<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blog O' Matty &#187; Linux Security</title>
	<atom:link href="http://prefetch.net/blog/index.php/category/linux-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://prefetch.net/blog</link>
	<description>Blog O' Matty</description>
	<lastBuildDate>Wed, 16 May 2012 00:16:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Using the rsyslog MySQL plug-in to send syslog data to a SQL database</title>
		<link>http://prefetch.net/blog/index.php/2012/02/12/using-the-rsyslog-mysql-plug-in-to-send-syslog-data-to-a-sql-database/</link>
		<comments>http://prefetch.net/blog/index.php/2012/02/12/using-the-rsyslog-mysql-plug-in-to-send-syslog-data-to-a-sql-database/#comments</comments>
		<pubDate>Sun, 12 Feb 2012 16:33:01 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Logging]]></category>
		<category><![CDATA[MySQL]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5510</guid>
		<description><![CDATA[I have been experimenting with ways to better manage the logs my servers generate. Depending on who you ask, folks will recommend sending your logs to a remote syslog server that writes the logs to disk, some may recommend sending it to a log analysis tool similar to splunk, and others would recommend feeding it [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/02/12/using-the-rsyslog-mysql-plug-in-to-send-syslog-data-to-a-sql-database/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Integrating ssh-agent into your login process</title>
		<link>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/#comments</comments>
		<pubDate>Sat, 28 Jan 2012 13:35:14 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5308</guid>
		<description><![CDATA[Most of my readers utilize SSH keys to access remote systems. The security benefits are well known, and key-based authentication makes automating remote tasks a whole lot easier. When you use key-based authentication it becomes imperative to protect your private key, since a third party could access your systems if they were able to gain [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>How to figure out if a processes has been chroot()&#8217;ed</title>
		<link>http://prefetch.net/blog/index.php/2012/01/23/how-to-figure-out-if-a-processes-has-been-chrooted/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/23/how-to-figure-out-if-a-processes-has-been-chrooted/#comments</comments>
		<pubDate>Mon, 23 Jan 2012 13:07:17 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5399</guid>
		<description><![CDATA[A number of applications (e.g., custom chroot jails, openssh, vsftp, apache) support the ability to chroot themselves. To find out if a process called chroot() at startup, you can check the /proc/&#60;pid&#62;/root entry for the process. For non-chrooted processes this entry will point to /: $ ps auxwww &#124; grep [s]endmail root 3643 0.0 0.1 [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/23/how-to-figure-out-if-a-processes-has-been-chrooted/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using exec-shield to protect your Linux servers from stack, heap and integer overflows</title>
		<link>http://prefetch.net/blog/index.php/2012/01/14/using-exec-shield-to-protect-your-linux-servers-from-stack-heap-and-integer-overflows/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/14/using-exec-shield-to-protect-your-linux-servers-from-stack-heap-and-integer-overflows/#comments</comments>
		<pubDate>Sat, 14 Jan 2012 15:08:12 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Linux Utilities]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5213</guid>
		<description><![CDATA[I&#8217;ve been a long time follower of the OpenBSD project, and their amazing work on detecting and protecting the kernel and applications from stack and heap overflows. Several of the concepts that were developed by the OpenBSD team were made available in Linux, and came by way of the exec-shield project. Of the many useful [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/14/using-exec-shield-to-protect-your-linux-servers-from-stack-heap-and-integer-overflows/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Securing your Linux vsftp installations by locking down your server and chroot()&#8217;ing users</title>
		<link>http://prefetch.net/blog/index.php/2011/04/21/securing-your-linux-vsftp-installations-by-locking-down-your-server-and-chrooting-users/</link>
		<comments>http://prefetch.net/blog/index.php/2011/04/21/securing-your-linux-vsftp-installations-by-locking-down-your-server-and-chrooting-users/#comments</comments>
		<pubDate>Thu, 21 Apr 2011 15:50:44 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=4357</guid>
		<description><![CDATA[As much as we all hate FTP and the insecurities of the protocol, I&#8217;ve given up on the fact that it&#8217;s going to be retired anytime soon. A lot of old legacy systems (mainframes, AS400s, etc.) don&#8217;t support SSH, but they so support the infamous FTP protocol. These two factors force a lot of companies [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2011/04/21/securing-your-linux-vsftp-installations-by-locking-down-your-server-and-chrooting-users/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Forcing your Linux users to use strong passwords</title>
