Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Potential backup issues on servers with disabled /bin/tar

Discussion in 'Data Protection' started by EricGregory, Dec 17, 2008.

  1. EricGregory

    EricGregory Accounts Manager Staff Member

    Joined:
    Nov 27, 2002
    Messages:
    123
    Likes Received:
    1
    Trophy Points:
    243
    Location:
    Pennsylvania
    cPanel Access Level:
    DataCenter Provider
    It has been brought to our attention that backups are not running
    properly on servers that have disabled /bin/tar. To eliminate this issue before
    it becomes a problem please check the following:

    Permissions on /bin/tar should be 755. This can be accomplished from
    a root shell via the following command:
    root@host [~]# ls -l /bin/tar

    If the result of that command starts as follows you are all set and
    everything should be working:

    -rwxr-xr-x

    If not, please execute the following command:
    root@host [~]# chmod 755 /bin/tar

    As always, if you have any questions or run into any problems our
    technical team is standing by to offer any assistance you may need by accessing https://tickets.cpanel.net/submit/
     
    #1 EricGregory, Dec 17, 2008
  2. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    939
    Likes Received:
    0
    Trophy Points:
    66
    i did & it is working fine

    Thanks for sharing the information.
     
    #2 crazyaboutlinux, Apr 23, 2009
  3. Spiral

    Spiral BANNED

    Joined:
    Jun 24, 2005
    Messages:
    2,023
    Likes Received:
    8
    Trophy Points:
    193
    Tar is one of those used by the system too extensively to generally disable.

    There are some commands that I would lock down in /bin and /usr/bin
    respectively and for those, it will help quite a bit, to name just a few:

    lynx (Haven't found anyone needing this - 0500 hasn't been a problem)
    wget (This one helps to set owner 'root:cpanel' with 0750)
    chattr (I generally 0700 it to 'root:root' and Chattr +i itself)
    chown (0700 'root:root' & chattr +i)
    touch (same as Chown)

    The important thing is you don't want to kill a standard command that
    might actually be needed by some service on your server or Cpanel.

    The ones listed above work fine with the tightened permissions and I've
    tested this out and there are a number of others but the ones listed above
    will wreak havoc on most of the automated hack systems and make internal
    attacks a lot more difficult (at least being able to properly cover their tracks).
     
    #3 Spiral, Jun 11, 2009
(You must log in or sign up to post here.)
Loading...
Similar Threads - Potential backup issues
  1. PPNSteve

    SOLVED Potential reduced AutoSSL coverage

    PPNSteve, Nov 14, 2018, in forum: Security
    Replies:
    7
    Views:
    528
    cPAusaf
    Nov 17, 2018
  2. Benjamin D.

    Potential reduced AutoSSL coverage for subdomain that doesn't exist?

    Benjamin D., Sep 16, 2018, in forum: Security
    Replies:
    4
    Views:
    360
    Benjamin D.
    Sep 23, 2018
  3. davetanguay

    Select the action for the system to take on an email account when it detects a potential spammer

    davetanguay, Aug 7, 2018, in forum: E-mail Discussion
    Replies:
    5
    Views:
    749
    cPanelMichael
    Sep 17, 2018
  4. koda

    cPanel 74 - Potential spammer feature limited

    koda, Jul 24, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    358
    cPanelMichael
    Jul 26, 2018
  5. Gareth Johnstone

    SOLVED [CPANEL-18897] Potential Amazon s3 Bug

    Gareth Johnstone, May 1, 2018, in forum: Data Protection
    Replies:
    11
    Views:
    782
    cPanelLauren
    Aug 8, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice