search for: appus

Hi, following requirement is needed here (forced by application migration from C6->C8): I have two services running under supervision by systemd. ServiceA: runs as user AppUser ServiceB: runs as user AppUser ServiceB can see "all" processes from AppUser (ps aux) running by systemd (in fact it sees no other processes). So ServiceB can see the processes of ServiceA. I have also a cron job that runs every 5 minutes as user AppUser. Now the problem is, that Ser...

On 08/21/2018 02:20 PM, Warren Young wrote: > On Aug 21, 2018, at 1:27 PM, Nataraj <incoming-centos at rjl.com> wrote: >> I have a web application which uses sudo to invoke python scripts as the >> user under which the application runs (NO root access). > Why is the web app not running with that user?s permissions in the first place? > > If your answer is that it

just wanted to get some feedback from the community. Over the last few days I have noticed my web server and email box have attempted to ssh'd to using weird names like admin,appuser,nobody,etc.... None of these are valid users. I know that I can block sshd all together with iptables but that will not work for us. I did a little research on google and found programs like sshguard and sshdfilter. Just wanted to know if anyone had any experience with anything like these program...

...romised. However you do this, these mechanisms give you hard privilege separation without SELinux bugging you. > I could be convinced otherwise if I could see where running the php as the app users, would make more sense. That depends on whether the boundary between user php and this unknown ?appuser? is bidirectional or not. If there are things owned by user ?php? that ?appuser? should not see, then continuing to run the web app as two separate users makes sense. If ?appuser? can be said to own everything in the web app, and the only reason you?re converting user php privileges to ?appus...

Hello, may be anyone familiar with some tool for viewing logs. I mean web-interface based, simple solution. I have developers, and I can't give them access to my Centos servers, but they want to see logs of Apache. I want to give them address like 172.17.17.21/logs and they will be able to watch logs of Apache in browser. I was looking a lot for something like this, but didn't find.

...eriods we startup a second application server that just handle the Rails application calls. The second application server ( ex. 20.20.20.20 ) connects to the mysql of the mainappserver as specified in the database.yml : production: adapter: mysql2 database: appname username: appuser password: password host: 10.10.10.10 encoding: utf8 reconnect: true Now everytime I''m running a rake tasks or a rails command ( ex. rails console production ) I get the following error : Access denied for user ''appuser''@''20.20.20.20...