--=-AaZyQ+4h3hLXffj82hWf Content-Type: text/plain Content-Transfer-Encoding: 7bit
On Sun, 2005-04-10 at 03:52 +0100, Baruch Even wrote: > shimi wrote: > > On Sat, 2005-04-09 at 12:47 +0300, Ilya Konstantinov wrote: > >>Attachker #2: Downloading some kind of bot to our /tmp (using wget). For > >>some strange reason, he hasn't continued the breakin. > > > > For that I put /tmp mounted as noexec (maybe you did too and that's why > > he didn't continue? :)) > > You are aware of the fact that scripts can be run just as well with: > perl script > > And there should be a way to do it for executables as well. Yeah, I am aware of that. The chroot jail comes to mind here. -- shimi <[EMAIL PROTECTED]> --=-AaZyQ+4h3hLXffj82hWf Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8"> <META NAME="GENERATOR" CONTENT="GtkHTML/3.2.5"> </HEAD> <BODY> On Sun, 2005-04-10 at 03:52 +0100, Baruch Even wrote: <BLOCKQUOTE TYPE=CITE> <PRE> <FONT COLOR="#000000">shimi wrote:</FONT> <FONT COLOR="#000000">> On Sat, 2005-04-09 at 12:47 +0300, Ilya Konstantinov wrote:</FONT> <FONT COLOR="#000000">>>Attachker #2: Downloading some kind of bot to our /tmp (using wget). For </FONT> <FONT COLOR="#000000">>>some strange reason, he hasn't continued the breakin.</FONT> <FONT COLOR="#000000">> </FONT> <FONT COLOR="#000000">> For that I put /tmp mounted as noexec (maybe you did too and that's why</FONT> <FONT COLOR="#000000">> he didn't continue? :))</FONT> <FONT COLOR="#000000">You are aware of the fact that scripts can be run just as well with: </FONT> <FONT COLOR="#000000">perl script</FONT> <FONT COLOR="#000000">And there should be a way to do it for executables as well.</FONT> </PRE> </BLOCKQUOTE> <BR> <PRE> Yeah, I am aware of that. The chroot jail comes to mind here. </PRE> <TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%"> <TR> <TD> -- <BR> shimi <<A HREF="mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>> </TD> </TR> </TABLE> </BODY> </HTML> --=-AaZyQ+4h3hLXffj82hWf-- ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
