Olympus-OM
[Top] [All Lists]

Re: [OM] Linux security query, was: Nasty iOS and OS X security bug

Subject: Re: [OM] Linux security query, was: Nasty iOS and OS X security bug
From: SwissPace <ian@xxxxxxxxxxxxxxxx>
Date: Wed, 26 Feb 2014 19:26:02 +0100
There will be others who can add more

I wouldn't be too worried though in such an environment especially as 
you are behind a firewall and you are running AV on your windows 
machines but I would make sure that the only accounts that can login are 
yours and your wifes ( set all others for nologin) with sensible 
passwords and also make sure that any default passwords for any 
installed software are changed, this I think however this is pretty much 
standard in a linux install these days.

after a fresh install or on a system that you know is ok you can run 
something like rkhunter- root kit hunter so take a snap of the files and 
then schedule it to run daily to check for differences or maldet malware 
detect etc.

Then you can install an anti virus such as one of these 
http://www.makeuseof.com/tag/free-linux-antivirus-programs/

I found our exploit by detective means but when testing afterwards 
clamav flagged up some of the problem code.

And for those who think linux is invicible 
<http://www.exploit-db.com/platform/?p=linux&pg=19> however I don't want 
to cause mass panic and our hack was caused by a distraction during 
testing while I was Ill and overworked and pushed to deliver something 
that was known to be risky. Its much easier to attack systems than 
defend them however common sense is your best ally

IanW





On 26/02/14 17:56, Chuck Norcutt wrote:
>
> How is the Linux machine vulnerable across the LAN and how can I
> mitigate it?
>
> Thanks,
> Chuck Norcutt
>
>
>

-- 
_________________________________________________________________
Options: http://lists.thomasclausen.net/mailman/listinfo/olympus
Archives: http://lists.thomasclausen.net/mailman/private/olympus/
Themed Olympus Photo Exhibition: http://www.tope.nl/

<Prev in Thread] Current Thread [Next in Thread>
Sponsored by Tako
Impressum | Datenschutz