Tagged Questions
39
votes
9answers
4k views
Risks of giving developers admin rights to their own PCs
I need to convince my internal IT department to give my new team of developers admin rights to our own PCs. They seem to think this will create some security risk to the network. Can anyone explain ...
13
votes
1answer
507 views
Are there Linux rootkits circulating that directly modify the kernel (without modules)?
It has been said, over and over, that disabling dynamic kernel module loading on Linux increases security. I understand why people give this advice, but I've always assumed that a bad guy could ...
5
votes
1answer
2k views
Windows task manager can see all processes as non administrator without permission
On Windows Server 2008 R2 operating as a standard user, when I open Task Manager I can see all the processes from different users on the system. I have the option to click "Show all processes" which ...
5
votes
1answer
607 views
Does Fedora 15 still use suid bits?
I heard that Fedora 15 will not use suid bits. Is that true?
Is the suid bit a security design bug?
7
votes
2answers
760 views
Practical non-government uses of Biba, Bell-LaPadula, etc. models
For example, the Biba model is now hanging out in current versions of Windows. Things downloaded from the Internet are tagged as such. Internet (low) stuff can't alter user (medium) stuff which isn't ...
10
votes
3answers
350 views
Given SSH access, what should I do to protect a server and monitor (dangerous) user actions?
Context:
Small business, mostly a software house for web applications but also some desktop software.
Many external collaborators, so a variety of outside users with access to the servers.
Single ...
5
votes
1answer
623 views
Windows mandatory access control: How to remove “mandatory level” label from the file?
1) How to remove "mandatory level" label from the file?
I have two files, for first icalcs return
Mandatory Label\Medium Mandatory Level:(NW)
for second icalcs doesn't return anything (that means ...
11
votes
3answers
3k views
Prevent acccess to the C drive on Windows systems
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
7
votes
3answers
451 views
What prevents this exploit from working (unix SUID)?
If I have a user on a unix system where Im allowed to create new files, what prevents me from downloading an executable file onto that system which is already SUID'ed to root on a different system?
...
4
votes
2answers
140 views
How is the password prompt going to protect me from ruining my computer?
On Unix based systems, I'm often prompted to enter my password before installing or running a program.
Why does this protect me?
If I'm running a kiosk, I understand that a password might prevent ...
7
votes
2answers
271 views
How is UAC a security improvement?
What does User Account Control on Windows offer in terms of security? It's just an extra click to potentially run a virus.
