limited programs for users

Discussion in 'Installation/Configuration' started by TheRudy, Sep 20, 2006.

  1. TheRudy

    TheRudy ISPConfig Developer ISPConfig Developer

    Erm didn't find the right words for topic..

    anyway, since most of the big php portal scripts have loads of security holes i am in a process to limit them even more. Most of the hacks happen using wget or similar programs that can download scripts with bad bad code :) from net to server. So i'm chmod-ing these programs to 700 aka only root can run them.

    So far my list is:
    wget
    gcc
    cc
    make
    scp

    Anything else that we could add to this list?
     
  2. falko

    falko Super Moderator ISPConfig Developer

  3. TheRudy

    TheRudy ISPConfig Developer ISPConfig Developer

    SSH is not allowed only for my IP.
    mod_security already running..

    Was just thinking that programs that are able to download files are not needed for users cause this way most of the auto scripts hack portals and stuff.. extra security if you will..

    Any more ideas about programs that can download files from internet and are not important to users?
     
  4. falko

    falko Super Moderator ISPConfig Developer

    Command-line FTP clients, then maybe svn, rsync, ...
     

Share This Page