ids to user names and group ids to group names over the machines. E.g. with NIS, LDAP ...


0

They told me i need to use static configuration and it worked (after restarting network / rebooting). (Note that the IPs under that link are likely specific only to a Hetzner servers) Adjusting the configuration files was very difficult via Hetzner console (which does not accept Ctrl key, | > $ " ' etc.). These were the commands i had to run (will almost ...


Top 50 recent answers are included