Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:55:58 +01:00
Avoid users to see commands executed by others
mkinitramfs
Output:
Command 'mkinitramfs' is available in the following places
 * /sbin/mkinitramfs
 * /usr/sbin/mkinitramfs
The command…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:54:44 +01:00
Avoid users to see commands executed by others
ls -lh /boot/initrd.img-6.1.0-26-amd64
-rw-r--r-- 1 root root 37M Oct  6 11:33 /boot/initrd.img-6.1.0-26-amd64
file /boot/initrd.img-6.1.0-26-amd64
/…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:52:54 +01:00
Avoid users to see commands executed by others
ls -l /initrd.img
lrwxrwxrwx 1 root root 30 Oct  6 11:33 /initrd.img -> boot/initrd.img-6.1.0-26-amd64

I don't want a crontab solution as the statement may not be the…

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:36:25 +01:00
Avoid users to see commands executed by others

DuckDuckGo search Debian hidepid on reboot.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 15:17:51 +01:00
Avoid users to see commands executed by others
time grep -r 'hidepid' / --exclude-dir={proc,sys}
Output:
grep: /usr/lib/x86_64-linux-gnu/systemd/libsystemd-core-252.so: binary file…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 02:02:20 +01:00
Avoid users to see commands executed by others
diff <(mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:56:17 +01:00
Avoid users to see commands executed by others

DuckDuckGo search Debian change mount proc options.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:53:55 +01:00
Avoid users to see commands executed by others
grep proc /etc/fstab

does not return anything.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:53:13 +01:00
Avoid users to see commands executed by others
sudo reboot
mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:49:13 +01:00
Avoid users to see commands executed by others
mount /proc -o remount,hidepid=2

does not return anything.

mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:41:48 +01:00
List files a user can see names of and contents
head /file.swap 
head: cannot open '/file.swap' for reading: Permission denied
Benjamin_Loison opened issue Benjamin_Loison/linux#43 2024-11-08 01:37:29 +01:00
Can regular user check previous erased data on disk?
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:27:40 +01:00
List files a user can see names of and contents
chmod o-rx -R .

seems to meet my needs.

Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:25:55 +01:00
List files a user can see names of and contents

DuckDuckGo search Linux chmod remove permissions.

Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:23:41 +01:00
List files a user can see names of and contents
ls /var/log/
Output:
alternatives.log        apt                    cron.log.4.gz    dpkg.log.7.gz   letsencrypt    syslog         xrdp.log.1.gz…
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:21:11 +01:00
List files a user can see names of and contents
tree /var/spool/cron/
Output:
/var/spool/cron/
├── atjobs  [error opening dir]
├── atspool  [error opening dir]
└──…
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:20:22 +01:00
List files a user can see names of and contents
tree /var/www/
<details>
<summary>Output:</summary>

/var/www/ [error opening dir]

0 directories, 1 file

</details>
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:14:13 +01:00
Avoid users to see commands executed by others

Issue raised in the Unix Stack Exchange questions 454807 and 17164.