Re: [cobalt-users] CERT Advisory a few things I did

[craig <craig@xxxxxxxxxxxxx>]

>
> > Disable gcc except for root
>
> Will this effect any programs that the server runs from a script on the
> web?? Say items like web stats or email programs that are web based??


No this should not affect them at all as they are allready made and
installed

The idea behind this is if you did get compromized then the worms cou;ld
not compile themselfs



>
> What about clients that are installing programs to their directories?? This
> would effectively shut them down wouldn't it??
>

Only if they have shell access and you allow them to comple there own code
IF they are just running perl scripts php etc then this would not be a
problem it would only be a problem if they have to run make


And with the raqFxxk script around giving shell would not be a good idea