backup1.int.autonlab.org daily security run output
punosevac72 at gmail.com
punosevac72 at gmail.com
Tue Oct 13 03:50:35 EDT 2015
Checking setuid files and devices:
Checking negative group permissions:
backup1.int.autonlab.org changes in mounted filesystems:
--- /var/log/mount.today 2015-09-15 03:44:28.000000000 -0400
+++ /tmp/security.3khhKi6x 2015-10-13 03:50:34.395749802 -0400
@@ -1,8 +1,9 @@
devfs /dev devfs rw,multilabel 0 0
storage /storage zfs rw,nfsv4acls 0 0
storage/attic /storage/attic zfs rw,nfsv4acls 0 0
+storage/attic at 2015-10-12_23.00.27--7d /storage/attic/.zfs/snapshot/2015-10-12_23.00.27--7d zfs ro,nosuid,noatime,nfsv4acls 0 0
storage/backups /storage/backups zfs rw,nfsv4acls 0 0
-storage/backups at 2015-09-14_22.08.51--1m /storage/backups/.zfs/snapshot/2015-09-14_22.08.51--1m zfs ro,nosuid,noatime,nfsv4acls 0 0
+storage/backups at 2015-10-12_23.22.49--7d /storage/backups/.zfs/snapshot/2015-10-12_23.22.49--7d zfs ro,nosuid,noatime,nfsv4acls 0 0
tank/ROOT/10.2-RELEASE-up-20150821_180424 / zfs rw,nfsv4acls 0 0
tank/root /root zfs rw,nfsv4acls 0 0
tank/tmp /tmp zfs rw,nfsv4acls 0 0
Checking for uids of 0:
root 0
toor 0
Checking for passwordless accounts:
Checking login.conf permissions:
backup1.int.autonlab.org pf denied packets:
+++ /tmp/security.KBzVLjOm 2015-10-13 03:50:34.535750037 -0400
+block return in all [ Evaluations: 3261727 Packets: 1834903 Bytes: 1046834848 States: 0 ]
+block return quick from <bruteforce> to any [ Evaluations: 3261727 Packets: 0 Bytes: 0 States: 0 ]
+block return in quick on egress proto tcp from <sshguard> to any port = ssh label "ssh bruteforce" [ Evaluations: 3261727 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick on ! lo0 inet from 127.0.0.0/8 to any [ Evaluations: 3261727 Packets: 0 Bytes: 0 States: 0 ]
+block drop in quick from urpf-failed to any [ Evaluations: 3098989 Packets: 0 Bytes: 0 States: 0 ]
+block return in on ! lo0 proto tcp from any to any port 6000:6010 [ Evaluations: 3098989 Packets: 0 Bytes: 0 States: 0 ]
backup1.int.autonlab.org login failures:
backup1.int.autonlab.org refused connections:
Checking for packages with security vulnerabilities:
Database fetched: Mon Oct 12 03:56:40 EDT 2015
pcre-8.37_2
screen-4.3.1_1
go-1.4.2,1
-- End of security output --
More information about the Autonlab-sysinfo
mailing list