search for: mattdm

...rely on hosts.allow/hosts.deny a primary security mechanism? As defense-in-depth? Do you have policies which mandate it? Your feedback appreciated. Thanks! * and the standard caveats that Fedora doesn't necessarily determine the path for RHEL apply, of course. -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/>

Hello Matthew, On Thu, 27 Jul 2017 14:27:47 -0400 Matthew Miller <mattdm at mattdm.org> wrote: > On Thu, Jul 27, 2017 at 07:25:25PM +0200, wwp wrote: > > I've just got a Dell XPS 15 (9590) at work and need to set up a stable > > GNU/Linux system on it. I thought of CentOS7, but.. obviously its > > kernel can't run on this hardware. &gt...

Did you already try current Centos? If yes what was the problem? Why it did not work? On Thu, Jul 27, 2017 at 9:59 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Thu, Jul 27, 2017 at 08:38:14PM +0200, wwp wrote: > > Say, instead of stable, something not rawhide. But I'll examine all > > options that do work, so let's forget about "stable". > > In that case ? and I freely admit I have some...

I looked on several mirrors, and nowhere seems to have it. -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>

> src: > devhelp-0.9.2-2.4.6.src.rpm > mozilla-1.7.10-1.4.1.centos4.src.rpm The mozilla src.rpm is there, but the devhelp one seems to be missing from the mirrors.... -- Matthew Miller mattdm at mattdm.org <http://www.mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/> Current office temperature: 76 degrees Fahrenheit.

https://bugzilla.mindrot.org/show_bug.cgi?id=1247 Matthew Miller <mattdm at mattdm.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mattdm at mattdm.org Summary|ssh-agent prevents use of |ssh-agent prevents u...

i'm experimenting with some basic removable media mounting exercises for an upcoming class, and i read that, while you can use gconf-editor to change some of the mount options in cases like that, there is no way to override the mount options of nodev, noexec and nosuid. for example, that claim is made here (admittedly for fedora, but it appears to be true for centos as well):

On Mon, Apr 27, 2015 at 1:47 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Mon, Apr 27, 2015 at 11:58:08AM -0500, Les Mikesell wrote: >> Is there an 'after the fact' way to find what yum groups are >> installed, including ones that were added with 'yum groupinstall' >> instead of the initial anaconda insta...

..., ssh-agent makes a check using getpeereid(), and declines access if it fails. This is very sensible in general, but breaks this particular case. Might a patch to allow an option to ssh-agent to relax the check be accepted? (Attached is a draft patch against 5.8p2.) -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> -------------- next part -------------- diff -ur openssh-5.8p2.orig/ssh-agent.1 openssh-5.8p2.dontbestrict//ssh-agent.1 --- openssh-5.8p2.orig/ssh-agent.1 2010-11-30 19:50:35.000000000 -0500 +++ openssh-5.8p2.dontbestrict//ssh-agent.1 2011-05-18 11:...

...>> are broken at early boot stage - isolinux. > This hardening crap certainly breaking it It actuallly looks from Adam's investigation that this isn't different for this package. So, less than certainly. It looks like maybe more a gcc 5 difference. -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> Fedora Project Leader mattdm at fedoraproject.org <http://fedoraproject.org/>

Hi, I would like to know what will happen when I add 192.168.3.0/24 to trusted zone, but 192.168.3.1/32 to public zone. 192.168.3.1 is the gateway and should not have access to other services in that network. However, will it be blocked or trusted to access services which are allowed in the trusted zone? What's firewalld's rule? Deny before allow? Thanks in advance Tim

...it? > Finally autofs is made even easier with systemd as all you need to do to > declare a mount autofs is x-systemd.automount in the options field and then > it'll only be mounted on demand rather than at boot. I mean, autofs using the traditional autofs.... -- Matthew Miller <mattdm at fedoraproject.org> Fedora Project Leader

Due hardware update. Many years on Fedora, would like to swap out to AMD motherboard( x570) and graphics (RX480) I'm led to believe that Fedora Linux is too 'new' for Centos. Question for those with experience of both, what will I miss on Centos wrt Fedora? Not all that bothered about being 'up to the minute', and after 20+ Fedora installs it does get to be a drag... Has

On Mon, Apr 27, 2015 at 4:34 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Mon, Apr 27, 2015 at 04:04:41PM -0500, Les Mikesell wrote: >> Interesting, but it seems to _only_ show groups that weren't included >> in the anaconda install. For example where the saved anaconda-ks-cfg >> shows @gnome-desktop and @developm...

On Wed, Apr 15, 2015 at 4:07 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Wed, Apr 15, 2015 at 03:55:34PM -0500, Les Mikesell wrote: >> Is there a generic way that processes written to share files with >> (say) apache in /tmp can figure out that they are running on an OS >> with systemd and in that case, where the daemon...

...only an example. The point of doing that is to use different versions of > xterm and of emacs as come by default. How else would I do that when non-default > versions of packages require their own container each? I think what you're looking for here is Flatpak. -- Matthew Miller <mattdm at fedoraproject.org> Fedora Project Leader

For those of you who are either part of the secret cabal, or are otherwise keeping track of it, there is a new version available. The current version of the cryptex is version 3.1. It's changed rather significantly in some areas.

On Sat, 26 Oct 2019 at 10:14, Matthew Miller <mattdm at mattdm.org> wrote: > > On Thu, Oct 24, 2019 at 03:53:49PM +0100, Dave Pawson wrote: > > Not all that bothered about being 'up to the minute', and after > > 20+ Fedora installs it does get to be a drag... > > You should be just fine with CentOS for most cases. C...

On Fri, Dec 16, 2016 at 10:17:21AM -0800, Glenn E. Bailey III wrote: > This is a base install. If you deploy an instance in ec2 or GCE (ec2 > you can do the free tier) it's easily repeatable. Even on a RHEL 7.3 > instance. Note you'll need to allow root and password logins via SSH > before attempting. I can confirm this. The culprit? NetworkManager has /home open. I

On Wed, Apr 15, 2015 at 5:01 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Wed, Apr 15, 2015 at 04:15:23PM -0500, Les Mikesell wrote: >> > Why does this directory have to be /tmp rather than a specific >> > directory belonging to twiki? >> Twiki is a perl web application run under apache. It doesn't have its &g...