Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-23 Thread Tomasz Rola
On Wed, Sep 19, 2018 at 11:09:20AM -0700, Chris Bennett wrote: [...] > I still would like to know about httpd's owner:group and permissions on files > not served to the public. I am not sure if somebody answered you offline, but my reasoning goes like this: 1. httpd runs and has said files

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Chris Bennett
I would like to continue what this topic is actually about. Frankly, I only mentioned the phone thing on this topic BECAUSE of Theo's immediate response to my other topic. A mistake on my part. Please feel free to reply to me off the list. I will not post anything you send me to the list. I

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Luke A. Call
On 09-19 08:32, Chris Bennett wrote: > On Wed, Sep 19, 2018 at 04:14:47PM +0200, Solene Rapenne wrote: > > Chris Bennett wrote: > > > I have not opened up my server before for full usage of email, web, > > > database, etc. before. So I'm a total noob on really good security > > > practices. > > >

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Jordan Geoghegan
On 09/19/18 10:45, Chris Bennett wrote: Right now, I am not living at a fixed location anywhere. All of my internet access is not through a hard line, but by necessity through WiFi or tethering. If I have some kind of server emergency and I do not have my laptop with me, I am forced to access

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Theo de Raadt
Look Chris, that is yet another mail is off topic for this list. https://www.openbsd.org/mail.html You are NOT talking about OpenBSD, rather you are blathering about unrelated topics. Get your shit together Chris Bennett wrote: > On Wed, Sep 19, 2018 at 10:48:50AM -0600, Theo de Raadt

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Chris Bennett
On Wed, Sep 19, 2018 at 10:48:50AM -0600, Theo de Raadt wrote: > Surely this is off-topic for misc, your phone has nothing to do with openbsd. > Perhaps we have different perspectives due to our ability on *how* we access the internet and thus focus on this issue differently. Right now, I am

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Theo de Raadt
Surely this is off-topic for misc, your phone has nothing to do with openbsd. Chris Bennett wrote: > On Wed, Sep 19, 2018 at 06:08:19PM +0100, Kevin Chadwick wrote: > > On Wed, 19 Sep 2018 07:03:56 -0700 > > > > > > > This is the thread that I wished to start that pertains to OpenBSD. > > >

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Chris Bennett
On Wed, Sep 19, 2018 at 06:08:19PM +0100, Kevin Chadwick wrote: > On Wed, 19 Sep 2018 07:03:56 -0700 > > > > This is the thread that I wished to start that pertains to OpenBSD. > > If usage of an SSH app on anyone's phone to access an OpenBSD server > > isn't relevant from a security point of

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Kevin Chadwick
On Wed, 19 Sep 2018 07:03:56 -0700 > This is the thread that I wished to start that pertains to OpenBSD. > If usage of an SSH app on anyone's phone to access an OpenBSD server > isn't relevant from a security point of view, well, let's ignore the > communication breach from a hardware/software

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Chris Bennett
On Wed, Sep 19, 2018 at 04:14:47PM +0200, Solene Rapenne wrote: > Chris Bennett wrote: > > I have not opened up my server before for full usage of email, web, > > database, etc. before. So I'm a total noob on really good security > > practices. > > > > Proper owner:group all over the place. Not

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Hoelzer, Dave
There are people still serving server side Perl scripts? That might be your problem right there. On 9/19/18, 10:06 AM, "owner-m...@openbsd.org on behalf of Chris Bennett" wrote: httpd should not have it's Perl scripts

Re: Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Solene Rapenne
Chris Bennett wrote: > I have not opened up my server before for full usage of email, web, > database, etc. before. So I'm a total noob on really good security > practices. > > Proper owner:group all over the place. Not covered in hier (7). look at security(8), especially the mtree part

Remiss on my personal and server security practices, offering server usage to outsiders

2018-09-19 Thread Chris Bennett
This is the thread that I wished to start that pertains to OpenBSD. If usage of an SSH app on anyone's phone to access an OpenBSD server isn't relevant from a security point of view, well, let's ignore the communication breach from a hardware/software issue and I ask forgiveness. I have not