1

How does an Ubuntu administrator implement application whitelisting?

For example, if I create a LAMP server and I only want SSH, Apache, MySQL and PHP to be able to execute. How can I prevent any other application from running?

4
  • By "any other application" are you including binaries and scripts that users may run? Nov 26, 2014 at 19:34
  • Don't install applications you don't want to run on the server. Nov 26, 2014 at 19:40
  • @robobenklein The goal is to not have any other applications run.
    – Matthew
    Nov 26, 2014 at 20:15
  • 1
    @Matthew If you allow users to log in, they are immediately able to run processes. If a user downloads a Shell Script, then runs it, there would be no way to prevent that action without limiting the user's ability to act as a user. For example, a user with no privileges anywhere or to anything could still create a /tmp directory or paste in shell code and run a basic program from there. Nov 27, 2014 at 0:25

0

You must log in to answer this question.

Browse other questions tagged .