Maybe a security problem involving Linux hosts Post: 302980298

Sponsored Content

Special Forums Cybersecurity Maybe a security problem involving Linux hosts Post 302980298 by Neo on Friday 26th of August 2016 01:11:03 AM

08-26-2016

Administrator

Quote:

Originally Posted by SInt

.... I hope none of you guys reacts now how most people reacted: "this guy is crazy, give him more meds" or something. I know it sounds crazy and it is crazy. But lets say my observations are correct where could the entry point be for an attacker?

Risk is based on many factors, which include:

Threat
Vulnerability
Criticality

If I read your post correctly, it sounds like you feel like there is a threat based on your interaction with some groups on the net and your systems are vulnerable. So, the main question which remains is how critical is the Linux computer system you are worried about?

If the system is really important and a breach would amount to serious loss, then you should really consider getting a professional to help you.

If the system has nothing important running on it; then you could just rebuild it from a scratch if you are worried.

If the system has backups, you could recover the system from a backup that was from a time prior to the hacking incident being discovered.

There are lots of options and the way you move forward depending on the risk profile of the system and that depends on the intersection of the three areas I mentioned above (1) threat, (2) vulnerability and (3) criticality.

Last edited by rbatte1; 08-26-2016 at 04:28 AM.. Reason: Converted text based numbered list for formatted numbered list

This User Gave Thanks to Neo For This Post:

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

6 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

remote hosts access problem on solaris

hey guys, i am on a box named pluto and i need to be able to log into another box named genesis. i need to be able to ssh into genesis as root and not get asked for the password. what file do i need to edit on genesis to make this happen? i searched for the .rhosts file it doesn't seem to exist....

2. UNIX for Dummies Questions & Answers

problem in script involving month arithmetic

advance happy new year to all, i am having a script.The purpose of the scripts is as follows.If the current month is march,june,september or december ,inc_flg should be set to '1' otherwise inc_flg should be set to '2' month= date +"%m" if || || || ; then inc_flg = 1 else ...

3. Programming

A challenging problem involving symbolic links.

Hello, I'm working on an application that bridges together several applications involved in creating a video workflow for editing with digital cinema cameras. The main platform is MacOSX. Because of the nature of some of the utilities for working with this video footage I must spoof filenames...

4. Shell Programming and Scripting

problem feeding netcat a list of hosts

Hi, I'm having difficulty in making a bash script to get netcat to scan a list of hosts and their ports from another file and could use some help. Here's an example host list, "nc.host": 192.168.2.110 22 And here's the first script I tried to feed "nc.host" into netcat: "nc1.sh" ...

5. Shell Programming and Scripting

Problem in expect script with password involving trailing backslash

Hi all, I have wriiten an expect script that genearates a public private key pair through ssh-keygen and then copies that key to the authorized keys file of the remote system . The problem i am facing is when i get a password for the remote machine containg a trailing backslash , the send command...

6. Solaris

How to copy a tar file on a series of remote hosts and untar it on those hosts?

Am trying to copy a tar file onto a series of remote hosts and untar it at the destination. Need to do this without having to do multiple ssh. Actions to perform within a single ssh session via shell script - copy a file - untar at destination (remote host) OS : Linux RHEL6

LEARN ABOUT DEBIAN

filetraq

FILETRAQ(8)						      System Manager's Manual						       FILETRAQ(8)

NAME

       filetraq - keep track of changes in config files.

SYNOPSIS

       filetraq --help
       filetraq [filelist] [backupdir]

DESCRIPTION

       This  manual  page  documents briefly the filetraq command.  This manual page was written for the Debian GNU/Linux distribution because the
       original program does not have a manual page.

       FileTraq is a shell script that reads a list of files to watch, runs diff against each file and its backup, and reports any  discrepancies,
       along with keeping a dated backup of the original.

       It's designed to be run as a cron job.

OPTIONS

       This command has two possible invocations, one with one option:

       --help Show summary of options and the default values of the config file and the backup directory.

       and other with no options, a config file or a config file and the backupdir.

       The  debian  version has been modified to read the /etc/default/filetraq configuration file, that lets the administrator change the default
       values of the config file ( file ), the backup directory ( backupdir ), the diff options used to print the filetraq  output  (  diffopts  ,
       e.g.  -p -C 1 or -u ) and the diff order ( difforder , either newold (FileTraq default) or oldnew (traditional Unix default)).

SECURITY

       FileTraq  is  not  well	tested	or hardened.  It runs as root, but all of its config files should only be accessible by root.  No security
       holes are known at this time, but please be careful.

BUGS

       Right now, it doesn't take care of its backups very well.  The dated backups will accumulate in the  backups  directory,  bounded  only	by
       diskspace.

       It only handles text files, it isn't a Tripwire replacement for use with system binaries.

FILES

       /etc/filetraq.conf
       /etc/default/filetraq
       /var/lib/filetraq

SEE ALSO

       diff(1), cron(8).

AUTHOR

       Jeremy Weatherford <xidus@xidus.net>
       Homepage: http://filetraq.xidus.net/

       This manual page was written by Sergio Talens-Oliag <sto@debian.org>, for the Debian GNU/Linux system (but may be used by others).

								     June 2001							       FILETRAQ(8)