Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: Simulating a hacker attack: msg#00132
|
Subject: |
Re: Simulating a hacker attack |
Ok here is how I have simulated what you are trying to do.
cp /bin/sh /var/www/httpdsh
chcon -t httpd_exec_t /var/www/httpdsh
Add the following lines to
/etc/selinux/targeted/src/policy/domains/misc/local.te
domain_auto_trans(unconfined_t,httpd_exec_t, httpd_t)
allow httpd_t devpts_t:chr_file rw_file_perms;
cd /etc/selinux/targeted/src/policy/
make load
setsebool httpd_tty_comm=1
Then run
/var/www/httpdsh
as root.
/var/www/httpdsh
httpdsh: /root/.bashrc: Permission denied
# id
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
context=root:system_r:httpd_t:s0-s0:c0.c127
# cat /etc/shadow
cat: /etc/shadow: Permission denied
# cat /var/log/messages
cat: /var/log/messages: Permission denied
--
|
| |
