[B! linux][ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] deloreanmc12ã®ãƒ

deloreanmc12 id:deloreanmc12

linuxã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹deloreanmc12ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Bashã‚³ãƒ¼ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ï¼ˆShellshockï¼‰ã®ä¿®æ£æ–¹æ³• | HPCã‚·ã‚¹ãƒ†ãƒ ã‚ºã¯ã™ã¹ã¦ã®ç ”ç©¶é–‹ç™ºè€…ã«è¨ˆç®—åŠ›ã‚’æä¾›ã—ã¾ã™ã€‚
Linuxãªã©UNIXç³»ã®OSã«å«ã¾ã‚Œã‚‹bashã‚·ã‚§ãƒ«ï¼ˆOSã®ä¸€éƒ¨ã¨ã—ã¦ãƒ—ãƒã‚°ãƒ©ãƒ ã®èµ·å‹•ã‚„åˆ¶å¾¡ãªã©ã‚’è¡Œã†ãƒ—ãƒã‚°ãƒ©ãƒ ï¼‰ã«è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã¯æ¨™æº–çš„ãªLinux OSã®é‹ç”¨ã«ãŠã„ã¦ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯çµŒç”±ã§æ‚ªç”¨ã§ãã€å¤–éƒ¨ã‹ã‚‰æ£æ„çš„ãªã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã¾ã™ã€‚è©³ç´°ã«ã¤ã„ã¦ã¯ä»¥ä¸‹URLã‚’ã”ç¢ºèªä¸‹ã•ã„ã€‚ https://access.redhat.com/ja/articles/1210893 https://www.ipa.go.jp/security/ciadr/vul/20140926-bash.html ã“ã®bashã®è„†å¼±æ€§ã¯2014å¹´9æœˆä»¥å‰ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸå…¨ã¦ã®Linux OSã«ãŠã„ã¦è©²å½“ã—ã¾ã™ã€‚ ãƒ»RedHat Enterprise Linux 6 / CentOS 6 bash-4.1.2-15.el6 ä»¥å‰ã®ã‚‚ã®ãŒè©²å½“ã—ã¾ã™ã€‚ bash-4.1.2-15.el6_5
deloreanmc12 2015/09/29
è„†å¼±æ€§

linux

Shellshock

bash

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å±ãªã™ãŽã‚‹Bashã®è„†å¼±æ€§ã€ŒShellshockã€ã€æ·±åˆ»ãªäº‹æ…‹ã«ãªã‚‹å‰ã«å¯¾ç–ã‚’
2014å¹´9æœˆ25æ—¥ä»¥é™ã€Linuxãªã©ã®UNIXç³»OSã®å¤šãã«å«ã¾ã‚Œã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã€ŒGNU Bashï¼ˆä»¥ä¸‹ã€bashï¼‰ã€ã«ã€éžå¸¸ã«å±é™ºãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸï¼ˆé–¢é€£è¨˜äº‹ï¼šã€ŒBashã€ã«é‡å¤§ãªè„†å¼±æ€§ï¼‰ã¨ã—ã¦ã€OSãƒ™ãƒ³ãƒ€ãƒ¼ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ãƒ³ãƒ€ãƒ¼ãªã©ãŒæ³¨æ„ã‚’å‘¼ã³ã‹ã‘ã¦ã„ã‚‹ï¼ˆå›³1ï¼‰ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã•ã‚ŒãŸWebã‚µãƒ¼ãƒãƒ¼ã‚„ãƒ«ãƒ¼ã‚¿ãƒ¼ãªã©ã§ã¯ã€ç´°å·¥ã‚’æ–½ã•ã‚ŒãŸãƒ‡ãƒ¼ã‚¿ã‚’é€ã‚‰ã‚Œã‚‹ã ã‘ã§ä¹—ã£å–ã‚‰ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚å®Ÿéš›ã€ä»Šå›žã®è„†å¼±æ€§ã‚’ç‹™ã£ãŸæ”»æ’ƒãŒç¢ºèªã•ã‚Œã¦ã„ã‚‹ã€‚ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã¯ã€å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚„æ©Ÿå™¨ã®æ´—ã„å‡ºã—ã¨å¯¾ç–ã®å®Ÿæ–½ãŒæ€¥å‹™ã ã€‚ bashã¨ã¯ã€ã‚·ã‚§ãƒ«ï¼ˆshellï¼‰ã¨å‘¼ã°ã‚Œã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã®ä¸€ç¨®ã€‚ã‚·ã‚§ãƒ«ã¯ã€ãƒ¦ãƒ¼ã‚¶ã¨OSã‚’ä»²ä»‹ã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã€‚ä¾‹ãˆã°ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå…¥åŠ›ã—ãŸã‚³ãƒžãƒ³ãƒ‰ã‚’è§£é‡ˆã—ã¦å®Ÿè¡Œã™ã‚‹ã€‚ã‚·ã‚§ãƒ«ã«ã¯ã€Œcshã€ã‚„ã€Œtcshã€ãªã©è¤‡æ•°ã®ç¨®é¡žãŒå˜åœ¨ã™ã‚‹ã€‚ä»Šå›žè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸbashã¯åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚·ã‚§
deloreanmc12 2014/09/29
è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux
ãƒªãƒ³ã‚¯
ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³æ°ã‚‚æ„›ç”¨ã€è¶…åŒ¿åOSï½¢Tailsï½£ã¨ã¯ï¼Ÿ
ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³æ°ã‚‚æ„›ç”¨ã€è¶…åŒ¿åOSï½¢Tailsï½£ã¨ã¯ï¼Ÿ2014.04.16 20:0020,799 ç¦ç”°ãƒŸãƒ› è‡ªåˆ†ã®èº«ã¯è‡ªåˆ†ã§å®ˆã‚‹ã€ãã‚“ãªäººã®ãŸã‚ã«ã€‚ ç±³å›½æ”¿åºœã«ã‚ˆã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ã‚¹ãƒ‘ã‚¤æ´»å‹•ã‚’å‘Šç™ºã—ãŸã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³æ°ã¯ã€è‡ªåˆ†è‡ªèº«ã®é€šä¿¡å†…å®¹ã‚’å‚å—ã•ã‚Œãªã„ã‚ˆã†ç´°å¿ƒã®æ³¨æ„ã‚’æ‰•ã£ã¦ã„ã¾ã™ã€‚ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã®OSã‚‚ã€ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ä¿è·ã«ç‰¹åŒ–ã—ãŸè¶…ã‚»ã‚ãƒ¥ã‚¢ãªãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®Linuxã€Tailsãªã‚‹OSã‚’ä½¿ã£ã¦ã„ã¾ã™ã€‚Tailsã¯USBãƒ¡ãƒ¢ãƒªã«åŽã¾ã£ã¦ã©ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã§ã‚‚å‹•ã‹ã™ã“ã¨ãŒã§ãã€ã—ã‹ã‚‚ä½¿ã£ãŸå½¢è·¡ãŒæ®‹ã‚‰ãªã„ã‚“ã§ã™ã€‚ USBãƒ¡ãƒ¢ãƒªä¸Šã§å‹•ãLinuxã¯ç‰¹ã«æ–°ã—ã„ã‚‚ã®ã˜ã‚ƒã‚ã‚Šã¾ã›ã‚“ãŒã€Tailsã®ç‰¹é•·ã¯å¾¹åº•çš„ãªåŒ¿åæ€§ã®ä¿è·ã«ã‚ã‚Šã¾ã™ã€‚ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³æ°ã‚„ã€å½¼ã®è³‡æ–™ã«åŸºã¥ã„ã¦NSAã‚’å‘Šç™ºã—ãŸã‚¸ãƒ£ãƒ¼ãƒŠãƒªã‚¹ãƒˆã®ã‚°ãƒ¬ãƒ³ãƒ»ã‚°ãƒªãƒ¼ãƒ³ã‚¦ã‚©ãƒ«ãƒ‰æ°ã¨ã„ã£ãŸäººç‰©ã¯ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ©ã‚¤ãƒ•ã®å®‰å…¨æ€§ã‚’ç¢ºä¿ã™ã‚‹ãŸ
deloreanmc12 2014/04/17
USBãƒ¡ãƒ¢ãƒª

