Re: SELinux and Reverse Shell.
Tracy Reed <[email protected]>
| Newsgroups | gmane.linux.redhat.fedora.selinux |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Sep 30, 2020 at 08:57:56AM PDT, Jason Long spake thusly: > Could SELinux protect a server from Reverse Shell attacks? When hackers access to the CMSes like WordPress then they do a Reverse Shell for access to the server. Could SELinux block it? As the others have said, absolutely. And I've actually seen SELinux protect servers from this sort of thing. However, you also want to make sure you have egress filtering setup on your firewall. If your server is not supposed to be making outbound connections to strange IP addresses, why let it? -- Tracy Reed _______________________________________________ selinux mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]