Update Securing a server rédigé par LaplongeJunior's avatar LaplongeJunior
...@@ -7,7 +7,7 @@ Ergo : As all different services may be required in normal circumstances, most m ...@@ -7,7 +7,7 @@ Ergo : As all different services may be required in normal circumstances, most m
0b) All non-root users are assumed "public access", either for missions or for open-source scripts 0b) All non-root users are assumed "public access", either for missions or for open-source scripts
Ergo : close-sourced scripts should use root access Ergo : close-sourced scripts should use root access
0c) All files restricted to root are assumed "critical data" by default 0c) All files restricted to root are assumed "critical data" by default
Ergo : open-sourced scripts should call a closed-source scripts, stored on the server, who uses root privileges to access critical data Ergo : open-sourced scripts should call a closed-source script, stored on the server, who then will use root privileges to access critical data
Threat 1 : Root access Threat 1 : Root access
1a) Any service can allow to log or lock root with the good vulnerability 1a) Any service can allow to log or lock root with the good vulnerability
... ...
......