Server Security - Page 42 - Results from #820

Discover Server Security News

Inside Jail

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Jail chroots an environment and sets certain restrictions on processes which are forked from within. For example, a jailed process cannot affect processes outside of the jail, utilize certain system calls, or inflict any damage on the main computer. Jail is . . .

LinuxSecurity.com Team
Sep 07, 2001

A network setup with FreeBSD and OpenBSD

This article discusses a network setup which might prove useful for people who like to put some extra effort into connecting their machines to the Internet. The goal is to build a secure client and server farm on a single IP address.. . .

LinuxSecurity.com Team
Sep 03, 2001

Rule Set Based Access Control version 1.1.2 Now Available

RSBAC is a flexible, powerful and fast open source access control framework for current Linux kernels, which has been in stable production use for over a year (since version 1.0.9a). The standard package includes a range of access control models like MAC, RC, and ACL . . .

LinuxSecurity.com Team
Sep 03, 2001

Security Review Gets No Respect From Managers

After project leaders pan vulnerability assessment, a Back Orifice demonstration quells the skeptics. My company is about to deploy a virtual private network (VPN). During a recent project meeting, the project manager asked each department representative to identify six tasks related . . .

LinuxSecurity.com Team
Aug 28, 2001

Kaspersky Anti-Virus for FreeBSD with the Qmail Plug-in

Anti-virus software for FreeBSD is not a common thought to most FreeBSD administrators. However, if you're like me, most of my networks are Windows 2000/NT on the workstations, and FreeBSD on the servers. This means that the average user can download . . .

LinuxSecurity.com Team
Aug 28, 2001

Unix, Linux Admins Urged To Upgrade Sendmail Security

Security experts and vendors of Linux and other Unix-like operating systems are urging network administrators to replace some versions of popular e-mail server software known as Sendmail, because the most recent open-source versions can provide a doorway for local hackers.. . .

LinuxSecurity.com Team
Aug 24, 2001

Sendmail Debugger Arbitrary Code Execution Vulnerability

Sendmail contains an input validation error, may lead to the execution of arbitrary code with elevated privileges. Local users may be able to write arbitrary data to process memory, possibly allowing the execution of code/commands with elevated privileges.. . .

LinuxSecurity.com Team
Aug 21, 2001

Apache CodeRed Countermeasures with PHP: codeRedKiller!

codeRedKiller is a simple concept that truly can help conserve resources. It saves time and energy (bandwidth and cpu power, etc) by automatically identifying and dropping requests from CodeRed infected hosts. Its goals are to stop CodeRed requests to apache webservers . . .

LinuxSecurity.com Team
Aug 19, 2001

Securing Sendmail with TLS

One of the most common uses of network systems is for e-mail-based communications. As such, a great deal of attention has been given to securing e-mail systems. However, most of this focus has been in two areas: security at the message . . .

LinuxSecurity.com Team
Aug 16, 2001

ComputerWorld: Security Statistics

A nice account of the costs associated with attacks and computer security. " The threat from computer crimes and other online security breaches has barely slowed, never mind stopped, according to a recent survey of 538 security professionals in U.S. corporations . . .

LinuxSecurity.com Team
Aug 06, 2001

Buffer overflow bug shakes Quake

A security flaw involving the server software that allows Quake III players to play the popular shoot-them-up over a network has been reported. According to a posting on respected security mailing list BugTraq, a buffer overflow vulnerability in Quake III Arena . . .

LinuxSecurity.com Team
Aug 02, 2001

AS/400 Internet Security

The focus of Internet security is to ensure private, authenticated communications between parties over the Internet or Intranets. Many of the security requirements are not that different from the requirements within a closed system complex. A closed system complex, however, may . . .

LinuxSecurity.com Team
Aug 02, 2001

Apache avoids most security woes

The Apache Software Foundation Inc.'s Apache HTTP Server has earned what many hope for and few achieve: an enviable security reputation. This achievement is especially striking when contrasted with Microsoft Corp.'s IIS (Internet Information Services) Web server (see story), which has . . .

LinuxSecurity.com Team
Jul 24, 2001

DNS and BIND, 4th Edition: DNS Security

This article is a link to the contents of DNS Security Chapter of the O'Reilly DNS book. Why should you care about DNS security? Why go to the trouble of securing a service that mostly maps names to addresses? Let us . . .

LinuxSecurity.com Team
Jul 19, 2001

The Duke of URL Reviews EnGarde Secure Linux

Patrick Mullen writes, "The Duke of URL has just posted its review of EnGarde Secure Linux 1.0.1. EnGarde Secure Linux is a unique brand of Linux with a focus on security, e-commerece, and servers. The review covers installation, its interface, and more.". . .

LinuxSecurity.com Team
Jul 18, 2001

Hardening BSD

Hardening BSD is definitely trickier than hardening a Linux based workstation being that the top 3 distributions of BSD, Net, Open, Free, have done an excellent job of strengthening the systems on their own. Using FreeBSD at home while I write . . .

LinuxSecurity.com Team
Jul 17, 2001

MAPS Subscription Policy Changes

Economic conditions and an apparent decision to start a fee-based service will force access to MAPS services to cease. A post from mail-abuse.org to the net-abuse.email newsgroup has started some controversy over MAPS' intentions, finding replacements for their service, and basically what should be done next.. . .

LinuxSecurity.com Team
Jul 13, 2001

Using PHP Securely

The following article tries to explain how to use PHP on your server in a secure manner. This includes how to safely install it, remove samples and set up security specific options. It is very important to make sure that the . . .

LinuxSecurity.com Team
Jul 10, 2001

Kernel Security Extensions USENIX BOF Summary

Emily Ratliff posted a summary of the recent USENIX "Birds of a Feather" (BOF) discussion about the Linux Security Module effort. This effort is trying to devise a set of Linux kernel hooks to support "plugging in" to Linux support for advanced security policies.. . .

LinuxSecurity.com Team
Jul 02, 2001

Tools of the Trade: Part 1

Now, in this short series of articles, I'm going to delve deeper into Linux security and discuss protective measures such as VPN systems and tripwire. Even though I'm aware of the many different security analysis tools out there, I'm not experienced . . .

LinuxSecurity.com Team
Jun 25, 2001

Server Security - Page 42

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide