Potential backup issues on servers with disabled /bin/tar

i did & it is working fine

Thanks for sharing the information.

 

Tar is one of those used by the system too extensively to generally disable.

There are some commands that I would lock down in /bin and /usr/bin
respectively and for those, it will help quite a bit, to name just a few:

lynx (Haven't found anyone needing this - 0500 hasn't been a problem)
wget (This one helps to set owner 'root:cpanel' with 0750)
chattr (I generally 0700 it to 'root:root' and Chattr +i itself)
chown (0700 'root:root' & chattr +i)
touch (same as Chown)

The important thing is you don't want to kill a standard command that
might actually be needed by some service on your server or Cpanel.

The ones listed above work fine with the tightened permissions and I've
tested this out and there are a number of others but the ones listed above
will wreak havoc on most of the automated hack systems and make internal
attacks a lot more difficult (at least being able to properly cover their tracks).