Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 67 guests and 2 members online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow restricting certain files to be created
EH-Net
May 24, 2012, 04:39:37 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: restricting certain files to be created  (Read 3914 times)
0 Members and 3 Guests are viewing this topic.
lovewadhwa
Newbie
*
Offline Offline

Posts: 16


View Profile
« on: June 25, 2007, 06:37:31 AM »

hi
i want that my software deparment should not be able to create files with particular extensions.As for instance i don't want that they shud be able to create tars in the web root directory.Is there a software 4 that or a solution to it.
regards
Love Wadhwa
RedHat Certified Engg
Logged

jimbob
Guest
« Reply #1 on: June 25, 2007, 07:26:26 AM »

There are a few ways you can do this. I have previously written a script to upload file to a web server which would check for permitted file extensions and locations. You may also be able to control what files you can deploy from a content management system if you're using one. if you are giving you software department FTP access to the web root you should probably rethink how you load web content.

Some security software (e.g. anti-malware applications) have functionality to limit file system writes, probably acting at the kernel level by hooking system calls. McAfee Entercept can for example stop root writing to a given file, a mechanism which is used to prevent privileged users from tampering with it.

Rather than looking for a software solution consider creating a policy and enforcing it by checking the contents of your web root every so often. A scripted solution could check daily for example and report any non-whitelisted file extenstions.

Regards,
Jim
Logged
lovewadhwa
Newbie
*
Offline Offline

Posts: 16


View Profile
« Reply #2 on: June 27, 2007, 12:41:57 AM »

Hi
Thanx a lot 4 ur response.wud try to make a script for this.
Logged

lovewadhwa
Newbie
*
Offline Offline

Posts: 16


View Profile
« Reply #3 on: July 20, 2007, 01:35:24 AM »

Hi
I have worked with it .But my problem is that if i do make the script then all i can do is look for restricted files and then delete them.While what i reuire is the safety at very first end.Mean to say that if i do have to restrict tar files from being created in htdocs then i should have a solution that if any software personnel tries to create tar of something in htdocs it should not be allowed at very that instant.My htdocs has write permissions for the software department and i do have the situation that i cannot change the permissions.I do have to restrict them somehow.Kindly help me regardin the same once again.
Hoping a quick and positive response from ur side.
Logged

jimbob
Guest
« Reply #4 on: July 22, 2007, 04:05:44 AM »

Hi,
It sounds like you need to create a policy how content is uploaded to your web servers and then create a solution based on it. If the users currently use FTP for (heaven forbid) FPE to load content, you should restrict access to these services and provide another way to upload content. One such way would be to create a script that takes a source directory, checks the contents and then uploads it to the web server.

The benefits of scripting the file upload is that you can enforce rules such as acceptable file extensions and you can also provide an audit trail of who uploaded a file and when it occurred.

Regards,
Jim
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.191 seconds with 22 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.