The tag has no wiki summary.

learn more… | top users | synonyms

7
votes
2answers
499 views

Myth or reality: SELinux can confine the root user?

I read or heard somewhere (maybe in LinuxCBT's SELinux course; but I'm not sure) that there are online Linux servers, for which the password of the root user is also given. The Linux server is ...
3
votes
1answer
137 views

How do I remedy SELinux not allowing legit programs in use access to my system?

I have a system where some programs are getting access denied in SELinux when performing their duties. These programs are ClamAV, fail2ban and Logwatch. I think I've managed to allow all the access ...
2
votes
1answer
48 views

what does Xserver access control mean

What meaning does Xserver access control have, when the Xserver is started with tcp disabled: /usr/bin/X11/X -nolisten tcp AFAIU, Xserver can be used to allow remote network connection. But, if it ...
1
vote
1answer
81 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
0
votes
1answer
47 views

UNIX Account management

Would like to know if there's some opensource solution aimed to manage and administer system authentication and RSA keys for staff, contractors and clients across the organization. My systems to ...
0
votes
1answer
32 views

Best solution for WebServer in Web developer's company

I'm looking for best solution about hosting web projects on linux server. My focus is on permissions and ACL's. Example We have 3 project and 3 developers , They have access to files via Samba Share ...
0
votes
1answer
916 views

Grant FTP access to specific directory

I have setup CentOS on a box on my local network and installed httpd, PHP, Webmin (and UserMin) etc. I opted for ProFTPd and have opened up ports for FTP, Webmin and Apache. I can now access Webmin ...
2
votes
0answers
103 views

Easiest way to sandbox an user

I'd like to sandbox a user so that they can only read files under /media/shared/somefolder. What's the easiest way to accomplish this? Users/groups? ACL? AppArmor? Some context: Plex Media Server is ...
2
votes
0answers
48 views

Set list of applications allowed for execution by unprivileged user

I am working on a project of security enforced Linux-based system (kernel 2.6.32 + Gnome 2 + Centos package base mostly). We need to implement the restriction of execution of unallowed executables. ...
1
vote
0answers
22 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
0
votes
0answers
42 views

Open serial port multiple times?

TL;DR: Can one application programmatically monitor COM port status of an already opened COM port, and how? I have a data communication from host HOST via ttyS0 (COM1) to another device CLIENT, so ...
0
votes
0answers
27 views

Permisison/Ownership issue with secondary FTP account

I have Centos 6.5 final. I have chroot setup and working properly and I also installed vsftpd. I now need to create a new user named extDeveloper and give this user access to a specific account. I ...
0
votes
0answers
145 views

How do i block USB devices based on device class in Linux

Problem Statement In windows server to provide access to USB devices are managed by GFI EndpointSecurity. Is there any open source tool in Linux which can do the same job. I want to block USB ...