2
votes
1answer
387 views

What audit log files are created in linux to track a users activities?

One of the machines on our networks was consuming a large amount of Internet bandwidth. However no user was using the system. When I connected to the server using SSH and ran who it showed that a ...
1
vote
1answer
157 views

How to copy files as Jenkins “post build” action if i don't have privileges to destination directory

I have the following users "architecture" : root access is disabled. admin user have access only to its home directory. Apache runs as root service (root is the only one that have access to ...
-1
votes
1answer
52 views

How to Always make the ttyUSB0 none root access allowed?

Ubuntu 13.10 64-bit OS. I have a service running using Python serial the application running without root as username. But it has to access /dev/ttyUSB0 , so i need to do every time manually chmod -R ...
7
votes
3answers
412 views

Why is konsole reading /etc/passwd?

In relation to this question: While observing the behavior of fatrace, I notice something which concerns me. Here are the first few lines of output of the command "fatrace|grep konsole" ...
0
votes
1answer
143 views

Is it possible to make a standard user that can gain NO access to root?

I'm a very new beginner learning how to use Linux. I have very little experience so far in different distros. I've set Kali Linux as the OS on a remote PC. Users will be connecting to it via SSH and I ...
4
votes
3answers
173 views

restrict student account permissions, give faculty access

I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a ...
3
votes
1answer
91 views

New webserver: What all user accounts should I create and permissions to provide for

This is a followup on my question here. I am setting up the first webserver and am fumbling with what user accounts to create and permissions to provide for better security. Below is what I have. ...
4
votes
1answer
90 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
7
votes
2answers
213 views

With which user should I run web servers, redis & mongodb?

On this VPS there are three users: root, another_one, nobody. All webserver files, configs, &c. are owned by root. However, I'm in doubt for what regards running things. If I use root for the web ...
5
votes
2answers
430 views

Deleting users with nologin shell

On a security audit performed on our production Linux servers , we were asked to remove nobody user if no application are using it. I checked and could see that there are no files owned by 'nobody' ...
2
votes
3answers
402 views

I have installed Linux distribution. Do I need to set root account or the user account is enough?

I have these credentials that I am using for logging in with my Linux distribution (Ubuntu 13.04) when starting the computer: james myawesomepassword123 I type the password on the login screen and ...
4
votes
2answers
186 views

Understanding getlogin()

I think the previous iteration of this question was a little bit like a carpet bomb of questions, so that may have turned people off to it (to the point of almost being flagged for removal) so I'll ...
1
vote
4answers
3k views

What type of permissions should a user's home directory and files have?

I'm working with a fresh install of Ubuntu 12.04 and I've just added a new user: useradd -m testuser I thought that the -m flag to create a home directory for users was pretty standard, but now ...
5
votes
1answer
779 views

Which home directory should 'nobody' have?

I'm messing around with Tiger security audits on my CentOS box, ensuring the server is fit for being online, well as close as it can get anyway. I noticed a warning about the user nobody having / as ...
1
vote
4answers
730 views

Is it possible to “hide” an account from /etc/passwd?

A typical Linux system has not only accounts for the actual user(s) of the system, but also various system accounts. Is there any file like /etc/passwd for daemons, or other means resources where an ...
1
vote
1answer
207 views

How to retrieve information about locked accounts

Is it possible to retrieve info regarding to locked unix accouts? I am interested in seeing information about what date and time the lockout happend and from what hostname (pc name). I would like to ...
4
votes
2answers
94 views

Fully seperate two accounts without installing seperate operating systems?

Our class is finally installing Mint Linux on our machines. The problem is our teacher is scared that we'll play war games against the two classes that use the computers. His solution is to install ...
3
votes
1answer
170 views

Is running programs as another user useful?

After watching a talk by Douglas Crockford on security where he talks about how browsers got the right answer to the question "Who's interest does the program represent?", I wondered if it was ...
1
vote
2answers
108 views

understanding how to run script securely as limited user

I'm a long time dev but linux newbie. I've been building this (http://tryperl.com) to learn linux. So, my question is just about some *nix stuff I don't fully grok. One of the things I want to do is ...
7
votes
1answer
714 views

How to stop users from Switching to Root user

I have disabled the root user login from Sshd.conf file so now no one can login using root user even if they know the password SOMEHOW. Now I have 3 users in server ROOT,EMERG and ORACLE. I want to ...
5
votes
2answers
463 views

How to disable login for an user?

