Collaborate Disseminate
linux security and root access question….
I’m setting up a server that has a validator node running on it for a blockchain. I was trying to harden the security of my server. I set up ufw for all ports but those necessary for the node to … Continue reading Disable everything but a hidden command for root access
linux security and root access question….
I’m setting up a server that has a validator node running on it for a blockchain. I was trying to harden the security of my server. I set up ufw for all ports but those necessary for the node to … Continue reading Disable everything but a hidden command for root access
The cross-platform port of doas, opendoas, has a persist feature that basically caches the user’s password so they don’t have to enter it repeatedly. It seems like many people consider this insecure.
As I understand it, BSD has some fancy … Continue reading How is doas with persist less secure than sudo?
To check the sudo password, we need root permission to even read the /etc/shadow file. But how sudo checks password?
You can hardly mention the sudo command without recalling the hilarious XKCD strip about making sandwiches. It does seem like sudo is the magic power to make a Linux system …read more Continue reading Linux Fu: Superpowers for Mere Mortals
I published the following diary on isc.sans.edu: “Using Sudo with Python For More Security Controls“: I’m a big fan of the Sudo command. This tool, available on every UNIX flavor, allows system administrators to provide access to certain users/groups to certain commands as root or another user. This is performed with a
The post [SANS ISC] Using Sudo with Python For More Security Controls appeared first on /dev/random.
Continue reading [SANS ISC] Using Sudo with Python For More Security Controls
One can find policy advised regarding power user accounts on UNIX systems described as :
Disable root account access (for example by changing default terminal to /usr/sbin/nologin
Only authorize compartimented sudo commands access
My (be… Continue reading Security policy regarding sudo and root account disabled
I am trying to execute the sudo buffer overflow (CVE-2021-3156) on one of my systems, but haven’t got it working yet. The system is definitely vulnerable (taking into account sudo version and sudoedit -A -s \\ output (malloc error).
I crea… Continue reading How to fine tune timing for CVE-2021-3156 (sudo privilege escalation)?
If I install a Gnu/Linux, with sudo configured to get root privileges, like in Ubuntu, to a client’s computer, and they are newbies for Linux, and they do basic home/school activities like browsing, writing in LibreOffice, and we set up au… Continue reading How strong should a Gnu/Linux desktop admin password be if the threat is remote attackers? [closed]
According to recent sudo issues, I want to remove its package from my machine and use root instead (for just related stuff – not all the time – like update and …). But I have an issue that launching Veracrypt via root is not a wise choic… Continue reading how to create a user specifically for opening veracrypt [migrated]