Collaborate Disseminate
If I change to a potentially compromised user in Unix, for example by using su or sudo -i, then exit with exit, the compromised user could alias exit to something which drops me into a fake shell which has a keylogger. For ex… Continue reading What is a safe way to exit a user’s shell?
So I’m still new to GNU/Linux: recently I installed Debian 9.1 with KDE. Now after executing:
stat –format ‘%a’ /etc/sudoers
I found out that my sudoers file has the 640 permissions instead 0440 set. I changed this by runn… Continue reading /etc/sudoers file with permissions set to 640 instead of 0440: what does it mean?
So I’m still new to GNU/Linux: recently I installed Debian 9.1 with KDE. Now after executing:
stat –format ‘%a’ /etc/sudoers
I found out that my sudoers file has the 640 permissions instead 0440 set. I changed this by running pkexec chmod… Continue reading /etc/sudoers file with permissions set to 640 instead of 0440: what does it mean?
Chipotle and OneLogin suffer breaches, Windows XP Too Unstable To Spread WannaCry, Patches Available for Linux Sudo Vulnerability, Cisco, Netgear Readying Patches For Samba Vulnerability, oAuth nightmares, Attack and Defense, Jay Beale style, Decoding … Continue reading OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516
This has bugged me for some years now. I had a small webserver and I used ssh to log in remotely. I noticed that from the very first day there were brute force attacks to my ssh.
This made me think about security and I reali… Continue reading Why is there no option for separate sudo password?
A high-severity vulnerability in sudo has been patched in a number of Linux distributions; the flaw allows local attackers to elevate privileges to root. Continue reading Patches Available for Linux Sudo Vulnerability
For example, in sudo -l i discovery that i can run scp through sudo with Makulele user. I would like to know how to execute a bash command using scp .
Example: sudo -u makulele scp executeBASHcommandASmakulele . Maybe using … Continue reading Have a way to execute bash command using sudo with scp?
For example, in sudo -l i discovery that I can run scp through sudo with Makulele user. I would like to know how to execute a bash command using scp.
Example:
sudo -u makulele scp executeBASHcommandASmakulele
Maybe using… Continue reading How to execute bash command using sudo with scp? [migrated]
I have a server where I am the only normal user and I need to have password-based authentication enabled for SSH. I have configured iptables with recent module which throttles SSH connections and root logins over SSH are disa… Continue reading Is it a good practice to make sudo ask for root password in a single-user system?
Most modern Linux articles advice using sudo rather than logging into root. This advice is so ingrained, some distros don’t automatically allow root login. Indeed they come pre-configured with sudo using the users password to run arbitrary… Continue reading Why should one use sudo? [duplicate]