5 votes
Accepted

Is there a way to enforce 2FA for all users on the SSH server on the Unix PAM Subsystem?

I don't have access to the unnamed UNIX system such as yours, so you are going to have to adapt the solution I'm describing here for your own situation.  (Feel free to edit this answer to add your ...
Chris Davies's user avatar
3 votes
Accepted

Totally Legit Signing Key <[email protected]>

The mallory keys were keys added to demonstrate that short key identifiers are easily spoofable. See this GnuPG discussion and this oss-sec post for details. Unless you’re actively maintaining your ...
Stephen Kitt's user avatar
2 votes
Accepted

Detecting used API calls for an application

TL;DR: you can hook regular function calls across shared object boundaries with bpftrace. However, especially for what we consider C++ standard library, that's but a small part of the actual C++ "...
Marcus Müller's user avatar
2 votes
Accepted

How to check permissions of a non sudoers user with full root access?

doas doesn’t provide a command to list all the privileges it grants to a given user; all you can do is check whether a given command is permitted for the current user: doas -C /etc/doas.conf some ...
Stephen Kitt's user avatar
1 vote

Nessus is reporting false positives for Debian 12

Yeah Happens sometimes. Either contact their tech support and escalate, or report from within the product itself. I know that Vulnerability Management (which uses Nessus) can do that from the recast/...
Dennis vanJ's user avatar
1 vote

How to check permissions of a non sudoers user with full root access?

As far as I understood this question, there is a program named doas which can be used similar to sudo. The simple command that can be used to check if a user has root privileges is the following (in ...
L_R's user avatar
  • 75
1 vote

How can I read the RID of a CDRW or DVDRW on Linux?

I can only answer the part DVDR: I would like to know how to issue the standardized command to read the RID` For DVD minus (R or RW), the standard-compliant SCSI MMC command to get the RID (actually ...
Proger_Cbsk's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible