Re: Linux hardening
Sean Finkel <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <[email protected]> |
paavan shah wrote: >On 8/22/05, AragonX <[email protected]> wrote: > > >><quote who="Sean Finkel"> >> >> >>>I would recommend also securing /tmp (and /var/tmp). Mounting it noexec >>>and nosuid is a good step to take. As well, I modified my local wget and >>>curl programs to *not* download to /tmp or /var/tmp, as no legitimate >>>use for the program (on my servers) will be downloading files to these >>>locations. As well, these two programs are commonly used in web script >>>attacks to retrieve a remote file and execute it. >>> >>> > >How did u modify your wget or curl for not to download to /tmp and /var/tmp? > >pavan. > > I just poked around the code some and found the bit of code where it determined the output file. I then got a full pathname to that file and went from there -Sean