Find the answer to your Linux question:
Results 1 to 5 of 5
I want someone to do some research on my server. So I give them permission via useradd, and then remove them later on. I never gave them super user pemissions ...
  1. 12-13-2004 #1
    samf
    samf is offline
    Just Joined!
    Join Date
    Apr 2003
    Posts
    51

    what's the worst a regular user can do?



    I want someone to do some research on my server. So I give them permission via useradd, and then remove them later on. I never gave them super user pemissions or allowed them into any other group. Presuming they were malicious,

    1. what damage could they have done to my system (worst case scenarios)?
    2. What information could they have gained?
    Reply With Quote Reply With Quote
  2. 12-13-2004 #2
    lakerdonald
    lakerdonald is offline
    Linux Guru lakerdonald's Avatar
    Join Date
    Jun 2004
    Location
    St. Petersburg, FL
    Posts
    5,039
    filled up your hard drive with useless stuff, exploited any bug in your server, etc.
    what they could do would be dependent on how skilled the user is.
    -lakerdonald
    the lost art of found sound
    Reply With Quote Reply With Quote
  3. 01-06-2005 #3
    stathisx
    stathisx is offline
    Linux Engineer
    Join Date
    May 2003
    Location
    Greece / Athens
    Posts
    1,169
    be sure to give him the right permissions ....any wrong permission set will maybe lead to lose data that you want...so be careful!!!
    Linux For Ever!
    Reply With Quote Reply With Quote
  4. 01-06-2005 #4
    valan
    valan is offline
    Linux Engineer
    Join Date
    Nov 2004
    Location
    Ft. Polk, LA
    Posts
    796
    You might want to check the permissions of the stuff in /etc to be sure he can't read any files he shouldnt be reading. Careful though, some programs are pretty picky about what permission their conf files have.
    Reply With Quote Reply With Quote
  5. 02-22-2005 #5
    mehkriakram
    mehkriakram is offline
    Just Joined!
    Join Date
    Feb 2005
    Posts
    1

    become root or use your machine to hack others

    use some arbit flaw in the system and become root... then there is no saying what he can do.

    the other thing he sure can do is hack other machines from ur machine, which will have ur arse on fire.

    dont configure ur machine properly, dont implement quota, dont put a firewall, dont do logging .. ur machine is the safe place for the creative mind
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules