Comments on: How to Ninja http://blog.bodhizazen.net/linux/how-to-ninja/ A LAMP in the Samsara Tue, 07 Sep 2010 07:48:01 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Add a ninja to help protect your server | Linux Shtuff http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1667 Add a ninja to help protect your server | Linux Shtuff Mon, 19 Apr 2010 07:22:13 +0000 http://blog.bodhizazen.net/?p=368#comment-1667 [...] RESOURCES How to Ninja and How to Ninja – Ubuntu 10.04 by [...] [...] RESOURCES How to Ninja and How to Ninja – Ubuntu 10.04 by [...]

]]> By: bodhi.zazen http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1646 bodhi.zazen Fri, 16 Apr 2010 21:01:21 +0000 http://blog.bodhizazen.net/?p=368#comment-1646 @ Mark_in_Hollywood : The Ubuntu/Debian ninja package has been updated, so after reviewing your post, I posted an updated how to ninja : http://blog.bodhizazen.net/linux/how-to-ninja-ubuntu-10-04/ @ Mark_in_Hollywood :

The Ubuntu/Debian ninja package has been updated, so after reviewing your post, I posted an updated how to ninja :

http://blog.bodhizazen.net/linux/how-to-ninja-ubuntu-10-04/

]]> By: Shadows of epiphany » Blog Archive » How to Ninja – Ubuntu 10.04 http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1645 Shadows of epiphany » Blog Archive » How to Ninja – Ubuntu 10.04 Fri, 16 Apr 2010 20:59:49 +0000 http://blog.bodhizazen.net/?p=368#comment-1645 [...] This blog is an update to my original post on ninja here [...] [...] This blog is an update to my original post on ninja here [...]

]]> By: Mark_in_Hollywood http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1641 Mark_in_Hollywood Thu, 15 Apr 2010 18:09:59 +0000 http://blog.bodhizazen.net/?p=368#comment-1641 My /var/log/ninja.log is blank or empty. Is that correct? Running your: root@karmic# sudo -u nobody /bin/bash bash: /root/.bashrc: Permission denied nobody@karmic$ whoami nobody nobody@karmic$ sudo -i [sudo] password for nobody: Killed nobody@karmic$ Killed root@karmic# gave me slightly different results than what you show. My /var/log/ninja.log is blank or empty. Is that correct?

Running your:

root@karmic# sudo -u nobody /bin/bash
bash: /root/.bashrc: Permission denied

nobody@karmic$ whoami
nobody

nobody@karmic$ sudo -i
[sudo] password for nobody: Killed
nobody@karmic$ Killed
root@karmic#

gave me slightly different results than what you show.

]]> By: gnumax http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1441 gnumax Sun, 10 Jan 2010 06:04:46 +0000 http://blog.bodhizazen.net/?p=368#comment-1441 Thank you for sharing this howto, I liked the tool and working properly. log: [Sun Jan 10 07:01:57 2010] NEW ROOT PROCESS: su[21536] ppid=21414 uid=0 gid=1000 [Sun Jan 10 07:01:57 2010] - ppid uid=1000(xxxxx ) gid=1000 ppid=17568 [Sun Jan 10 07:01:57 2010] + xxxxx is in magic group, all OK! ;)---- Thank you for sharing this howto, I liked the tool and working properly.

log:

[Sun Jan 10 07:01:57 2010] NEW ROOT PROCESS: su[21536] ppid=21414 uid=0 gid=1000
[Sun Jan 10 07:01:57 2010] – ppid uid=1000(xxxxx ) gid=1000 ppid=17568
[Sun Jan 10 07:01:57 2010] + xxxxx is in magic group, all OK!

;)—-

]]> By: Billy http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1152 Billy Mon, 26 Oct 2009 04:25:08 +0000 http://blog.bodhizazen.net/?p=368#comment-1152 Awesome! nice ninja tutorial Awesome! nice ninja tutorial

]]> By: severity1 http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1145 severity1 Mon, 26 Oct 2009 01:35:04 +0000 http://blog.bodhizazen.net/?p=368#comment-1145 neat! neat!

]]> By: Francois Marier http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-1109 Francois Marier Sun, 11 Oct 2009 09:41:11 +0000 http://blog.bodhizazen.net/?p=368#comment-1109 Hopefully this procedure will be simpler in future versions of the package: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550545 Hopefully this procedure will be simpler in future versions of the package:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550545

]]> By: bodhi.zazen http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-805 bodhi.zazen Mon, 08 Jun 2009 20:21:23 +0000 http://blog.bodhizazen.net/?p=368#comment-805 My understanding is that an interval of 1 instructs ninja to scan all active processes every 1 second (0 = continuous or no delay). As with all security measures, best to test it out. In terms of the log, I believe there will be a log of the process as it is started, but again check it out. I fyou wish, you can change the logging options. My understanding is that an interval of 1 instructs ninja to scan all active processes every 1 second (0 = continuous or no delay).

As with all security measures, best to test it out.

In terms of the log, I believe there will be a log of the process as it is started, but again check it out. I fyou wish, you can change the logging options.

]]> By: bla http://blog.bodhizazen.net/linux/how-to-ninja/comment-page-1/#comment-799 bla Mon, 08 Jun 2009 09:05:27 +0000 http://blog.bodhizazen.net/?p=368#comment-799 Hi, Nice extra security measure! I followed your guide. Installed it on my home server and it started eating 25% of my cpu cycles! So i set the interval to 1. Now it just eats 2%. This is on a 1.2Ghz Celeron. Does this mean that processes that execute as root an die immediately could go unnoticed? Hi,

Nice extra security measure!

I followed your guide. Installed it on my home server and it started eating 25% of my cpu cycles!
So i set the interval to 1. Now it just eats 2%.
This is on a 1.2Ghz Celeron.

Does this mean that processes that execute as root an die immediately could go unnoticed?

]]>