Kategoriarkiv: Old Base

Make compilers estinguis buffer overflows (eller noget)

Udgivet den juli 9, 2004 af mike

In C and C++, memory for local variables is allocated in a chunk of memory called the stack. Information pertaining to the control flow of a program is also maintained on the stack. If an array is allocated on the … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Mysql authentication for proftpd

Udgivet den juli 9, 2004 af mike

Make sure that your database system’s OS is running as efficiently as possible with these tweaks. proftpd is a powerful FTP daemon with a configuration syntax much like Apache. It has a whole slew of options not available in most … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Chrooting / jailin application

Udgivet den juli 9, 2004 af Kvm2k

Mitigate system damage by keeping service compromises contained. Sometimes keeping up with the latest patches just isn’t enough to prevent a break-in. Often, a new exploit will circulate in private circles long before an official advisory is issued, during which … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

automatic siganutre verification

Udgivet den juli 9, 2004 af mike

Use scripting and key servers to automate the chore of checking software authenticity. One of the most important things you can do for the security of your system is to be familiar with the software you are installing. You probably … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

chek cor listening services

Udgivet den juli 9, 2004 af Kvm2k

Find out whether unneeded services are listening and looking for possible backdoors. One of the first things that should be done after a fresh operating system install is to see what services are running, and remove any unneeded services from … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Sudo crash course

Udgivet den juli 9, 2004 af mike

The sudo utility can help you delegate some system responsibilities to other people, without giving away full root access. It is a setuid root binary that executes commands on an authorized user’s behalf, after she has entered her current password. … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Append only logfiles freebsd/linux

Udgivet den juli 9, 2004 af mike

Use file attributes to prevent intruders from removing traces of their break-in. In the course of an intrusion, an attacker will more than likely leave telltale signs of his actions in various system logs. This is a valuable audit trail … Læs resten →

Udgivet i FreeBSD, Knowledge Base, Linux, Old Base | Skriv en kommentar

Access Control Lists , advanced permisions in linux

Udgivet den juli 9, 2004 af mike

Most of the time, the traditional Unix file permission system fits the bill just fine. But in a highly collaborative environment with multiple people needing access to files, this scheme can become unwieldy. Access control lists, otherwise known as ACLs … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar

Loosy dir permisions and sticky bit

Udgivet den juli 9, 2004 af mike

# find / -type d \( -perm -g+w -o -perm -o+w \) -exec ls -lad {} \; Any directories that are listed in the output should have the sticky bit set, which is denoted by a t in the directory’s … Læs resten →

Udgivet i Knowledge Base, Linux, Old Base | Skriv en kommentar

Scan for SUID and SGID programs

Udgivet den juli 9, 2004 af mike

Unfortunately, a poorly written SUID or SGID binary can be used to quickly and easily escalate a user’s privileges. Also, an attacker who has already gained root access may hide SUID binaries throughout your system in order to leave a … Læs resten →

Udgivet i Knowledge Base, Old Base | Skriv en kommentar