is there a way to monitor use of rm, cp and mv commands? (other than in history)... i would prefer if it were logged in /var/log directory with time and command (with its arguments).
View 5 RepliesI am trying to set up an automatic backup using rsync and a publickey SSH, which requires using an empty password on the private key. I would like to lock down the key on the server so that it can only run rsync, but my attempts to use a forced command (or any other option such as no-port-forwarding) do not appear to have any effect when I run ssh -v.
I am currently debugging using the following line in ~/.ssh/authorized_keys
Code:
But when I connect, it opens up an interactive command prompt and does not display the "goodbye world" that I expect.
I am running an OpenSSH server on Ubuntu 10.04
I followed this thread:[URL]...When I get to this part:sudo genprof firefox it does not work in the terminal. Is this still supported for Ubuntu 11?
Also, I installed the profiles. Is something supposed to happen now or do I need to configure them?
sudo apt-get install apparmor-profiles
I want to restrict some of my Operating System users running unwanted commands. I just want them to run specified commands only. How can i achieve this?
View 9 Replies View RelatedI need to launch a bash file in Linux from an unprivileged user session, file that will run bash commands as root. But I do not want to create an user with root privileges to do that also the process must be silent (no password asked).
How can I do this without adding a user in sudoers and without giving rights to all users to execute the commands from that bash file?
I have tried SUID option witch would had been good as functionality but I understand that SUID doesn't work for script bash files.
Ok, so I have a few web apps that need to run shell commands. Heres a great example of one:
Code:
This is a PHP script getting my system volume. Herein lies the problem... www-data doesn't have permission to do this!
I changed my apache config to use MY account as the web user, and it does in fact work the way I want it to.
Obviously, I dont want to leave apache running as me, and want it to keep using www-data.... heres my question... how can I give permission for www-data to execute certain programs?
I want to get a of log all the commands executed by the root user with the following details :
incoming ip
username (thru which su was executed)
time and date
all the commands executed as mentioned above.
Also if user has managed to login as root, he should not be able to disable / delete the above info. Can this info be collected at some other physical server ?
I've firewall machine customers connect on it then connect to one of another 3 machines as root through ssh key , is there any way to know which user connect to which machine and what command that he has executed without using script command ?
View 1 Replies View RelatedI read somewhere that 'sync' and 'who' commands in linux should be disabled. While i can understand that for the 'who' command, why so for 'sync'?
I can find sync and who as one of shell commands, whereas also in /bin/sync and /usr/bin/who. Are the shell commands and those in bin directory meant to serve the same purpose?
Finally, how can i disable these commands?
trying to devise a new sudoers configuration while building a new SOE and would like to force everyone (including system administrators) to use rootsh in favour of doing things like sudo -s, sudo bash, sudo tcsh and so forth. Effectively, use sudo to use any shell other than rootsh. Is there a way to allow users to run anything they want except shells. I realise this is a default permit which inherently is defective, but I'm not convinced that going through the 1559 executable commands of my (as yet incomplete) built system to decided on the likely 1000+ commands I would want to be genuinely allowed. As I said this is for system administrators first, and I'd like to forcibly instil the habit of sudo <command> or using rootsh to get an audited shell. But I know people are already not doing enough sudo <command> as it stands, rather they switch to bash.
View 7 Replies View RelatedI am running karmic koala with a recent install of snort 2.4.8.1(build 3 and i am at a loss for useful commands in solving an internal problem(within the network).All i have is `"sudo snort -v -i wlan0" on my very short list of useful commands regarding ids.It is doing little to no good in resolving my problem with a network snoop besides showing that it is running;i need some more weight (knowledge) in order to rectify the problem?
View 4 Replies View RelatedI need to launch a bash file in Linux from an unprivileged user session, file that will run bash commands as root. But I do not want to create an user with root privileges to do that.
View 10 Replies View Relatedhow to prevent the execution of the following commands or how to set a policy or rule that prevents the execution of the following malicious commands
dd if=/dev/zero of=/dev/sda
rm -rf /
Senario is we have a system where root has authorised keys set up so that it can do a passwordless ssh to $WORKSTATION. I then need to run a script on $WORKSTATION as user "bob" and NOT as user "root". I do not want to set up user "bob" to be allowed passwordless ssh so any ideas how I can do this?I have tried variations of (as user "root"):ssh $WORKSTATION "su - bob; ./my_script"
View 5 Replies View RelatedI am using Fedora 14, I need to change the directory of a folder(myweb) from "homeuserdesktop" to "varwwwhtml" . Please give the Fedora commands to do this.
View 2 Replies View RelatedI will be hiring Linux freelancers very soon to do some work on my Linux Centos 5 machine. And I need a way to see what he's doing on my computer over ssh, now I don't mean me reading the logs, I meaning seeing what he's doing in realtime (kind of like vnc, but except the freelancer will only use ssh to do his work and not on the desktop environment.)
View 10 Replies View Relatedi need a way to monitor a certain partition / folder to see if any changes has made is there anyway of doing that ?
View 4 Replies View RelatedMy wife was using cryptkeeper fine, then she right-clicked the keys on the panel and did something, I'm not sure what. Anyway, the keys you click on to open the encrypted folder are gone and I can't figure out how to get them back. System monitor shows cryptkeeper running. I can kill it and re-start it, but the keys don't show on the panel. I'm running ubuntu 9.10.
View 1 Replies View Relatedi start fwbuilder with debug option: # ssh root@localhost sudo -S /etc/fw/firewall.fw and iptables rules are setup without any errors.
What exactly is the fwbuilder firewall? Simply this iptables set of rules? Or the running fwbuilder script (firewall.fw)? Both?
What now? How do I see what's going on?
When i scan with nmap, it doesn't seem to matter if i have a firewall running or not. I have used firestarter till now.
I want to do some pen-testing using aircrack-ng on my local network and currently the only wireless adapter I have is the WNA 1100 netgear adapter. I am using the ath9k_htc driver.
View 7 Replies View RelatedI am looking for a utility that would do the following:1. Be run manually on a list of files whose sizes should not change, to get a control file containing the sizes of each file.2. Subsequent manual runs would report any changes in size of any of the files in the list, and allow option to accept the new sizes.3. Be run as a cron job to check for changes in the file sizes and send an email alert if a change has occurred since the last time it was run.The purpose is to detect possible hacks of key files on a website. It would not include files expected to change, but just those that should not change. It would be run manually a few times to get the control list one wants to monitor.
View 3 Replies View RelatedRecommend open source tools that can help in figuring out if we are experiencing a network latency due to the newly installed firewall on our server.
View 1 Replies View RelatedI installed Karmic on an older PC I had laying around, and the only trouble I am having is with screen resolution. It uses an old ATI chipset (onboard) for video, and it doesn't seem to do EDID correctly, so I can't display anything higher than 800x600. I have tried creating an xorg.conf, but it's still not working. How can I tell Xorg to ignore the fact it can't detect a widescreen monitor and display something larger than 800x600? I noticed the log says the sync's are out of range, but I am not sure how to fix it.
Here is my current xorg.conf.
Code:
Section "ServerLayout"
Identifier "X.org Configured"
Screen 0 "Screen0" 0 0
InputDevice "Mouse0" "CorePointer"
InputDevice "Keyboard0" "CoreKeyboard"
EndSection
[Code]....
I have a dual monitor setup in Ubuntu, with my main monitor on the right and the monitor I want to extend to on the left monitor, but I can't seem to get it to do this, it always has the 'desktop' on the left monitor and then extends onto what I want to be my main monitor. I have an ATI Radeon 4350 Graphics card.
View 1 Replies View RelatedIs there any way to put a dual monitor wallpaper on a single monitor configuration using desktop wall? Using only 1/3 or so per wall. Something that will have the effect like the scrolling wallpaper feature on Android/iPhone.
View 2 Replies View RelatedI am now using Ubuntu 9.10. The prob is I am not able to increase the resolution of display. It is showing only 800 x 600 display. While trying to increase the resolution it is showing "Unknown Monitor". So, how can I detect the monitor so I can increase the resolution of my system.
View 3 Replies View RelatedCurrently I have two 1920x1080 screens running in Twinview on my Geforce 275 graphics card. Want I want to do is a quick simple way of disabling my secondary monitor when playing video games or using xbmc to watch movies, etc. I've tried a few applets but they require the xandr function which I think Nvidia doesn't support.
Is there a way to disable this quickly other than loading up nvidia-settings and disabling the monitor everytime. I don't really want to use two seperate x sessions and xinerama due to the fact you can't use compositing.
I have persistent video tearing my second monitor (Mitsubushi HDTV). I have tried everything that was suggested with some improvement. I have no issue with tearing if I add the following to my xorg.conf
Quote:
Section "Extensions"
Option "Composite" "Disable"
EndSection
Is it possible to disable composite for one monitor only and keep it for the other. Or at lease is it possible to have compiz for one monitor only and disable it for the other.
I'm playing with dual monitors. I have an NVIDIA GT220 set up so that my monitor and my TV are running as extended desktops. Everything is working well enough, but there is one annoying bit I've noticed:
If I'm watching ..... on monitor 1 in fullscreen and working on monitor 2, clicking anything in monitor 2 kills full-screen in monitor 1. Is this something that can be fixed somehow or is it a hardwired "feature"?
I am facing problem with the fresh installation of Fedora 11. (I have moved from Fedora 9). When I try to view videos on ..... or use the Cheese Webcam Booth, I get blurred lines on the screen and I am unable to see any video or pic.
Also I noticed that the when i go to System > Preferences>Display, it shows me UNKOWN MONIOR.
However, if I got to System>Administration>Display and enter the su password, it shows me correct monitor and the graphics driver.
I am not sure if my original is related to the Unknown Monitor.
I also tried to install Nvidia driver but it crashed the xserver and I had remove the driver.
My Monitor is LG 700E and Graphics card is from intel. as I am not able watch any video.