search for: lockdown

Hi group As promised some months ago, I'm letting you know that lockdown is now ready for testing. Please don't study the code to much, I know it is a mess and therefore a rewrite is on it's way. But feel free to take a look at the features offered, how you use them and the default settings. When lockdown is ready for production usage, I'll release version 1...

What: Lockdown <http://stonean.com/projects/show/lockdown> is an authorization/authentication gem for RubyOnRails 2.x This version bundles Classy Inheritance<http://stonean.com/projects/show/classy-inheritance>to simplify the management screens. There is also a lot of template cleanup in this releas...

...ther solution :-) <scary_solution> I've thought of building a specially crafted .reg file (actually a set of them) which will be imported in each logon on the machine; that way, I can control the way the desktop acts for each user. I will have a "general.reg" file for common lockdowns, some specific "group-A.reg", "group-B.reg" files for each group and finally some "user-A.reg" with specific lockdowns (or not) for special users. </scary_solution> I know this isn't great security since any user would be able to craft a .reg file themsel...

Hi all, I am doing some tests with my CentOS7 desktop. I have configured a policy to lockdown Chrome/Chromium browsers and it works perfectly. And I am trying to the same for Firefox browsers but Firefox's docs are really "hard" to understand. I have the following stopper points: a/ what is the "real" system wide's config file: firefox.js, sysprefs.js or loca...

Hi All, I''m having a bit of trouble wrapping my head around "nil_lockdown_values" in the Lockdown plugin. I''m unfamiliar with how exactly this works. I''m assuming it is a helper method of sorts, but I see no definition. Does Rails simply have the ability to nil_ [somerandomliborclass]_values? Would someone mind unconfusing me? Also, where would...

Has anyone had any issues using Cucumber with Lockdown. in the following scenario, I am logged in as an admin and so should have :all access rights, however I get the following error. Authoriztion filed! prms: {"action"=>"index", "controller"=>"admin"} session: {:expiry_time=>Wed Oct 28 13:33:43 +0000...

I only run one piece of software under wine but this app is still a great risk. The intentions and opportunity of software developers not using open source should not be underestimated. when i run env WINEPREFIX="/ubuntu/PC1/.wine" wine C:\\windows\\system32\\taskmgr.exe I am reminded again of all the security problems with windows. I was thinking that it ought to be easier to

Hello everybody, I'm a newbie in this list, so I don't know if it's the appropriate place for my question. Anyway, I'd be happy to find out the solution. Please, has anyone simple answer for: I'm looking for an exact list of files, which: 1. MUST have... 2. HAVE FROM BSD INSTALLATION... 3. DO NOT NEED... 4. NEVER MAY... ...the suid-bit set. Of course, it's no problem to

Hi all, I'm mounting a LTSP server whith CentOS 4.4. The default desktop will be Gnome. I'm looking for lockdown tool and I think Pessulus maybe a good option, but I don't found it with yum. ?Is Pessulus included in CentOS? ?Another lockdown tools as alternatives? Thanks in advance. -- Jordi Espasa Clofent PGP id 0xC5ABA76A #http://pgp.mit.edu/ FSF Associate Member id 4281 #http://www.fsf.org/ ---...

I'm seeing errors like this in my event viewer on win2k clients: Source MRx Smb "The master browser has received a server announcement that computer CONAN that believes it is the master browser for the domain ... The master brower is stoppong or an election is being forced." Event ID 8003 The other error that frequently occurs with this: Source: Netlogon "No Windows NT or

...7:15.589+0000: 8579: debug : virBPFLoadProg:78 : > > Can you please check system logs and output of dmesg? > > I've managed to run into this article [1] that explains that even if you > have all permissions and no SELinux you can still be blocked by > something called kernel_lockdown and it should appear in dmesg. > > Pavel > > [1] <https://gehrcke.de/2019/09/running-an-ebpf-program-may-require-lifting-the-kernel-lockdown/> Unfortunately, nothing related to kernel lockdowns. My kernel sysrq also doesn't seem to recognize x, and neither dmesg nor system...

Hello, I need to reconfigure Gnome in CentOS for avoiding that a normal user could lock screen using task bar option and/or "Super L" key (Windows Key + L). How could I configure Gnome? I need to do that in several computers, so I can't do "login" in X environment of each computer, but I need to reconfigure executing from command line (multiple SSH connections).

Hi all, Recently I've suffered a problem with my SMTP service provider. It seems the SMTP server allows open relay, so my account is lockdown by CentOS list policy. Because of that I desubscribe my last account and re-subscribe in CentOS list with the present gmail account. I can send any messages in the list, but the curious problem is I don't see my own messages ???? I can see my sended messages in CentOS mail archive but not i...

...irBPFLoadProg:78 : > > > > Can you please check system logs and output of dmesg? > > > > I've managed to run into this article [1] that explains that even if you > > have all permissions and no SELinux you can still be blocked by > > something called kernel_lockdown and it should appear in dmesg. > > > > Pavel > > > > [1] <https://gehrcke.de/2019/09/running-an-ebpf-program-may-require-lifting-the-kernel-lockdown/> > > Unfortunately, nothing related to kernel lockdowns. My kernel sysrq also > doesn't seem to recogni...

...l for hosting some personal Ruby applications from home? (i.e. for learning, sharing with friends etc) Would the basic concept be: * Need to buy a static IP address from you ISP * By a domain name and point it to the static IP address * Run Apache as the front end web server - Q: What basic lockdown/security steps should one take? * Perform a PORT redirect on my router for traffic on port 80 to the internal IP address of my PC * Run the Rails App on the PC * Redirect Apache for the appropriate URL for the application through to Ruby How does this sound? Regarding comparitive cost of us...

Fixes secure boot on my gp107. No idea why. Otherwise the GPU enters complete lockdown after starting the gpccs and fecs with the LS images loaded. Signed-off-by: Karol Herbst <kherbst at redhat.com> --- drm/nouveau/nvkm/engine/gr/gf100.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/drm/nouveau/nvkm/engine/gr/gf100.c b/drm/nouveau/nvkm/engine/gr/gf100.c index 2f...

Hi, in these dark days of COVID-19 lockdown I'm using linphone to connect to my office asterisk system for working from home. It's going pretty well but the presence/BLF functions don't appear to work. In the linphone logs and asterisk debug I find that asterisk is rejecting linphone's PUBLISH message: <--- SIP read f...

...: ARM926EJ-Sid(wb) rev 3 (v5l) BogoMIPS : 95.83 (about 192 MHz) Features : swp half thumb fastmult edsp java CPU implementer : 0x41 CPU architecture: 5TEJ CPU variant : 0x0 CPU part : 0x926 CPU revision : 3 Cache type : write-back Cache clean : cp15 c7 ops Cache lockdown : format C Cache format : Harvard # gcc --version arm-linux-gcc (GCC) 3.3.2 (Debian) Configuration: --enable-fixed-point --enable-arm5e-asm Speex specs: Complexity 0, 8Kbps Encoding: ~95%, Decoding: ~44%, without Echo Cancellation / Pre-processor Does anyone know how I can reduce this ut...

...s the share as the same user. I tried changing unix permissions and ownership but that didn't work. Even when I made the ownership root root, I was still able to remove that directory. I'm looking at - force directory mode or force directory security mode to see if that might accomplish the lockdown of directories that I am trying to achieve. Thanks, Dennis

I have openssh on my solaris servers, my question or concern I need to lockdown/jail the sftp users so they won't cd out of their home dir (setup of an anonymous ftp servers) and destroy or view other sftp users files. Is this doable with openssh??