LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 08-20-2003, 05:13 AM   #1
mikejrm
LQ Newbie
 
Registered: Aug 2003
Posts: 2

Rep: Reputation: 0
where is "user apache" shell log?


Hi,

When someone use PHP to use shell, the commands are done by user APACHE. How can I find what this APACHE user did? any log? any bash history file? where?

Thanks
 
Old 09-04-2003, 10:26 PM   #2
mychl
Member
 
Registered: Jul 2001
Location: Earth
Posts: 164

Rep: Reputation: 30
The use apache is given by default a false shell. Meaning no shell.

If you cat /etc/passwd|grep 'apache' you will see the last part of the line, where shell are assigned point's to /bin/false.

Hope that gets you in the right direction.....
 
Old 09-05-2003, 04:29 AM   #3
mikejrm
LQ Newbie
 
Registered: Aug 2003
Posts: 2

Original Poster
Rep: Reputation: 0
Yes mychl, you are right. But the problem is this...

When someone use a PHP code which run shell commands, then this command is executed by user APACHE. I want to see, which commands this APACHE user executed? This is a security problem for me...

PS: I've set php_safe_mode on. Bu I need to know what they did on my machine before I set php_safe_mode option.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
New SQUID user: How to clear the "access.log" and "store.log" automatically? yuzuohong Linux - Networking 2 12-02-2006 06:37 AM
how to log user commands in xterm without using "script" command lilachb Linux - General 2 08-28-2005 02:08 AM
user cannot log in "Authentication Failed" Fedora Core 4 clayharryman Linux - Security 8 08-04-2005 07:23 PM
"Real time" Apache log filtering with Perl skelly Programming 1 07-01-2004 03:24 PM
"Real-time" Apache Log Filtering skelly Linux - Software 1 06-30-2004 03:16 PM


All times are GMT -5. The time now is 03:25 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration