Content related to computer security., i.e. content about policies, mechanisms, etc. needed make sure data is not leaked or corrupted and services available in all circumstances.

learn more… | top users | synonyms

3
votes
1answer
205 views

Is there a standard way to configure what policy iptables loads on startup under Debian?

I've just started playing with Debian 6.0 (Squeeze) in a VPS environment, as a way to learn more about system administration. One thing I'd like to configure is a default packet filtering policy. ...
2
votes
0answers
108 views

Understanding getlogin spoofing

My question is in three (or so) related parts: 1) My understanding is that getlogin() will effectively return the auid associated with the process and so isn't actually changable by the user. Is that ...
2
votes
1answer
2k views

iptables rule to allow access to internet

I made default policy of my machine- iptables -A INPUT -j REJECT #DROP ALL PACKETS TO INPUT CHANNEL INPUT channel has been blocked. Now I want to allow only some specific services like I should be ...
2
votes
1answer
380 views

Debian unstable chroot security issues

This page describes how you can use the debootstrap utility to install a base Debian unstable/sid system on an existing Linux machine. The new install is accessible using chroot. When doing this, ...
2
votes
4answers
2k views

Private VLAN's under Linux?

http://blog.ine.com/2008/07/14/private-vlans-revisited/ Has anyone tried private vlan's under Linux? Any experiences with them? My real question is does anybody have howtos regarding this?
1
vote
1answer
210 views

Does an in-kernel firewall sit between the network access layer and Internet layer?

This question is a follow-up to my previous question. Logic for me to says that an in-kernel firewall sits between the network access layer and the Internet layer, because it needs to have access to ...
1
vote
3answers
7k views

Helo command rejected: need fully-qualified hostname Error

My mail server is in some blacklist cause of spams. I reconfugured postfix. Aften then My customers get this error they can't send emails. 404 4.5.2 <PLLAMNAZIFE>: Helo command rejected: need ...
1
vote
1answer
249 views

Hamachi for Web Surfing

I recently installed Hamachi on my FreeBSD 9 and I want to know how can I browse web anonymously by this software?
1
vote
1answer
126 views

Default configuration I need to change?

A few days ago I installed a new linux os. Today i realize /root has o+r (755) so EVERYONE is able to see my root sql password in /root/.my.cnf. I freaked out and simply changed /root to 750. My ...
1
vote
2answers
129 views

How would you create a user with the HOME_DIR field in /etc/passwd completely blank?

Closest I can come is: useradd --home / -r --shell /sbin/nologin someuser But this creates an entry into /etc/htpasswd that looks something like this: someuser:x:100:100::/:/sbin/nologin I want ...
0
votes
1answer
79 views

Break In Attempt

mysql service has vanished from my vps and service is down since yesterday where can see from /var/log/secure file it says break in attempt from an ip that is not known to me but cannot tell if the ...
0
votes
2answers
101 views

are daemon tmpfs executables copied unencrypted to memory upon execution? (prevent if so?)

When a daemon is executed, is the executable copied to memory? If so, can it be copied encrypted? If not, is there a way to prevent the executable from being copied to memory? The executable is ...
0
votes
0answers
146 views

git and remote security with Encfs [duplicate]

Possible Duplicate: How do i encrypt git on my server? I wanted to create a user on my server to use as a private repository. I'd like the files to be encrypted. Encfs will timeout after ...
-3
votes
4answers
450 views

Since Android has malware, does it mean no Unix is immune from malware?

Android has virus: Android.Counterclank, Android.Tonclank (seal info, back-door). Does it prove that FreeBSD, Solaris, Fedora, CentOS, ArchLinux, Ubuntu all is running and having similar ...