		<link>http://prefetch.net/blog/index.php/2010/12/29/forcing-your-linux-users-to-use-strong-passwords/</link>
		<comments>http://prefetch.net/blog/index.php/2010/12/29/forcing-your-linux-users-to-use-strong-passwords/#comments</comments>
		<pubDate>Wed, 29 Dec 2010 15:42:53 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=4007</guid>
		<description><![CDATA[All SysAdmins know the importance of using strong passwords. These are the life blood of our systems, since a weak password will allow an adversary to enter our systems with a minimal amount of work. There are dozens of tools that can generate strong passwords, as well as a number of tools that can be [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2010/12/29/forcing-your-linux-users-to-use-strong-passwords/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Firewalling a Linux NFS server with iptables</title>
		<link>http://prefetch.net/blog/index.php/2010/11/02/firewalling-a-linux-nfs-server-with-iptables/</link>
		<comments>http://prefetch.net/blog/index.php/2010/11/02/firewalling-a-linux-nfs-server-with-iptables/#comments</comments>
		<pubDate>Wed, 03 Nov 2010 00:44:33 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux NFS]]></category>
		<category><![CDATA[Linux Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=3917</guid>
		<description><![CDATA[When it comes to firewalling services, NFS has to be one of the most complex to get operational. By default the various NFS services (lockd, statd, mountd, etc.) will request random port assignments from the portmapper (portmap), which means that most administrators need to open up a range of ports in their firewall rule base [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2010/11/02/firewalling-a-linux-nfs-server-with-iptables/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Using TCP Wrappers to protect Linux and Solaris services</title>
		<link>http://prefetch.net/blog/index.php/2010/10/30/using-tcp-wrappers-to-protect-linux-services/</link>
		<comments>http://prefetch.net/blog/index.php/2010/10/30/using-tcp-wrappers-to-protect-linux-services/#comments</comments>
		<pubDate>Sat, 30 Oct 2010 16:23:40 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Solaris Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=3902</guid>
		<description><![CDATA[I have been using tcp wrappers for years, and it&#8217;s a very simple way to allow and deny network access to applications. TCP wrapper functionality is built into the system libwrap.so module, which various applications are linked against. To see if a given application supports tcp wrappers, you can use the ldd utility: $ ldd [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2010/10/30/using-tcp-wrappers-to-protect-linux-services/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>A couple useful tidbits about the Linux /dev/random and /dev/urandom devices</title>
		<link>http://prefetch.net/blog/index.php/2010/10/17/a-couple-useful-tidbits-about-the-linux-devrandom-and-devurandom-devices/</link>
		<comments>http://prefetch.net/blog/index.php/2010/10/17/a-couple-useful-tidbits-about-the-linux-devrandom-and-devurandom-devices/#comments</comments>
		<pubDate>Sun, 17 Oct 2010 15:17:44 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=3870</guid>
		<description><![CDATA[Linux contains two devices that provide a source of entropy for the system. The first device is /dev/random, and the second is /dev/urandom. /dev/random is a character special device that provides a source of entropy until the system-wide entropy pool is exhausted, at which time it will block until additional entropy is available. /dev/urandom is [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2010/10/17/a-couple-useful-tidbits-about-the-linux-devrandom-and-devurandom-devices/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Forcing your Linux users to wait after they input an incorrect password</title>
		<link>http://prefetch.net/blog/index.php/2010/08/31/forcing-your-linux-users-to-wait-after-they-input-an-incorrect-password/</link>
		<comments>http://prefetch.net/blog/index.php/2010/08/31/forcing-your-linux-users-to-wait-after-they-input-an-incorrect-password/#comments</comments>
		<pubDate>Tue, 31 Aug 2010 20:20:54 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=3795</guid>
		<description><![CDATA[When I run through my security checklist after building a host, one of the first things I change is the login fail delay. This option allows you to force a user to wait a given number of microseconds after a login failure before being able to try another password. For applications that perform brute force [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2010/08/31/forcing-your-linux-users-to-wait-after-they-input-an-incorrect-password/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>

