Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: sshd as non root

from [Chris Jensen] Network Security [Permanent Link]
Subject: Re: sshd as non root
Date: Sat, 1 Oct 2005 18:16:09 +1000 
Is there any way to accomplish this?  Or is there another way to set up
a default deny system?  (is there a way to use iptables to filter by
process rather than user?)


Could iptables (I'm assuming linux) with the owner match support do
what you want?
AFAIK it currently only does owner matching for outgoing, not
incoming, so it's only half of what you want - but it could certainly
be used to stop anything from leaving the box that wasn't sent from a
process owned by a set of users/processes you choose

eg
iptables -A OUTPUT -m owner --cmd-owner /usr/sbin/sshd -j ACCEPT
iptabels -A OUTPUT -j DROP

(You will most likely have to patch your kernel to get this)

More info at http://www.netfilter.org/

HTH, Chris
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Re: sshd as non root, Chris Jensen <=
Next by Date:  Re: Limiting SSH reverse tunnels?, Chris Jensen
Next by Thread:  Re: Limiting SSH reverse tunnels?, Chris Jensen
Indexes:  [Date] [Thread] [Top] [All Lists]