My Linux has many not-human users like cron, ntp, daemon, http, etc. I want to disable anybody to login as any of this users. Real people on my machine are root and me, so only root and me should be ...
1
vote
1answer
217 views

For an init.d startup script, what is the ideal user to use as the owner of that process

Everyone says that running processes as root is bad, since it defeats the security and privileges model. But what user should be used to run a startup process? Is it really necessary to create a new ...
6
votes
1answer
441 views

/etc/passwd sql with bash access

I just got a CentOS VPS and was reviewing the passwd file and saw this: mysql:x:498:499:MySQL server:/var/lib/mysql:/bin/bash Is bash necessary for mysql?
2
votes
4answers
2k views

Allow paswordless user to change to another passwordless user

I have two users dev and tomcat neither of them have a password. How can I allow dev 1 do su - tomcat without having him having to enter any credentials? 1 connects with ssh keyfile
2
votes
1answer
234 views

dm-crypt and LUKS password rotation

How do you protect the master key, and distribute multiple passwords for admin access? Is there a 3rd party user management tool or is this native?
1
vote
2answers
1k views

Allow non-root process to access all home directories without compromising security?

Any ideas how to allow one non-root process to access (read&write) all home directories without compromising security? Normal users should not have access to each other's home directories. All ...
12
votes
2answers
40k views

What user should apache and PHP be running as? What permissions should /var/www files have?

I just spun up an Ubuntu 11.10 box and then ran apt-get install apache2 php5 to install apache2 and PHP 5 on the box. Now it is functioning as a "web server" and it loads the "It Works!" page. Now I'm ...
2
votes
1answer
106 views

Fedora15/Gnome3 - Exit elevated priviliges mode

While using Fedora 14 (Gnome2), Each time if I was doing some privileged task (ex - mounting a new hard drive), I would be prompted for password and then there would appear an icon (like keys) on the ...
4
votes
5answers
1k views

Why is it recommended to create a group and user for some applications?

Most of the time, when installing a program from source it is recommended to create a new user and a new group and give /usr/local/<myapp> the recently created user and group ownership. Why is ...
2
votes
1answer
754 views

Deny external SSH access to a user

Is it possible to deny access to a user (in my case www-data) from outside the network? Or possibly deny this: ssh www-data@example.com But allow this if already logged in: su www-data
2
votes
2answers
983 views

Directory/files owned by a non-existent user

A user has created a directory with files, but the user does not exist in /etc/passwd or /etc/group. The system is a Fedora server with an FTP server and proxy which redirects to a CentOS server with ...
5
votes
4answers
1k views

How sudo/root-ness detection works

Programs that make changes system-wide require sudo unless I am already the root user. Now, the question is: how exactly does the system figure out that I am (not) root? Does it: Check to see if ...
2
votes
2answers
145 views

How to create a new user without his own FS but with access to write to only one folder of user that creates him?

What are the command(s) to create a new user (not from su), give him the ability to write to only one folder which is some directory owned by an already existing user (the one that created him)? ...
5
votes
1answer
4k views

What is hvc0? (appearing in “who” list)

I have an Ubuntu Server, and when I type who, to see who's connected, I can see that there's a user connected, and instead of being logged to a pts/x, he's connected to hvc0. Is there something to ...
7
votes
4answers
345 views

How can I safely give a shell to somebody?

I have a question about giving a shell account to somebody. How safe is it? He could read /etc. How can I give a secured shell account that will only restrict the user to some bins and his own home? ...
5
votes
1answer
719 views

Why root's default shell is configured differently with other normal user account's default shell?

As I know, root's default shell is configured csh and normal user's default shell is sh in FreeBSD. And in Ubuntu, root is dash, normal user is bash. (refer: What's the Ubuntu's default shell?) Why ...
5
votes
3answers
460 views

Unix users, groups, and permissions

I don't understand unix users, groups, permissions, etc. For example, things managed by the chmod, chgrp, usermod, groupadd, etc. commands. How do all these things work?
1
vote
2answers
123 views

How would you create a user with the HOME_DIR field in /etc/passwd completely blank?

Closest I can come is: useradd --home / -r --shell /sbin/nologin someuser But this creates an entry into /etc/htpasswd that looks something like this: someuser:x:100:100::/:/sbin/nologin I want ...
12
votes
11answers
1k views

Concern about logging in as root overrated?

For personal linux on my personal notebooks, I've usually set my environment to autologin as root even under X or lower runlevels. I've found my workflow is very pleasant and fast, without any ...
13
votes
2answers
5k views

How can I determine if someone's SSH key contains an empty passphrase?

Some of my Linux & FreeBSD systems have dozens of users. Staff will use these "ssh gateway" nodes to SSH into other internal servers. We're concerned that some of these people use an unencrypted ...
18
votes
10answers
3k views

How to create strong passwords in Linux?

I wonder how I can create strong passwords on Linux (for both normal and admin users) and if there are specific programs to do that.