Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 18:19:30 +01:00
Avoid users to see commands executed by others
/etc/fstab:
proc    /proc    proc    defaults,nosuid,nodev,noexec,hidepid=2     0     0
grep '^proc' /proc/mounts…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 18:10:19 +01:00
Avoid users to see commands executed by others
/etc/fstab:
proc    /proc    proc    defaults,hidepid=2     0     0

results at reboot in:

grep '^proc' /proc/mount…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:57:37 +01:00
Avoid users to see commands executed by others
sudo mkinitramfs
Output:
Usage: mkinitramfs [option]... -o outfile [version]

Options:
  -c compress	Override COMPRESS setting in initramfs.c…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:55:58 +01:00
Avoid users to see commands executed by others
mkinitramfs
Output:
Command 'mkinitramfs' is available in the following places
 * /sbin/mkinitramfs
 * /usr/sbin/mkinitramfs
The command…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:54:44 +01:00
Avoid users to see commands executed by others
ls -lh /boot/initrd.img-6.1.0-26-amd64
-rw-r--r-- 1 root root 37M Oct  6 11:33 /boot/initrd.img-6.1.0-26-amd64
file /boot/initrd.img-6.1.0-26-amd64
/…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:52:54 +01:00
Avoid users to see commands executed by others
ls -l /initrd.img
lrwxrwxrwx 1 root root 30 Oct  6 11:33 /initrd.img -> boot/initrd.img-6.1.0-26-amd64

I don't want a crontab solution as the statement may not be the…

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 17:36:25 +01:00
Avoid users to see commands executed by others

DuckDuckGo search Debian hidepid on reboot.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 15:17:51 +01:00
Avoid users to see commands executed by others
time grep -r 'hidepid' / --exclude-dir={proc,sys}
Output:
grep: /usr/lib/x86_64-linux-gnu/systemd/libsystemd-core-252.so: binary file…
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 02:02:20 +01:00
Avoid users to see commands executed by others
diff <(mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:56:17 +01:00
Avoid users to see commands executed by others

DuckDuckGo search Debian change mount proc options.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:53:55 +01:00
Avoid users to see commands executed by others
grep proc /etc/fstab

does not return anything.

Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:53:13 +01:00
Avoid users to see commands executed by others
sudo reboot
mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#41 2024-11-08 01:49:13 +01:00
Avoid users to see commands executed by others
mount /proc -o remount,hidepid=2

does not return anything.

mount 
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:41:48 +01:00
List files a user can see names of and contents
head /file.swap 
head: cannot open '/file.swap' for reading: Permission denied
Benjamin_Loison opened issue Benjamin_Loison/linux#43 2024-11-08 01:37:29 +01:00
Can regular user check previous erased data on disk?
Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:27:40 +01:00
List files a user can see names of and contents
chmod o-rx -R .

seems to meet my needs.

Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:25:55 +01:00
List files a user can see names of and contents

DuckDuckGo search Linux chmod remove permissions.

Benjamin_Loison commented on issue Benjamin_Loison/linux#42 2024-11-08 01:23:41 +01:00
List files a user can see names of and contents
ls /var/log/
Output:
alternatives.log        apt                    cron.log.4.gz    dpkg.log.7.gz   letsencrypt    syslog         xrdp.log.1.gz…