News for hackers. Stuff that matters.

A comment on A picture got my PostgreSQL database to start mining Monero. Parent comment

Re:A picture got my PostgreSQL database to start mining Monero by sdeziel on Monday March 19, 2018 @04:15PM (#16622659)
3. Don't let your DB engine execute random executable like wget/dd (Apparmor/SELinux)

4. Don't let your DB host make outbound connections (iptables/ip6tables)

[ Parent | on HN ]
Re:A picture got my PostgreSQL database to start mining Monero by emmelaich on Monday March 19, 2018 @06:54PM (#16624102)
> Don't let your DB host make outbound connections

Which can also be prevented with SELinux

[ Parent | on HN ]