[B! linux][security] issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

issm id:issm

linuxã¨securityã«é–¢ã™ã‚‹issmã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (23)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ITéƒ¨é–€ãŒé ã‚’æŠ±ãˆã‚‹ã€ŒCentOSçµ‚äº†å•é¡Œã€ã€€ãªãœä¼æ¥ã¯å¾Œç¶™OSã«ã€ŒAlmaLinuxã€ã‚’é¸ã¶ã®ã‹
ITéƒ¨é–€ãŒé ã‚’æŠ±ãˆã‚‹ã€ŒCentOSçµ‚äº†å•é¡Œã€ã€€ãªãœä¼æ¥ã¯å¾Œç¶™OSã«ã€ŒAlmaLinuxã€ã‚’é¸ã¶ã®ã‹ï¼šç§»è¡Œå…ˆã®æ¤œè¨Žã§ç•™æ„ã™ã¹ãã“ã¨ ç„¡å„Ÿã®Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚‹ã€ŒCentOSã€ã®æ›´æ–°ãŒ2024å¹´6æœˆã«çµ‚äº†ã—ãŸã€‚ãã®ã¾ã¾ä½¿ã„ç¶šã‘ã‚‹ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã«ãªã‚‹ãŒã€æœ‰å„Ÿã®ã€ŒRed Hat Enterprise Linuxã€ã¸ã®ç§»è¡Œã¯æ¤œè¨¼ã‚‚å«ã‚ã€ã‚³ã‚¹ãƒˆé¢ã§èª²é¡ŒãŒã‚ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚å¤šã„ã€‚æ—¥æœ¬èªžã‚µãƒãƒ¼ãƒˆã‚‚æ¬²ã—ã„ã¨ã“ã‚ã ã€‚ç¾å®Ÿçš„ãªç§»è¡Œå…ˆã‚’è§£èª¬ã™ã‚‹ã€‚ ç„¡å„Ÿã®Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦æ™®åŠã—ã¦ã„ã‚‹ã€ŒCentOSã€ã‚’åˆ©ç”¨ã™ã‚‹ä¼æ¥ãŒä»Šã€å²è·¯ã«ç«‹ãŸã•ã‚Œã¦ã„ã‚‹ã€‚ã€ŒCentOS Linux 8ã€ã¯ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒ2021å¹´æœ«ã«æ‰“ã¡åˆ‡ã‚‰ã‚Œã€ã€ŒCentOS Linux 7ã€ã®æ›´æ–°ãŒ2024å¹´6æœˆã«çµ‚äº†ã—ãŸã€‚ä»Šå¾Œã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ‘ãƒƒãƒã‚’é©ç”¨ã—ã¦å®‰å…¨ã«ä½¿ã†ãŸã‚ã«ã¯ã€ãƒ™ãƒ³ãƒ€ãƒ¼ãŒæœ‰å„Ÿã§æä¾›ã—ã¦ã„ã‚‹CentOSã®å»¶é•·
issm 2024/10/09
centos

linux

security

oss
ãƒªãƒ³ã‚¯
XZ Utilsã®è„†å¼±æ€§ CVE-2024-3094 ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2024å¹´3æœˆ29æ—¥ã€Linuxå‘ã‘åœ§ç¸®ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã¨ã—ã¦åºƒãåˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹XZ Utilsã«æ·±åˆ»ãªè„†å¼±æ€§ CVE-2024-3094 ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦ã€ç ”ç©¶è€…ã‚„ãƒ™ãƒ³ãƒ€ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã¯ç‰¹å®šã®æ¡ä»¶ä¸‹ã«ãŠã„ã¦ãƒãƒƒã‚¯ãƒ‰ã‚¢ã¨ã—ã¦æ‚ªç”¨ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã‚‚ã®ã¨ã¿ã‚‰ã‚Œã¦ãŠã‚Šã€å½“è©²ã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã®ãƒ¡ãƒ³ãƒ†ãƒŠã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã‚ˆã‚Šå®Ÿè£…ã•ã‚ŒãŸã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒã®å¯èƒ½æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§ã®æ¦‚è¦ xzã¨ã¯ä¸»è¦ãªLinuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã«å«ã¾ã‚Œã‚‹æ±Žç”¨çš„ãªãƒ‡ãƒ¼ã‚¿åœ§ç¸®å½¢å¼ã§ã€ä»Šå›žå•é¡ŒãŒç¢ºèªã•ã‚ŒãŸã®ã¯ãã®åœ§ç¸®ãƒ»è§£å‡ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã§ã‚ã‚‹liblzma(API)ã‚’å«ã‚€XZ Utilsã€‚CVE-2024-3094ãŒæŽ¡ç•ªã•ã‚Œã¦ãŠã‚Šã€Red Hatã«ã‚ˆã£ã¦è©•ä¾¡ã•ã‚ŒãŸCVSSåŸºæœ¬å€¤ã¯ãƒ•ãƒ«ã‚¹ã‚³ã‚¢ã®10ã€‚å½±éŸ¿ã‚’å—ã‘ãŸãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ãƒªãƒ³ã‚¯ã—ã¦ã„ã‚‹ssh
issm 2024/04/01
oss

security

linux
ãƒªãƒ³ã‚¯
ãƒ•ãƒªãƒ¼ï¼†ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ãƒ•ã‚¡ã‚¤ãƒ¤ãƒ¼ã‚¦ã‚©ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªã€ŒPortmasterã€ãŒv1.0.0ã«ï¼Windows/Linuxå¯¾å¿œ
issm 2022/11/15
security

tool

windows

linux
ãƒªãƒ³ã‚¯
ã»ã¼ã™ã¹ã¦ã®Linuxã®ãƒ–ãƒ¼ãƒˆãƒãƒ¼ãƒ€ãƒ¼ã«è„†å¼±æ€§
issm 2020/07/31
linux

security
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹Bashè„†å¼±æ€§ã®å³æ»æ¡ä»¶ #ShellShock - ã‚ã‚‚ãŠãã°
æ¡ä»¶1. /bin/shã®å®Ÿä½“ãŒbashã®ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ RHEL CentOS Scientific Linux Fedora Amazon Linux openSUSE Arch Linux (è‡ªã‚‰è¨å®šã—ãŸå ´åˆ: Debian, Ubuntu) æ¡ä»¶2. å‹•ä½œç’°å¢ƒ CGI (ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã‚ã‚ŠãŒã¡ãªCGIãƒ¢ãƒ¼ãƒ‰ã®PHPç‰ã‚‚å«ã‚€) Passenger(Ruby) æ¡ä»¶3. ãƒ—ãƒã‚°ãƒ©ãƒ å†…å®¹ Passengerã¯å…¨æ»äº¡ *1 systemã‚„ `command`ã€ '| /usr/lib/sendmail' ãªã©ã§å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œ *2 PHPã®mailã‚„mb_send_mailã€ãã®ä»–ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ç‰ã‚’ä»‹ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ *3 ä»¥ä¸‹ã¯æ¡ä»¶1ãŒä¸è¦ æ˜Žç¤ºçš„ã«bashã‚’å‘¼ã¶ å…ˆé ã§ #!/bin/bash ã‚„ #!/usr/bin/env bash ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œ (rbenv
issm 2014/09/26
bash

security

linux
ãƒªãƒ³ã‚¯
bashã®è„†å¼±æ€§(CVE-2014-6271) #ShellShock ã®é–¢é€£ãƒªãƒ³ã‚¯ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
bashã«è„†å¼±æ€§ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦é¨’ãŽã«ãªã£ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯CVE-2014-6271ã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ #è¨˜è¼‰å†…å®¹ã«ã¤ã„ã¦ã€èª¤ã£ã¦ã„ã‚‹ã€è¿½è¨˜ã—ãŸæ–¹ãŒã„ã„ç‰æƒ…å ±ãŒã”ã–ã„ã¾ã—ãŸã‚‰@piyokangoã¾ã§ã”é€£çµ¡ãŠé¡˜ã„ã—ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ± è„†å¼±æ€§ã®æ„›ç§° ShellShock Bashbug CVEç•ªå· Bashå‘¨ã‚Šã§ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹CVEã¯6ã¤ã€‚ãã®å†…è©³ç´°ãŒä¸æ˜Žãªã®ãŒ2ã¤ã€‚(CVE-2014-6277,CVE-2014-6278) CVE ç™ºè¦‹è€… æƒ³å®šè„…å¨ ç‰¹è¨˜ CVE-2014-6271 Stephane Chazelasæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ ShellShockã®ç™ºç«¯ã¨ãªã£ãŸãƒã‚°ã€‚ CVE-2014-7169 Tavis Ormandyæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ CVE-2014-6271ä¿®æ£æ¼ã‚Œã«ã‚ˆã‚‹è„†å¼±æ€§ CVE-2014-7186 Redhat DoS ãƒ¡ãƒ¢ãƒªç ´å£Š(Out-of-Bo
issm 2014/09/25
bash

security

linux
ãƒªãƒ³ã‚¯
Blog: bashã®è„†å¼±æ€§ãŒãƒ¤ãƒã™ãŽã‚‹ä»¶ â€“ x86-64.jp - ãã‚Šã™ç ”
Browse by time: December 2018 (1) December 2016 (1) December 2015 (1) January 2015 (1) September 2014 (2) July 2014 (2) April 2014 (1) February 2014 (1) January 2014 (3) December 2013 (2) September 2013 (3) June 2013 (1) May 2013 (1) April 2013 (1) March 2013 (2) February 2013 (5) ã‚„ã£ã¨æ›´æ–°ã™ã‚‹æ°—ã«ãªã£ãŸã€‚ ã‚‚ãã˜ 0. ç”£æ¥ã§èª¬æ˜Ž 1. ç†è«–ç·¨ 2. æ”»æ’ƒç·¨ 3. ãƒ‘ãƒƒãƒ 4. çµè«– 0. ç”£æ¥ã§èª¬æ˜Ž bashãŒ ã‚¢ãƒ›ã§ åœ°çƒãŒãƒ¤ãƒã‚¤ 1. ç†è«–ç·¨ bashã®é–¢æ•°æ©Ÿèƒ½ã¯ã€ç’°å¢ƒå¤‰æ•°ã®ä¸ã§ã‚‚ä½¿ãˆã‚‹ä»•æ§˜ã«ãªã£ã¦ã„ã¾ã™
issm 2014/09/25
bash

security

linux
ãƒªãƒ³ã‚¯
ç„¡åŠ¹ãªURLã§ã™
ç„¡åŠ¹ãªURLã§ã™ã€‚ ãƒ—ãƒã‚°ãƒ©ãƒ è¨å®šã®åæ˜ å¾…ã¡ã§ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã—ã°ã‚‰ãæ™‚é–“ã‚’ãŠã„ã¦å†åº¦ã‚¢ã‚¯ã‚»ã‚¹ã‚’ãŠè©¦ã—ãã ã•ã„ã€‚
issm 2014/09/25
bash

security

linux
ãƒªãƒ³ã‚¯
Bash specially-crafted environment variables code injection attack
This article was originally published on the Red Hat Customer Portal. The information may no longer be current. Update 2014-09-30 19:30 UTC Questions have arisen around whether Red Hat products are vulnerable toÂ CVE-2014-6277Â andÂ CVE-2014-6278.Â We have determined thatÂ RHSA-2014:1306,Â RHSA-2014:1311,Â andÂ RHSA-2014:1312Â successfully mitigate the vulnerability and no additional actions need to be ta
issm 2014/09/25
bash

security

linux
ãƒªãƒ³ã‚¯
UNIXç³»OSã®ã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹ã‚¤ã‚¿ã‚ºãƒ©é›† - yuyarinã®æ—¥è¨˜
éšæ™‚è¿½åŠ ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚’ç«‹ã¡ä¸Šã’ãŸã¾ã¾å¸ã‚’é›¢ã‚Œã‚‹ã¨ãƒžã‚·ãƒ³ã«ã‚¤ã‚¿ã‚ºãƒ©ã•ã‚Œã‚‹ã“ã¨ãŒã‚ˆãã‚ã‚‹ï¼Žã¨ã¯ã„ãˆã‚·ãƒ£ãƒ¬ã«ãªã‚‰ãªã„ã‚¤ã‚¿ã‚ºãƒ©ã¯ã—ã¦ã‚‚ç¬‘ãˆãªã„ã®ã§ï¼ŒåŸºæœ¬çš„ã«ã¯æ•™è‚²çš„ã«åŠ¹æžœãŒã‚ã£ã¦è¢«å®³ã®å‡ºãªã„ã‚‚ã®ã—ã‹å®Ÿéš›ã«ã¯ã—ãªã„ï¼Ž ã˜ã‚ƒã‚ï¼ŒãŸã¨ãˆ root ã˜ã‚ƒãªãã¦ã‚‚ã©ã“ã¾ã§ãˆã’ã¤ãªã„ã“ã¨ãŒã§ãã‚‹ã®ã‹*1ï¼Œä»Šå›žã¯ã¡ã‚‡ã£ã¨è€ƒãˆã¦ã¿ãŸãƒ¦ãƒ¼ã‚¶æ¨©é™ã§ã§ãã‚‹é…·ã„ã‚¤ã‚¿ã‚ºãƒ©ã‚’ç´¹ä»‹ã™ã‚‹ï¼Žå¯¾è±¡ã¯ãƒªãƒ¢ãƒ¼ãƒˆãƒã‚°ã‚¤ãƒ³ã™ã‚‹ UNIX ç³» OS ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒï¼Œä¸»ã« Ubuntu ã§ã‚ã‚‹ï¼Ž ls ãŒ sl æ–¹æ³• alias ls=sl sl ã‚’æœŸå¾…ã—ãŸã¨ã„ã†æ„è¦‹ãŒå¤šã‹ã£ãŸã®ã§æŽ²è¼‰ï¼ŽæŽ²è¼‰ã—ãªã‹ã£ãŸã®ã¯ sl ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ãªã„ç’°å¢ƒãŒå¤šãï¼Œã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¯ root æ¨©é™ãŒå¿…è¦ã«ãªã‚‹ã‹ã‚‰ï¼Žå¾Œè¿°ã®ãƒã‚¤ãƒŠãƒªã‚’æŒã¡è¾¼ã‚“ã§ãƒ‘ã‚¹ã‚’é€šã™æ–¹æ³•ã‚’ä½¿ãˆã°ã§ããªã„ã“ã¨ã¯ãªã„ã‹ã‚‚ï¼Ž ã‚¨ãƒ‡ã‚£ã‚¿ãƒ¼ãŒå…¨éƒ¨ ed æ–¹æ³• alias nano=ed alias
issm 2011/07/15
linux

neta

security
ãƒªãƒ³ã‚¯
iptablesã®è¨å®š
iptablesã®è¨å®š [ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤ Redhat/Fedora] ä½œæˆ : 2005/01/27 ä¿®æ£ : 2011/05/05 "ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤"ã®æ¤œç´¢ iptables ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°ã€NA(P)Tã‚’è¨å®šã™ã‚‹ãŸã‚ã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã€‚ ç’°å¢ƒã«ã‚ˆã£ã¦ã¯ã‚«ãƒ¼ãƒãƒ«ã®å†æ§‹ç¯‰ãŒå¿…è¦ã«ãªã‚‹ãŒã€Fedora Core 3ã§ã¯ä¸è¦ã€‚ å‚è€ƒã«ãªã‚‹æ–‡æ›¸ netfilter.orgã®ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ã€‚ ã‚ã¨ã€manpageã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« FTPã‚µã‚¤ãƒˆã¾ãŸã¯FedoraCore3 CD Disk1ã‹ã‚‰RPMãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ã‚‚ã‚‰ã£ã¦ãã¦ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€‚ # rpm -Uvh iptables-1.2.11-3.1.i386.rpm yumã‚’ä½¿ã£ã¦ã‚‚ã‚ˆã„ã€‚ # yum install iptables chkconfigãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã§ã€ã‚µãƒ¼ãƒèµ·å‹•æ™‚ã«ã‚µãƒ¼ãƒ“ã‚¹ãŒé–‹å§‹ã™ã‚‹ã‚ˆã†è¨å®šã™ã‚‹ã€‚ # chkconfig i
issm 2011/05/14
iptables

linux

security
ãƒªãƒ³ã‚¯
ã“ã‚Œãã‚‰ã„ã‚„ã£ã¨ã‘ã€€ã€œLinuxã‚µãƒ¼ãƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã€œ - nabeã®é›‘è¨˜å¸³
ç®¡ç†ä¸ã®ã‚µãƒ¼ãƒã§è¡Œã£ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šã‚’å…¬é–‹ã—ã¾ã™ã€‚æœ¬å½“ã¯ã“ã†ã„ã†ã“ã¨ã‚’å…¬é–‹ã™ã‚‹ã®ã¯ã‚ˆã‚ã—ããªã„ã®ã§ã™ãŒã€è„†å¼±ã‚µãƒ¼ãƒãŒæ°¾æ¿«ã—ã¦ã„ã‚‹ç¾çŠ¶ãã“ãŒè¸ã¿å°ã¨ãªã£ã¦sshã‚¢ã‚¿ãƒƒã‚¯ã•ã‚Œã‚‹ã®ã‚‚è¿·æƒ‘æ¥µã¾ã‚Šãªã„ã®ã§ã€æœ€ä½Žé™ã‚„ã£ã¨ã‘ã¨ã„ã†å†…å®¹ã§ã¾ã¨ã‚ã¾ã—ãŸã€‚*1 èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ iptables/Firewallã®è¨å®š iptablesã®ä¸èº« limit-burstã«ã¤ã„ã¦ hashlimitã«ã¤ã„ã¦ hosts.allow/hosts.deny(TCP Wrapper)ã®è¨å®š sshdã®è¨å®š ãã®ä»–ã®è¨å®š Apacheã®è¨å®š Postfixã®è¨å®š Dovecotã®è¨å®š ã¾ã¨ã‚ èµ·å‹•ã‚µãƒ¼ãƒ“ã‚¹ã¨æ¦‚è¦ Apache (www) sshd smtp/pop bind (DNS) ntpd ã„ãã¤ã‹ã®æ³¨æ„ç‚¹ã€‚ sftpã§ååˆ†ãªã®ã§ftpdã¯ä½¿ã‚ãªã„ã€‚WinSCPç‰ã‚’ä½¿ãˆã°ffftpã«ä¾å˜ã™ã‚‹å¿…è¦ã¯ãªã„ã€‚*2
issm 2011/04/29
linux

security

iptables
ãƒªãƒ³ã‚¯
sshã§ã€ŒPermission denied (publickey,gssapi-with-mic).ã€ãŒå‡ºãŸæ™‚ - ä»Šæ—¥ã¨ã¯é•ã†æ˜Žæ—¥
Linux VPSï¼ ä½¿ãˆã‚‹ãã£ã¨ã‚’å¥‘ç´„ã€‚ã§ã€sshã§å…¬é–‹éµã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ãƒªãƒ¢ãƒ¼ãƒˆå´ã«é€ä¿¡ã—ãŸå¾Œã€ç¹‹ã”ã†ã¨ã—ãŸã‚‰ Permission denied (publickey,gssapi-with-mic). ã¨è¨€ã‚ã‚Œã¦æ€’ã‚‰ã‚ŒãŸã€‚/var/log/secure(ãƒªãƒ¢ãƒ¼ãƒˆå´)ã‚’å‚ç…§ã™ã‚‹ã¨ Authentication refused: bad ownership or modes for directory /home/[ãƒ¦ãƒ¼ã‚¶ãƒ¼å]/.ssh ã¨ã®ã“ã¨ã€‚èª¿ã¹ã¦ã¿ãŸã‚‰ãƒªãƒ¢ãƒ¼ãƒˆå´ã®.sshãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®PermissionãŒ744ã«ãªã£ã¦ã„ãŸã€‚ã“ã‚Œã‚’700ã«å¤‰æ›´ã€‚æ¬¡ã„ã§ã«å…¬é–‹éµãƒ•ã‚¡ã‚¤ãƒ«ã®Permissionã‚‚644ã‹ã‚‰600ã«å¤‰æ›´ã€‚ã§ã€ãƒªãƒˆãƒ©ã‚¤ã—ãŸã‚‰ä¸Šæ‰‹ãã„ãã¾ã™ãŸã€‚
issm 2010/11/12
linux

ssh

security
ãƒªãƒ³ã‚¯
Â» ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨: ã‚¨ã‚¹ã‚ãƒ¥ãƒ¼ãƒ“ã‚ºãƒ ãƒ©ãƒœ Blog
Recent Entries ã‚»ã‚ãƒ¥ã‚¢ãªã‚µãƒ¼ãƒã‚’ä½œã‚‹ãŸã‚ã«æœ€ä½Žé™ã‚„ã£ã¦ãŠãã“ã¨ Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡ºAPIãƒ©ã‚¤ãƒ–ãƒ©ãƒª ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ GoogleAnalyticsAPI on EC-CUBE åœŸæ—¥ã§ä½œã‚‹ã‚³ãƒ³ãƒ‘ã‚¤ãƒ© OPEN ERPã«æŒ‘æˆ¦ï¼“ OPEN ERPã«æŒ‘æˆ¦ï¼’ OPEN ERPã«æŒ‘æˆ¦ ERPã¯ãŸãã•ã‚“ã‚ã‚Œã©ãƒ»ãƒ»ãƒ» OpenGLã§3Dã€ã‚„ã£ã¦ã¿ã‚ˆã† Recent Comments No Responses. Recent Trackbacks ãƒ†ã‚¹ãƒˆé§†å‹•é–‹ç™º ï¼ˆtest driven development: TDDï¼‰ ã®ã™ã™ã‚ 06/11 Â» Yahooã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰æŠ½å‡º... ã¿ãªã•ã‚“ã¯ã‚µãƒ¼ãƒã‚’ç®¡ç†ã™ã‚‹ã¨ãã«ã€ä½•ã‚’ä¸€ç•ªæ°—ã«ã—ã¾ã™ã‹ï¼Ÿ äººã«ã‚ˆã£ã¦ç¨‹åº¦ã®å·®ã¯ã‚ã‚‹ã®ã§ã—ã‚‡ã†ãŒã€èª°ã‚‚ãŒæ°—ã«ãªã‚‹ã®ãŒã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€ã§ã—ã‚‡
issm 2009/06/20
server

security

ã¾ã¨ã‚

linux
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®Linuxãƒžã‚·ãƒ³ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ã™ã‚‹ãŸã‚ã«çŸ¥ã£ã¦ãŠãã¹ãiptablesã®ãƒ«ãƒ¼ãƒ«10é¸
æ–‡ï¼šJack Wallenï¼ˆSpecial to TechRepublicï¼‰Â ç¿»è¨³æ ¡æ£ï¼šæ‘ä¸Šé›…ç« ãƒ»é‡Žå´Žè£•å 2009-03-03 08:00 iptablesã‚’ãƒžã‚¹ã‚¿ãƒ¼ã™ã‚‹ã«ã¯æ™‚é–“ãŒã‹ã‹ã‚‹ã‚‚ã®ã®ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹åŸºæœ¬çš„ãªãƒ‹ãƒ¼ã‚ºã‚’æº€ãŸã™ã“ã¨ã®ã§ãã‚‹ã„ãã¤ã‹ã®ãƒ«ãƒ¼ãƒ«ã‚’çŸ¥ã£ã¦ãŠãã ã‘ã§ã€ã‚ãªãŸã®Linuxã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å‘ä¸Šã•ã›ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚æœ¬è¨˜äº‹ã§ã¯ã€ãã®æ‰‹å§‹ã‚ã¨ãªã‚‹é‡è¦ãªãƒ«ãƒ¼ãƒ«ã‚’è§£èª¬ã™ã‚‹ã€‚ iptablesã¯ã€Linuxãƒžã‚·ãƒ³ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«ã™ã‚‹ãŸã‚ã®å¼·åŠ›ãªãƒ„ãƒ¼ãƒ«ã ã€‚ã¨ã¯è¨€ã†ã‚‚ã®ã®ã€ãã®æ©Ÿèƒ½ã®å¤šã•ã«ã¯åœ§å€’ã•ã‚Œã¦ã—ã¾ã„ãŒã¡ã§ã‚ã‚‹ã€‚ãã—ã¦ã€ã‚³ãƒžãƒ³ãƒ‰ã®æ§‹é€ ã‚’ã—ã£ã‹ã‚Šã¨ç†è§£ã—ã€ãƒžã‚·ãƒ³ã®ã©ã®éƒ¨åˆ†ã‚’ã©ã®ã‚ˆã†ã«ã‚»ã‚ãƒ¥ã‚¢ã«ã™ã¹ãã‹ã‚’æŠŠæ¡ã—ãŸå¾Œã§ã‚ã£ã¦ã‚‚ã€ã‚„ã‚„ã“ã—ã„ã“ã¨ã«å¤‰ã‚ã‚Šã¯ãªã„ã€‚ã—ã‹ã—ã€iptablesã®è‰¯ã„ã¨ã“ã‚ã¯ã€æ¥µã‚ã¦åºƒã„ãã®é©ç”¨ç¯„å›²ã«ã‚ã‚‹ã€‚ã“ã®ãŸã‚ã€iptablesã®ãƒ«ãƒ¼ãƒ«ã®ã„ãã¤ã‹ã‚’
issm 2009/03/03
iptables

network

linux

security
ãƒªãƒ³ã‚¯
æ—¥æœ¬ç™ºã‚»ã‚ãƒ¥ã‚¢OSã®TOMOYOãŒLinuxã‚«ãƒ¼ãƒãƒ«ã«æ¨™æº–æŽ¡ç”¨
æ—¥æœ¬ç™ºã®ã‚»ã‚ãƒ¥ã‚¢OSã§ã‚ã‚‹TOMOYO LinuxãŒLinuxã‚«ãƒ¼ãƒãƒ«ã«ãƒžãƒ¼ã‚¸ï¼ˆçµ±åˆï¼‰ã•ã‚Œã‚‹ã“ã¨ãŒç¢ºå®Ÿã«ãªã£ãŸã€‚2009å¹´2æœˆ12æ—¥ï¼ŒTOMOYO LinuxãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ãƒ¡ãƒ³ãƒ†ãƒŠï¼ˆç®¡ç†è€…ï¼‰ã§ã‚ã‚‹James Morrisæ°ã®ãƒªãƒã‚¸ãƒˆãƒªï¼ˆã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ç®¡ç†ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ï¼‰ã«çµ±åˆã•ã‚ŒãŸã€‚ä»Šå¾Œãƒ†ã‚¹ãƒˆãŒè¡Œã‚ã‚Œï¼Œ2009å¹´ç§‹ã«ã‚‚Linuxã‚«ãƒ¼ãƒãƒ«æœ¬ä½“ã«çµ±åˆã•ã‚Œã‚‹ã¨è¦‹ã‚‰ã‚Œã‚‹ã€‚ ã‚»ã‚ãƒ¥ã‚¢OSã¯ï¼ŒOSã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’ç´°åˆ†åŒ–ã—åŽ³æ ¼ã«ç®¡ç†ã™ã‚‹ã“ã¨ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’é«˜ã‚ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã€‚ã‚»ã‚ãƒ¥ã‚¢OSã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ã§ï¼Œä»®ã«ä¸æ£ä¾µå…¥ã•ã‚ŒãŸã¨ã—ã¦ã‚‚è¢«å®³ã‚’ä¸€éƒ¨ã«ç•™ã‚ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚TOMOYO Linuxã¯ï¼ŒNTTãƒ‡ãƒ¼ã‚¿ã®åŽŸç”°å£æ „æ°ã‚‰ãŒé–‹ç™ºã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ã‚¢OSã€‚å¦ç¿’ãƒ¢ãƒ¼ãƒ‰ã§ã®æ“ä½œã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒãƒªã‚·ãƒ¼ã‚’è‡ªå‹•ç”Ÿæˆã™ã‚‹æ©Ÿèƒ½ãªã©ãŒç‰¹å¾´ã€‚ æ—¥æœ¬ã‚»ã‚ãƒ¥ã‚¢OSãƒ¦ãƒ¼ã‚¶ãƒ¼ä¼š ä»£è¡¨ã®æµ·å¤–æµ©å¹³æ°ã«ã‚ˆã‚Œã°ï¼Œä»Šå¾ŒTOMOYO Linux
issm 2009/02/12
linux

security
ãƒªãƒ³ã‚¯
SSHç·å½“ã‚Šæ”»æ’ƒ(Brute Force Attack)ã®å‚¾å‘ã‹ã‚‰åˆ©ç”¨ã‚’é¿ã‘ãŸã„ãƒ¦ãƒ¼ã‚¶å - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
æŸæ‰€ã§é‹ç”¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®è©±ãªã‚“ã§ã™ãŒã€å‰²ã¨"SSH Brute Force Attack"ãŒãƒ’ãƒ‰ãã€å¯¾ç–ã‚’è¡Œã‚ãªã„ã¨ã„ã‘ãªã„ã‚“ã§ã™ãŒã€ãã®å‰ã«ã›ã£ã‹ããªã®ã§ã€æ”»æ’ƒè€…ãŒã©ã‚“ãªãƒ¦ãƒ¼ã‚¶åã§ãƒã‚°ã‚¤ãƒ³ã‚’è©¦ã¿ã¦ã„ã‚‹ã‹ã®çµ±è¨ˆã‚’å–ã£ã¦ã¿ã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€ãƒã‚°ã‚¤ãƒ³ã«å¤±æ•—ã—ãŸå›žæ•°ã€ä¸Šä½10ãƒ¦ãƒ¼ã‚¶åã®ä¸€è¦§ã‚’å–å¾—ã™ã‚‹ãƒ¯ãƒ³ãƒ©ã‚¤ãƒŠãƒ¼ã€‚ # cat /var/log/secure* | grep 'Invalid' | awk '{print $8}' | sort | uniq -c | sort -nr | head -n 10çµæžœã¯ã€ã ã„ãŸã„äºˆæƒ³é€šã‚Šã§ã™ãŒã€â†“ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚ 1474 admin 1399 test 1059 123456 751 oracle 703 user 570 guest 416 web 380 www 370 info 359 backupã¨ã„ã†ã‚ã‘ã§ã€"admin"ã¨ã‹"
issm 2009/02/04
security

ssh

server

linux
ãƒªãƒ³ã‚¯
http://ibio.jp/index.php?DenyHosts
issm 2009/01/21
linux

security

ssh
ãƒªãƒ³ã‚¯
Sambaã‚µãƒ¼ãƒæ§‹ç¯‰ã€5ã¤ã®ã¹ã‹ã‚‰ãšï¼š2008å¹´ç‰ˆï¼ˆ1/2ï¼‰
ï¼ è‹¥è‘‰ãƒžãƒ¼ã‚¯ç®¡ç†è€…ã«æ§ã’ã‚‹ ï¼ Linuxã‚„UNIXã‚’Windowsã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚µãƒ¼ãƒï¼ãƒ—ãƒªãƒ³ãƒˆã‚µãƒ¼ãƒã¨ã—ã¦ã—ã¾ã†ã“ã¨ãŒã§ãã‚‹ã€ŒSambaã€ã¯ã€æ‰‹è»½ã«ãƒ•ã‚¡ã‚¤ãƒ«å…±æœ‰ç’°å¢ƒã‚’æ§‹ç¯‰ã™ã‚‹ã“ã¨ãŒã§ãã€ã‚µãƒ¼ãƒç®¡ç†å…¥é–€ã«ã‚‚ã´ã£ãŸã‚Šã§ã™ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®é–¢é€£æƒ…å ±ã‚‚è±Šå¯Œã§ã™ãŒã€ã—ã£ã‹ã‚Šå‡ºæ‰€ã‚’ç¢ºã‹ã‚ãªã„ã¨èª¤ã£ãŸè¨å®šã‚’æ‹›ãæã‚ŒãŒã‚ã‚Šã¾ã™ã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãƒ»ãƒ†ã‚¯ãƒŽãƒã‚¸æ ªå¼ä¼šç¤¾ ä»£è¡¨å–ç· å½¹ ãƒãƒ¼ãƒ•ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒˆ å°ç”°åˆ‡ è€•å¸ 2008/4/22 Windowsã¨ã®ãƒ•ã‚¡ã‚¤ãƒ«äº¤æ›ã‚’æ‰‹è»½ã«å®Ÿç¾ã™ã‚‹Samba Sambaã¯ã€Linuxã‚„UNIXã‚’Windowsã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚µãƒ¼ãƒï¼ãƒ—ãƒªãƒ³ãƒˆã‚µãƒ¼ãƒã¨ã—ã¦ã—ã¾ã†ã“ã¨ãŒã§ãã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ˆOSSï¼‰ã§ã™ã€‚Sambaã®å°Žå…¥ã«ã‚ˆã£ã¦ã€Linuxã¨WindowsãŒæ··åœ¨ã™ã‚‹ç’°å¢ƒã§ã€æ‰‹è»½ã«æƒ…å ±å…±æœ‰ã‚’è¡Œãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ Sambaã¯ã€å¤§ããä»¥ä¸‹ã®4ã¤ã®æ©Ÿèƒ½ã‚’æä¾›ã—ã¾
issm 2008/04/25
samba

security

linux

server
ãƒªãƒ³ã‚¯
Linux/Apacheç³»Webã‚µã‚¤ãƒˆã‚’ç‹™ã£ãŸæ£ä½“ä¸æ˜Žã®æ”»æ’ƒã«ã¤ã„ã¦ã®ç¾çŠ¶å ±å‘Š | OSDN Magazine
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£èª¿æŸ»ä¼šç¤¾ã®Finjanã‹ã‚‰ä»Šæœˆä¸æ—¬ã«å‡ºã•ã‚ŒãŸãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ã«ã¦ã€ã‚ã‚‹ä¸€ç¾¤ã®Webã‚µãƒ¼ãƒã«ä½•ã‚‰ã‹ã®ä¸æ£æ“ä½œã‚’æ–½ã•ã‚ŒãŸçµæžœã€ãã“ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å¤šæ•°ã®Windowsãƒžã‚·ãƒ³ãŒé€£æ—¥ãƒžãƒ«ã‚¦ã‚§ã‚¢ã«æ„ŸæŸ“ã•ã›ã‚‰ã‚Œç¶šã‘ã¦ãŠã‚Šã€ã“ã†ã—ã¦æ±šæŸ“ã•ã‚ŒãŸãƒžã‚·ãƒ³ã¯æœªã æ£ä½“ã®ã¤ã‹ã‚ã¬çŠ¯ç½ªçµ„ç¹”ã®æ„å›³ã™ã‚‹ãƒœãƒƒãƒˆã¨ã—ã¦æ´»å‹•ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã¨ã„ã†è¦å‘ŠãŒå ±ã˜ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã“ã®å•é¡Œã®ç™ºè¦šå¾Œã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã®ScanSafeãŠã‚ˆã³SecureWorksã‚‚ã“ã®ä»¶ã«å–ã‚Šçµ„ã‚“ã§ã¯ã„ã‚‹ãŒã€æ„ŸæŸ“ã•ã‚ŒãŸã‚µã‚¤ãƒˆæ•°ã®æ£ç¢ºãªæ•°ã¯æœªã æŠŠæ¡ã—ã‹ãã¦ã„ã‚‹ã¨ã®ã“ã¨ã ã€‚ãŸã ã—ä»Šã®ã¨ã“ã‚ã€è¢«å®³ã«ã‚ã£ãŸã‚µãƒ¼ãƒã¯LinuxãŠã‚ˆã³Apacheã®çµ„ã¿åˆã‚ã›ã¨ã„ã†ç‚¹ã«ãŠã„ã¦ã€ã™ã¹ã¦ã®ãƒ¬ãƒãƒ¼ãƒˆãŒä¸€è‡´ã—ã¦ã„ã‚‹ã€‚ ServerTune.comã®æŽ²è¼‰è¨˜äº‹ã«ã‚ã‚‹èª¬æ˜Žã§ã¯ã€ä»Šå›žã®æ‰‹å£ã§ã¯ä¸æ£æ“ä½œã‚’å—ã‘ãŸã‚µãƒ¼ãƒã«ãƒ«ãƒ¼ãƒˆã‚ãƒƒãƒˆã®ä¸€ç¨®ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ãŠã‚Šã€ãã‚ŒãŒæ£è¦ã®ã‚·ã‚¹ãƒ†
issm 2008/01/28
linux

server

security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