[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Attack using php+apache



On Sun, Nov 16, 2003 at 05:19:06AM +0100, Bernd Eckenfels wrote:
> In article <[🔎] 20031116024448.GA4896@localhost> you wrote:
> > So what to do now?  If /tmp was mounted ro, then none of the attacker's
> > tools could run (from this attack anyway)
> 
> Read Only tmp? :) Now that is a funny idea. I can understand to restrict tmp
> to root or to remove it totally, but why would one want to have it read
> only?

Oops, thinko.  I meant noexec, but you probably realised that.

Dion.

-- 
Dion's Maxim:  If you are ever surprised at just how stupid people can be,
               then you haven't understood Dion's Maxim.



Reply to: