Re: Command history log for audit trail

2006-06-15 Thread Daniel Givens
On 6/15/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I need to set up an audit trail for all commands run on machines. I know that the auth.log records who logs in and when, and that each user's .bash_history has a history of their commands. But is there some other way to create a log for

Re: securing /var/www or web content

2006-02-26 Thread Daniel Givens
There is the option of POSIX access control lists. Deny remote login for the users you want to have access to the webroot and add them to the access control list. For remote users, deny access. Now, if you want to have users log in remotely and not be able to access those files, then the only

Re: avahi-daemon

2006-02-22 Thread Daniel Givens
The package maintainer has a point that an mDNS daemon would be pretty pointless if it only bound to lo. I think it is more the responsibility of the administrator to know what is going on his system. If you are so worried about security, then why not check out those NINE new Avahi packages when

Re: Security scanner

2006-01-23 Thread Daniel Givens
On 1/23/06, Jaroslaw Tabor [EMAIL PROTECTED] wrote: Hi all! Has anyone know a network scanner I can run on Debian to search LAN for unprotected windows shares ? Look into Nessus. (http://www.nessus.org/) Or maybe something looking for simple passwords ? Look into John the Ripper