Apache and suexec issue that wont let me run my python script

Νικόλαος Κούρας nikos.gr33k at gmail.com
Wed Jun 5 13:02:48 EDT 2013


Τη Τετάρτη, 5 Ιουνίου 2013 7:33:50 μ.μ. UTC+3, ο χρήστης Chris Angelico έγραψε:
> On Wed, Jun 5, 2013 at 9:19 PM, Νικόλαος Κούρας <nikos.gr33k at gmail.com> wrote:
> 
> > Τη Τετάρτη, 5 Ιουνίου 2013 2:14:34 μ.μ. UTC+3, ο χρήστης Heiko Wundram έγραψε:
> 
> >> Am 05.06.2013 13:07, schrieb οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½ οΏ½οΏ½οΏ½οΏ½οΏ½οΏ½:
> 
> >>
> 
> >> >Btw, since history doesnt show me his history comamnds when he logged in
> 
> >> >from .au(why not really?), how can i tell what exactly did he do when he
> 
> >> >logged on to the server?
> 
> >
> 
> >> As root has full access to your system (i.e., can change file contents
> >> and system state at will), and you gave him root access: you can't. And
> >> he made sure to remove things such as .bash_history and the syslog
> >> contents, I guess. At least that's what I'd have done to prove a point.

> In fact, I didn't even bother fiddling with syslog. All I did was
> .bash_history. Of course, I wasn't worried about you getting my IP
> addresses (one of them is public anyway, and the other isn't mine any
> longer than I'm using it), and nothing I did there was sufficiently
> serious to be worth hiding, but I just did the history so I could
> point out how easy this is.

So, by executing .bash_history commands issued are cleared. okey.
What abiut 'syslog' that Heiko mentioned. Since you didnt fiddle with syslog can the latter show me what commands have been executed, files opened, commands given, services started-stopped etc? 

> and nothing I did there was sufficiently serious to be worth hiding.

Actually i believ you, because if you had malice in mind you could 'rm -rf /' or deface frontpages which you didnt do.

But is there a way for me to see what commands have been issued? syslog perhaps as ia sk above?
Since you didn't hurm the system why the need of wipe clean bash's history?



More information about the Python-list mailing list