The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
1answer
280 views

Myth or reality: SELinux can confine the root user?

I read or heard somewhere (maybe in LinuxCBT's SELinux course; but I'm not sure) that there are online Linux servers, for which the password of the root user is also given. The Linux server is ...
3
votes
1answer
81 views

How do I remedy SELinux not allowing legit programs in use access to my system?

I have a system where some programs are getting access denied in SELinux when performing their duties. These programs are ClamAV, fail2ban and Logwatch. I think I've managed to allow all the access ...
2
votes
1answer
19 views

what does Xserver access control mean

What meaning does Xserver access control have, when the Xserver is started with tcp disabled: /usr/bin/X11/X -nolisten tcp AFAIU, Xserver can be used to allow remote network connection. But, if it ...
1
vote
1answer
48 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
0
votes
1answer
153 views

Grant FTP access to specific directory

I have setup CentOS on a box on my local network and installed httpd, PHP, Webmin (and UserMin) etc. I opted for ProFTPd and have opened up ports for FTP, Webmin and Apache. I can now access Webmin ...
2
votes
0answers
69 views

Easiest way to sandbox an user

I'd like to sandbox a user so that they can only read files under /media/shared/somefolder. What's the easiest way to accomplish this? Users/groups? ACL? AppArmor? Some context: Plex Media Server is ...
2
votes
0answers
46 views

Set list of applications allowed for execution by unprivileged user

I am working on a project of security enforced Linux-based system (kernel 2.6.32 + Gnome 2 + Centos package base mostly). We need to implement the restriction of execution of unallowed executables. ...
2
votes
0answers
87 views

CUPS and printer security

I would like some help on securing a networked printer. Specifically, I'm interested in the following: 1) Preventing unauthorized access to the printer: I would like only certain laptops that connect ...
1
vote
0answers
15 views

What forms of discretionary access control are there?

I know it's kind of an unguided question, but just so I have a broader sense of how things are I was interested in getting a reasonably complete list of discretionary access controls available on Unix ...
0
votes
0answers
24 views

Permisison/Ownership issue with secondary FTP account

I have Centos 6.5 final. I have chroot setup and working properly and I also installed vsftpd. I now need to create a new user named extDeveloper and give this user access to a specific account. I ...
0
votes
0answers
105 views

How do i block USB devices based on device class in Linux

Problem Statement In windows server to provide access to USB devices are managed by GFI EndpointSecurity. Is there any open source tool in Linux which can do the same job. I want to block USB ...