Page 3 of 6 FirstFirst 12345 ... LastLast
Results 21 to 30 of 59

Thread: A little security help please

  1. #21

    Re: A little security help please

    If you can't su to root and can't log in remotely as root, you may be out of luck.

  2. #22

    Re: A little security help please

    Yeah, you have to be root. If you can't log in remotely as root, you're SOL

  3. #23

    Re: A little security help please

    Sweet! Thanks guys, I got the su working exactly like I want, only rick420 can su now. I would like to get that real time logging working, thats next on my list. What logs are the most important for me to look at to see what is going on in there?

  4. #24
    Guest

    Re: A little security help please


    Weird, the colon works on my system. I've just always used a period...
    No, it's weird that the period works: the colon has been default in every UNIX. If you try on BSD, old Unices, etc., the colon will always work. The period won't

  5. #25
    Guest

    Re: A little security help please


    Sweet! *Thanks guys, I got the su working exactly like I want, only rick420 can su now. *I would like to get that real time logging working, thats next on my list. *What logs are the most important for me to look at to see what is going on in there? *
    Keep an eye on those:
    - /var/log/auth.log
    - /var/log/faillog (you can (and must) see this with the command faillog)
    - /var/log/lastlog (you must see this with lastlog)
    - /var/log/syslog
    - /var/log/messages

    I like to use 'root-tail' to see those. root-tail is a program that does 'tail -f' but on your root window (look at this screenshot in the bottom right corner). Very useful.

  6. #26
    Guest

    Re: A little security help please

    And be sure to learn about ngrep or tcpdump (ngrep is better IMO). Very useful!

  7. #27

    Re: A little security help please

    I have the following script set to run continuously on tty12:

    Code:
    while :
    do
     clear
     echo "Total Failed Logins:"
     echo "--------------------"
     faillog|grep -v Username
     echo
     echo "Last Successful Logins:"
     echo "-----------------------"
     lastlog|grep -v Username
     echo
     echo "Last 5 Failed Logins:"
     echo "---------------------"
     lastb -5
     echo
     echo "Last 5 Successful Logins:"
     echo "-------------------------"
     last -5
     sleep 600
    done
    and that basically will tell you all you need to know about the login attempts on your box. The output is nicely formatted and you don't have to worry about trying to read cryptic log files -- also, you're only using one console, so it's more efficient

  8. #28

    Re: A little security help please

    No, it's weird that the period works: the colon has been default in every UNIX. If you try on BSD, old Unices, etc., the colon will always work. The period won't
    This is the first I've heard of it.

  9. #29

    Re: A little security help please

    Fetzaa:

    Code:
    while :
    do
    clear
    echo "Total Failed Logins:"
    echo "--------------------"
    faillog|grep -v Username
    echo
    echo "Last Successful Logins:"
    echo "-----------------------"
    lastlog|grep -v Username
    echo
    echo "Last 5 Failed Logins:"
    echo "---------------------"
    lastb -5
    echo
    echo "Last 5 Successful Logins:"
    echo "-------------------------"
    last -5
    sleep 600
    done
    Looks nice, but when people say "I use this script" how od I use that script? What do I have to do with that to make it work? Im sorry, Im a cisco-type of guy, not a programmer unfournately. So I am kinda clueless on how to use that, can you point me in the right direction?

  10. #30

    Re: A little security help please

    Did you read the inittab hint yet? It tells you what to do with it.

Similar Threads

  1. Security
    By jj0493 in forum Windows - General Topics
    Replies: 1
    Last Post: 01-14-2007, 04:24 AM
  2. PC Security
    By Ishtar in forum Windows - General Topics
    Replies: 5
    Last Post: 02-17-2005, 11:12 PM
  3. Security
    By pinehead in forum Linux - General Topics
    Replies: 1
    Last Post: 07-30-2002, 02:47 AM
  4. Your Security
    By Ashcrow in forum Linux - Software, Applications & Programming
    Replies: 9
    Last Post: 06-10-2002, 03:05 AM
  5. *nix Security
    By Sekihmet in forum Announcements and Suggestions
    Replies: 2
    Last Post: 09-12-2001, 11:34 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •