Questions tagged [hardening]
43 questions
0
votes
2 answers
In Tomcat 9, can AutoDeploy be turned off programatically
We use tomcat 9 with spring/hibernate. Obviously its a production code and the tomcat manager is not there. For the tomcat hardening we are trying to turn off the "autoDeploy" via code dynamically. We can do that in server.xml as :

Karthik S
- 91
- 1
- 10
0
votes
0 answers
How are configuration files read from /etc/sysctl.d/ directory?
I was reading the CIS CentOS Linux 7 Benchmark v.2.2.0, section-1.5.1(Ensure core dumps are restricted). Its remediation sections says:
Add the following line to /etc/security/limits.conf or a /etc/security/limits.d/*
file:
hard core 0
I have a…

nayasa
- 31
- 8
0
votes
1 answer
Regarding GKE optimised image hardening
We tried to harden the gke optimized image (gke-1.15.11) for our cluster. We took an ssh into the node instance and made the cis porposed changes in the /home/kubernetes/kubelet-config.yaml file and ran kubebench to check if all the conditions have…
0
votes
1 answer
Will Memory Tagging Extension be implemented in x86?
Memory Tagging Extension is a promissing memory protection feature.
Does any one know if it is planed to be ported to x86?
For those who don't know it:
1) https://en.wikichip.org/wiki/arm/mte
2) https://www.youtube.com/watch?v=lLEcbXidK2o

gustavo
- 96
- 1
- 6
0
votes
0 answers
CakePHP 3.7 - Problem with setUser and sessions in server
The problem is that the function setUser in usersController is returning null, and doesn't login the user.
The query to DB is getting the user, and i can see the fields without problems. The session file in /tmp/sessions is created ok & if we change…

Julian Butti
- 1
- 2
0
votes
1 answer
FORK not working for users other than root user
I am having a systemd service file where I am setting my user and group different from root. This service file is used by a application to run. The application uses fork() in its code to start a new process.
The issue is the fork command is not…

Megha Jayaswal
- 23
- 2
0
votes
1 answer
.htaccess rules for Wordpress in subdirectory
I use such .htaccess rules to hardening wordpress and redirect to https:
# Block IPS for login
Require all denied
Require ip xxx.xx.xx.xx
Require ip xxx.xx.xx.xx
#Protect wp-config
Require all…

Ugenijus
- 75
- 6
0
votes
1 answer
Wordpress Default Directory Change
I am trying to change the default path of the WP default directories such as wp-content, wp-include etc to avoid wpscan.
I have tried using plugin would it possible to perform the same using manual techniques. I am using apache as a web server.
An…

user2670674
- 87
- 3
- 14
-1
votes
0 answers
Different Shells for Different Users and disable desktop for specific user
On Windows 10 LTSC.
I created a user "test" and want to launch an application or script for it instead of explorer.exe, and user test should not be able to launch desktop. The only application or script it can launch is the one designated to it.
And…
-1
votes
1 answer
Disable everything but a hidden command for root access
linux security and root access question....
I'm setting up a server that has a validator node running on it for a substrate-based blockchain. I was trying to harden the security of my server. I set up ufw for all ports but those necessary for the…

brent-franklin
- 76
- 8
-1
votes
1 answer
OSX Error when signing Adobe AIR hardened Runtime
I am having trouble with my Mac Adobe AIR app only after signing with hardening the runtime.
If I don't harden the runtime, it works fine.
The program may start but will eventually generate a memory fault.

Derek Wade
- 697
- 8
- 11
-1
votes
2 answers
Throw exception while apktool try to decompile/unarchive my apk
I tried to harden my APK from reverse engineering. I know it's impossible preventing decompile APK but I saw some APKs used a trick to throw exception apktool in decompile process (Not just APK tool, all of decompiler like QARK can't return a…

learner
- 61
- 1
- 7
-3
votes
0 answers
Window Server 2019 Hardening Scripts changes the registry but these changes do not appear on group policy editor GUI
When I run "Windows Server 2019 Hardening Script" in Powershell, changes only appear in the registry but not the local policy editor GUI and some of them are being reverted after gpupdate /force.
because there are about 500 items that need to…

ashkanyo
- 81
- 6