PDA

View Full Version : VPS Security Questions...


SlAiD
02-24-2005, 02:01 PM
Hi;

After install rootkid, what commands should i execute to "test" my security?

Hvu
02-24-2005, 04:19 PM
Hi;

After install rootkid, what commands should i execute to "test" my security?


after installing rkhunter you want to update it and then run the test

Updating

rkhunter --update

Then running the test

rkhunter --checkall --skip-keypress



I always had this
MD5
MD5 compared: 85
Incorrect MD5 checksums: 13

maybe someone can comment on this? Running Fedora 1

SlAiD
02-24-2005, 04:30 PM
Ok.

I will try this.

Thanks.

SlAiD
02-24-2005, 05:57 PM
Hi.

I have some results and vulnerabilities (or patched():

OpenSSH 3.6.1p2 [ Old or patched version ]
OpenSSL 0.9.7a [ Old or patched version ]

-- -- --

System checks
* Allround tests
Checking hostname... Found. Hostname is host.forunsbb.com
Checking for passwordless user accounts... OK
Checking for differences in user accounts... Found differences
Info:
----------------------
< xchanger:x:32022:524::/home/xchanger:/usr/local/cpanel/bin/noshell
----------------------
Info: Some items have been added (items marked with '<')
Checking for differences in user groups... Found differences
Info:
----------------------


What i do to fix this?

TomK
02-24-2005, 06:06 PM
Please submit a ticket to support ASP with your IP or DVE # and an engineer will get this fixed ASAP.