Re: Secure Web-Based Administration

From: Christian Meier (email2chris@gmx.net)
Date: 01/24/03

  • Next message: Marek Bialoglowy: "Re: Secure Web-Based Administration" 
    Date: Fri, 24 Jan 2003 19:33:27 +0100
From: Christian Meier <email2chris@gmx.net>
To: focus-linux@securityfocus.com

    > I would like to create some web pages/scripts (probably using PHP
    > since I use it for a lot of other things) to assist me in
    > administering my linux machine. What are some ways that I can
    > execute certain administrative commands (such as
    > ifconfig,iwconfig,route,scripts in my /etc/init.d/ directory,
    > etc...) as root?

    Would it be more secure, if you would write all changes that should be
    made to a database and those commands were executed by a script that
    is run as cronjob?

    I know a script (confix for webhosters) that is working this way, but
    I don't know if it is really more secure or has other reasons.

    bye bye,
    chris

    Relevant Pages

    • Re: Will Linux become as vulnerable as MS ??
      ... > beeing vulnerable to viruses. ... > that they know are executable, and execute intentionally. ... >> Linux, each distro is a little different, and even within the distro, ... > Since clicking on a script is easier than typing it's name, ...
      (comp.os.linux.security)
    • Re: [Full-Disclosure] ColdFusion cross-site scripting security vulnerability of an error page
      ... > execute the arbitrary javascript and HTML code which the attacker ... > It is possible to display the contents transmitted from the client ... > cross-site scripting attack can be executed. ... the script will be executed when the script for an attack ...
      (Full-Disclosure)
    • CGIscript.net - csMailto.cgi - Remote Command Execution
      ... CGIscript.net - csMailto.cgi - Remote Command ... csMailto is a perl cgi formmail script developed by ... execute command on server and mail output to anyone ...
      (Bugtraq)
    • Re: Extracting data from an XML to put into a constant
      ... ExecuteGlobal "Const cnUB = 9" ... The following script causes the same error. ... Ordinary variables and constants defined with execute statements have ... no value until their defining statement is executed at run time. ...
      (microsoft.public.scripting.vbscript)
    • Re: HTTPContext Session and worker thread (Fire and Forget)
      ... Once the page is loaded on the client side, make the request via script ... To kick of the job you insert record into tblJobs with MessageIn having ... not execute job cause it was grabbed by other pooling thread between step 1 ...
      (microsoft.public.dotnet.framework.aspnet)