New answers tagged security
0
It is a bit vague… things you can check and that are easy and effective are:
Is root login disabled? It probably should be, if for no other reason than that it is a known user name to brute-force.
Is password-based login disabled? Use private/public keypair methods only, if you can get away with it.
Is firewall access to port 22 restricted properly? (This ...
0
You will probably find a copy in /usr/share/doc/packages/SuSEfirewall2/.
Having "someapplication" and "someapplication.d" is a frequent pattern, where "someapplication" will include configuration-snippets from the "someapplication.d"-directory.
0
You need to define a default vhost in your apache configuration.
After that, define a vhost with the ServerName of the DNS name on which you want your website to be found.
Now requests with that name in the Host header will be handled by that vhost, and any other requests (with wrong or no hostname) will be handled by the default vhost (which should ...
1
The following is verbatim from the cryptsetup FAQ (emphasis mine):
I cannot unlock my LUKS container! What could be the problem?
First, make sure you have a correct passphrase.
Then make sure you have the correct key-map and correct keyboard.
And then make sure you have the correct character set and encoding, see also "PASSPHRASE
CHARACTER SET" under ...
0
The command yum list-security --security work only on RHEL 5.
On RHEL 7 , you should use the following commands:
# yum updateinfo list security all
# yum updateinfo list sec
redhat: Is it possible to limit yum so that it lists or installs only security updates?
2
Figure out which TCP and UDP ports are actually needed, and then block all of the other ports in your router's firewall. Possibly, those crontab entries will not reappear.
You can see which ports are open and public by using the Shields Up! feature at grc.com.
1
Debian's libnss-extrausers package makes it very easy to combine users and groups from two sources:
I use my private home PC and laptop regularly to remotely mount file systems from the sec=krb5 NFS file server of my university department. In order to see and use in commands like ls -l, groups, chgrp, cd ~user/, etc. the user and group identifiers ...
-1
you can not be disabling completely the "modules_disabled" - LKM.
Actually, you can disable it, but if some user has root access to the machine, this magic will be unusable. The decision is that: You must compiling your own Linux Kernel project and you should completely disabled "modules_disabled" from "Enable loadable modules to support" menu. https://...
54
It is a DDG mining botnet , how it work :
exploiting an RCE vulnerability
modifying the crontab
downloading the appropriate mining program (written with go)
starting the mining process
DDG: A Mining Botnet Aiming at Database Servers
SystemdMiner when a botnet borrows another botnet’s infrastructure
U&L : How can I kill minerd malware on an AWS EC2 ...
1
The attribute is set in the <Host> container element of your server.xml.
Here is an snippet of the default server.xml with the added attribute:
<Host name="localhost" appBase="webapps"
deployXML="false" unpackWARs="true" autoDeploy="true">
If the attribute is disabled, you will have to provide the (now disabled) /META-INF/context.xml of ...
3
If the only use for your host operating system is to run containers, I recommend running an operating system specifically designed for that, such as Fedora CoreOS. These have a number of benefits compared to a general-purpose operating system such as Ubuntu (in its non-Core varieties):
they are typically designed to be immutable, reducing the risk of ...
1
No. The minissdpd package in Debian 10.0 would not pass a security audit.
minissdpd runs as the root user. There is no containment, apart from the systemd service being defined to use PrivateTmp. There is some test code to "drop privileges", which is disabled with an #if 0 block and a TODO comment.
Note the daemon is written in C, the native language of ...
0
You can read the password from an unencrypted file.
For example, put the password into ~/secrets/mail_pass:
the_secret_mail_password
Then
chmod 600 ~/secrets/mail_pass`
In your muttrc:
# Read the password from a file and set it
set smtp_pass=`cat ~/secrets/mail_pass`
2
No. shell scripting will not help here. and it is not in any way applicable to mailto forms.
The form is processed by their user agent and the user-agent must at time of submission know the email address to submit the response to.
About the best you can do is use an "onsubmit" trigger in javascript to poulate the action property of the form. that will make ...
1
OpenSSL has
openssl passwd -6
Help says:
$ openssl passwd --help
Usage: passwd [options]
Valid options are:
...
-6 SHA512-based password algorithm
3
You have not solved the problem.
What you found may only be the tip of the iceberg. There are many ways to hide malware. What you could see easily may well be designed to lull you into a false sense of security.
Even if you managed to find all the malware, until you've found and plugged the hole it used to get in, it's likely to reappear.
If you have other ...
Top 50 recent answers are included
