Web Hosting Talk







View Full Version : which binary's do you secure when you get a new box here is a list lets add more


dropby23
11-06-2005, 12:48 PM
this is my list i generally make a whell group and add the binary's to the group or chmod this is my binary's and some other stuf

chmod 750 /usr/bin/rcp
chmod 750 /usr/bin/wget
chmod 750 /usr/bin/lynx
chmod 750 /usr/bin/links
chmod 750 /usr/bin/scp
chmod 750 /usr/bin/nc
chmod 750 /usr/bin/elinks
chmod 750 /usr/bin/curl
rm -rf /etc/httpd/proxy/
chmod 000 /var/mail/vbox
rm -rf /usr/local/apache/proxy
chmod 700 /usr/bin/lwp-*
chmod 750 /usr/bin/GET
chmod 750 /usr/bin/ftp
chmod 750 /usr/bin/w
chmod 750 /usr/bin/who
chmod 750 /usr/bin/free
chmod 750 /usr/bin/top
chmod 750 /usr/bin/write
chmod 750 /usr/bin/ssh
chmod 750 /usr/bin/telnet
chmod 750 /usr/bin/talk
chmod 750 /usr/bin/info
chmod 750 /bin/df
chmod 750 /bin/ping