Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: about /dev/shm? |
|---|---|
| Date: | Mon, 17 Apr 2006 11:18:25 -0400 |
Monty Ree wrote:
Hello, all. As you know, /dev/shm is 1777 and attackers used to write his backdoors at that directory. So I have saw the partition for some time and I can't see any creation of the files. So I changed this permission to 755, and there was no problem. 1. What's the role of the /dev/shm? shm means shared memory? 2. Why this directory must be 1777? Is there any problem when I change the permission to like 755?
You'll lose Posix shared memory is all. Perhaps changing the mount to a noexec,nosuid,nodev mount makes more sense, without breaking anything. Anything using shmget should be ok. --Thomas.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: about /dev/shm?, ilaiy |
|---|---|
| Next by Date: | Re: Re: Syncing iptables rules between two servers, mmaris |
| Previous by Thread: | Re: about /dev/shm?, ilaiy |
| Next by Thread: | New site about security conferences : www.security-briefings.com, newslist@security-briefings.com |
| Indexes: | [Date] [Thread] [Top] [All Lists] |