Re: [CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-05 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/04/2012 10:15 AM, Lamar Owen wrote: On Wednesday, April 04, 2012 05:13:11 AM Alexander Farber wrote: Good morning With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache or nobody from

[CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-04 Thread Alexander Farber
Good morning With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache or nobody from initiating outgoing connections? On CentOS 5 Linux I've tried putting these lines into /etc/sysconfig/iptables: -A OUTPUT -m owner --uid-owner root -j DROP -A OUTPUT

Re: [CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-04 Thread Tony Mountifield
In article caadeywhp3mjspc-mo7aewzsxsq9phibpho2iu3bo8i0ttji...@mail.gmail.com, Alexander Farber alexander.far...@gmail.com wrote: Good morning With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache or nobody from initiating outgoing connections?

Re: [CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-04 Thread Tris Hoar
On 04/04/2012 10:21, Tony Mountifield wrote: In articlecaadeywhp3mjspc-mo7aewzsxsq9phibpho2iu3bo8i0ttji...@mail.gmail.com, Alexander Farberalexander.far...@gmail.com wrote: Good morning With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache

Re: [CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-04 Thread Lamar Owen
On Wednesday, April 04, 2012 05:13:11 AM Alexander Farber wrote: Good morning With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache or nobody from initiating outgoing connections? This sounds more like something an SELinux rule could do better,

Re: [CentOS] Block outgoing connections for certaing uids (root, apache, nobody)

2012-04-04 Thread Alexander Farber
Yep, I've locked out myself out of the dedicated server today. The numeric uids work, thank you. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos