Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Potential backup issues on servers with disabled /bin/tar

Discussion in 'Data Protection' started by EricGregory, Dec 17, 2008.

  1. EricGregory

    EricGregory Accounts Manager
    Staff Member

    Joined:
    Nov 27, 2002
    Messages:
    124
    Likes Received:
    1
    Trophy Points:
    243
    Location:
    Pennsylvania
    cPanel Access Level:
    DataCenter Provider
    It has been brought to our attention that backups are not running
    properly on servers that have disabled /bin/tar. To eliminate this issue before
    it becomes a problem please check the following:

    Permissions on /bin/tar should be 755. This can be accomplished from
    a root shell via the following command:
    root@host [~]# ls -l /bin/tar

    If the result of that command starts as follows you are all set and
    everything should be working:

    -rwxr-xr-x

    If not, please execute the following command:
    root@host [~]# chmod 755 /bin/tar

    As always, if you have any questions or run into any problems our
    technical team is standing by to offer any assistance you may need by accessing https://tickets.cpanel.net/submit/
     
    #1 EricGregory, Dec 17, 2008
  2. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    942
    Likes Received:
    0
    Trophy Points:
    66
    i did & it is working fine

    Thanks for sharing the information.
     
    #2 crazyaboutlinux, Apr 23, 2009
  3. Spiral

    Spiral BANNED

    Joined:
    Jun 24, 2005
    Messages:
    2,023
    Likes Received:
    8
    Trophy Points:
    193
    Tar is one of those used by the system too extensively to generally disable.

    There are some commands that I would lock down in /bin and /usr/bin
    respectively and for those, it will help quite a bit, to name just a few:

    lynx (Haven't found anyone needing this - 0500 hasn't been a problem)
    wget (This one helps to set owner 'root:cpanel' with 0750)
    chattr (I generally 0700 it to 'root:root' and Chattr +i itself)
    chown (0700 'root:root' & chattr +i)
    touch (same as Chown)

    The important thing is you don't want to kill a standard command that
    might actually be needed by some service on your server or Cpanel.

    The ones listed above work fine with the tightened permissions and I've
    tested this out and there are a number of others but the ones listed above
    will wreak havoc on most of the automated hack systems and make internal
    attacks a lot more difficult (at least being able to properly cover their tracks).
     
    #3 Spiral, Jun 11, 2009
(You must log in or sign up to post here.)
Loading...
Similar Threads - Potential backup issues
  1. Paul Ward

    Potentially compromised account

    Paul Ward, Jul 31, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    107
    cPanelMichael
    Aug 1, 2017
  2. tomdchi

    EA4 migration and potential ruby/rails/passenger issues

    tomdchi, Mar 8, 2017, in forum: EasyApache
    Replies:
    3
    Views:
    380
    cPanelMichael
    Mar 12, 2017
  3. idearius

    Backup of /etc/hosts file

    idearius, Sep 21, 2017 at 9:58 AM, in forum: Data Protection
    Replies:
    4
    Views:
    36
    idearius
    Sep 21, 2017 at 11:48 AM
  4. Muhammad++

    reset apache config when restore backup and reboot server

    Muhammad++, Sep 19, 2017 at 7:09 AM, in forum: EasyApache
    Replies:
    11
    Views:
    70
    cPanelMichael
    Sep 19, 2017 at 4:03 PM
  5. Babene7

    Backup restore didn't restore httpd configuration

    Babene7, Sep 18, 2017 at 6:08 PM, in forum: Data Protection
    Replies:
    2
    Views:
    53
    Babene7
    Sep 19, 2017 at 5:29 PM

Share This Page