Securing a linux box for online shopping TIA 747

On Fri, 31 Mar 2006 06:49:57 -0600, Roadster3043

Not running as root except to do admin work. I buttume you have enabled a firewall to block all incomming connections.

I have a separate account for each login-id-pbuttword needed out on the internet.

Any account running a browser, say bank, or creditcard, tar's in a pristine copy of the browser's settings on logout.

That code was added to .bashlogout.

Those accounts have their own index.html with the target urls to prevent me from mis-typing where I want to go.

I have a separate account for web browsing-surfing. That way a posioned browser-cross-site script exploit will not catch me when doing banking or whatever requiring a login.

You set up each accounts browser's preferances depending on what you are doing. You then tar up the browser's directories. Now you can add the code to ~.-bashlogout.

Example: for taring up Firefox directories:

tar cvf firefox.tar .mozilla .fullcircle

Now you can add code to ~-.bashlogout as follows:

bin-rm -r .mozilla .fullcircle tar -xvf $HOME-firefox.tar

I modify ~-.bashprofile to run the application and exit.

.bashprofile runs a perl script to verify the DNS value is valid for the site I am about to visit before launching the browser.

If not, tell me and I have to research it.

In this .bashprofile example, my ckip.pl checks cheapbytes.com

bapp=firefox

site-bin-ckip.pl cheap if $? -eq 0 ; then $bapp ~-index.html else xmessage "ckip.pl cheap failed" fi

exit