1
Task 1 of 5
Loading...
PERMISSIONS DRILL
Scenario
A security scan flagged world-writable files and SUID binaries on the production server. Fix each insecure permission before the attacker exploits them.
0 completed
0%
Solution Cheat Sheet
Task 1 — Lock down credentials file
chmod 600 /tmp/creds.txt
Task 2 — Remove SUID bit
chmod u-s /usr/local/bin/backup
Task 3 — Set shared directory perms
chmod 755 /var/shared
Task 4 — Remove group/other write
chmod go-w /etc/crontab
Also works: chmod 644 /etc/crontab
Task 5 — Secure authorized_keys
chmod 600 /root/.ssh/authorized_keys
