[CentOS] server is always getting hacked
Stephen Harris
lists at spuddy.orgWed Jul 1 23:52:30 UTC 2009
- Previous message: [CentOS] server is always getting hacked
- Next message: [CentOS] server is always getting hacked
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Wed, Jul 01, 2009 at 04:59:36PM -0600, Warren Young wrote: > Frank Cox wrote: > > Gary Greene wrote: > > > >> . With sudo, > >> you get a record of what command was executed with superuser rights by whom > >> at whenever given hour. > > > > sudo bash > > If that's a problem for you, don't let people run bash via sudo. > There's an entire body of articles and such on which processes to > restrict because they can give you a sub-shell. Configuring sudo properly is a bit of a science; for example you don't allow "sudo less" because inside less you can shell out. Oops. It's amazing how many commands actually allow shell escapes. What you should do is only allow a minimal set of commands. -- rgds Stephen
- Previous message: [CentOS] server is always getting hacked
- Next message: [CentOS] server is always getting hacked
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list