Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Apr 2014 13:30:39 -0500
From:      Dan Nelson <dnelson@allantgroup.com>
To:        "Kenta S." <kentas@hush.com>
Cc:        Daniel Corbe <corbe@corbe.net>, freebsd-questions@freebsd.org
Subject:   Re: Disable w / who
Message-ID:  <20140402183039.GB23453@dan.emsphone.com>
In-Reply-To: <20140402154140.4EC5C608CA@smtp.hushmail.com>
References:  <20140402034019.A9BE1608AE@smtp.hushmail.com> <ygfsipws5so.fsf@corbe.net> <20140402152956.GA23453@dan.emsphone.com> <20140402154140.4EC5C608CA@smtp.hushmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Apr 02), Kenta S. said:
> On 04/02/2014 at 11:30 AM, "Dan Nelson" <dnelson@allantgroup.com> wrote:
> >
> >Also remember to remove /var/run/utx.active, /var/log/utx.*,
> >the netstat, sockstat, and lsof commands, 
> 
> "sysctl security.bsd.see_other_uids=0" solves this, doesn't it?
> FreeBSD doesn't include lsof.

Interesting.  It looks like that sysctl does do what you need - hiding
processes and TCP sockets owned by other users.  You'll still need to
remove/protect any logfiles that might store IP addresses, like the utx.*
files and other files in /var/log/ .

-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140402183039.GB23453>