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux
ãƒªãƒ³ã‚¯
iptablesã§é‰„å£ï¼Ÿã®å®ˆã‚Šã‚’å®Ÿç¾ã™ã‚‹3ã¤ã®Tipsï½œTechRacho by BPSæ ªå¼ä¼šç¤¾
iptablesã§ã‚µãƒ¼ãƒã‚’å®ˆã‚‹ã¨ãã«çŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã“ã¨ã‚’3ã¤ç´¹ä»‹ã—ã¾ã™ 1. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(IPã‚¢ãƒ‰ãƒ¬ã‚¹ã”ã¨) hash_limitã‚’ä½¿ã„ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šç‰¹å®šãƒ›ã‚¹ãƒˆã‹ã‚‰ã®å¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã€DoSæ”»æ’ƒã‚’ç·©å’Œã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ ä¾‹ 2. æŽ¥ç¶šå›žæ•°ã‚’åˆ¶é™ã™ã‚‹(ã‚µãƒ¼ãƒ“ã‚¹ã”ã¨) limitã‚’ä½¿ã£ã¦åˆ¶é™ã—ã¾ã™ ã“ã‚Œã«ã‚ˆã‚Šå¤šæ•°ã®ãƒ›ã‚¹ãƒˆã‹ã‚‰ã®æ”»æ’ƒã€DDoSæ”»æ’ƒã‚’ç·©å’Œã—ã¾ã™ limitã‚’ä½¿ã£ãŸåˆ¶é™ã¯å…¨ãƒ›ã‚¹ãƒˆãŒç‰ã—ãåˆ¶é™ã‚’å—ã‘ã‚‹ãŸã‚ã€sshç‰ã«è¨å®šã™ã¹ãã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ï¼ˆæ”»æ’ƒã‚’å—ã‘ã¦ã„ã‚‹é–“ã¯è‡ªåˆ†ãŸã¡ã‚‚åˆ¶é™ã•ã‚Œã‚‹ãŸã‚ï¼‰ Webã‚µãƒ¼ãƒãŒå¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã§è½ã¡ãã†ãªå ´åˆã¯ä½¿ãˆã‚‹ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ï¼Ÿ ä¾‹ 3. æŽ¥ç¶šIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’é™å®šã™ã‚‹ IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®å›½åˆ¥å‰²ã‚Šå½“ã¦ã‚’APNICç‰ã‹ã‚‰å–å¾—ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½œã‚Šã¾ã™ ã“ã®æ‰‹ã®ãƒ«ãƒ¼ãƒ«ã¯é•·ããªã‚‹ã®ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼å®šç¾©ãƒã‚§ã‚¤ãƒ³ã«ã—ãŸã»ã†ãŒè¦‹ã‚„ã™ããªã‚Šã¾ã™ ä¾‹ ã‚ã¨ã¯ã“ã‚“ãªæ„Ÿã˜ã®ã‚¹ã‚¯
deloreanmc12 2013/05/01
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

iptables

linux

network

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
Webã‚µãƒ¼ãƒã«æ„ŸæŸ“ã™ã‚‹æ‚ªè³ªãªApacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæ¨ªè¡Œã€ä¸æ£ãƒ‡ãƒ¼ã‚¿ã‚’ã‚µã‚¤ãƒˆã«åŸ‹ã‚è¾¼ã‚€
ä¸æ£ãªApacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€ŒLinux/Chapro.Aã€ã¯ã€æ„ŸæŸ“ã—ãŸWebã‚µãƒ¼ãƒã‹ã‚‰ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ä¾›çµ¦å…ˆã®Webãƒšãƒ¼ã‚¸ã«ä¸æ£ãªiframeã‚’æŒ¿å…¥ã™ã‚‹ç›®çš„ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ Webã‚µãƒ¼ãƒã«æ„ŸæŸ“ã™ã‚‹æ‚ªè³ªãªApacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒæ¨ªè¡Œã—ã€æ‚ªè³ªãªã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’Webãƒšãƒ¼ã‚¸ã«é€ã‚Šè¾¼ã‚€ç›®çš„ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã®ESETãŒ12æœˆ20æ—¥ã®ãƒ–ãƒã‚°ã§ä¼ãˆãŸã€‚ åŒç¤¾ã«ã‚ˆã‚‹ã¨ã€ã“ã®Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€ŒLinux/Chapro.Aã€ã¯ã€æ„ŸæŸ“ã—ãŸWebã‚µãƒ¼ãƒã‹ã‚‰ã€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ä¾›çµ¦å…ˆã®Webãƒšãƒ¼ã‚¸ã«ä¸æ£ãªiframeã‚’æŒ¿å…¥ã™ã‚‹ç›®çš„ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚ã“ã®iframeã«ã‚ˆã£ã¦ã€éŠ€è¡Œæƒ…å ±ãªã©ã‚’ç›—ã¿å‡ºã™æ‚ªåé«˜ã„ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒZbotã€ï¼ˆåˆ¥åZeuSï¼‰ã®äºœç¨®ã‚’ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚·ã‚¹ãƒ†ãƒ ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã›ã‚‹ä»•æŽ›ã‘ã ã¨ã„ã†ã€‚ Linux/Chapro.Aã¯ã•ã‚‰ã«ã€ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã‹ã‚‰èº«ã‚’éš ã™ãŸã‚ã®ã•ã¾ã–ã¾ãªæ©Ÿèƒ½ã‚’å®Ÿè£…ã—ã¦ã„
deloreanmc12 2012/12/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux
ãƒªãƒ³ã‚¯
1