LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   where is "user apache" shell log? (http://www.linuxquestions.org/questions/linux-security-4/where-is-user-apache-shell-log-83764/)

mikejrm 08-20-2003 04:13 AM

where is "user apache" shell log?
 
Hi,

When someone use PHP to use shell, the commands are done by user APACHE. How can I find what this APACHE user did? any log? any bash history file? where?

Thanks

mychl 09-04-2003 09:26 PM

The use apache is given by default a false shell. Meaning no shell.

If you cat /etc/passwd|grep 'apache' you will see the last part of the line, where shell are assigned point's to /bin/false.

Hope that gets you in the right direction.....

mikejrm 09-05-2003 03:29 AM

Yes mychl, you are right. But the problem is this...

When someone use a PHP code which run shell commands, then this command is executed by user APACHE. I want to see, which commands this APACHE user executed? This is a security problem for me...

PS: I've set php_safe_mode on. Bu I need to know what they did on my machine before I set php_safe_mode option.


All times are GMT -5. The time now is 09:30 PM.