similar to: sudo for Virtual Machine Manager

Thank for your answer: But i dont know understand why is following not working: I want to restrict the ssh access for a special domain member: In my "sshd_config" i added: AllowGroups restrictaccess root With user2 im able to login via ssh! log: pam_krb5(sshd:auth): user user2 authenticated as user2 at ROOTRUDI.DE With user1 im not! log: User user1 from 192.168.0.100 not allowed

The recently-left programmer did *something*, and he didn't know what, and the guy who picked it up is working with me to find out why /var/log/messages is getting flooded with Oct 26 11:01:06 <servername> kernel: type=1105 audit(1477494066.569:642430): pid=108551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open

I had added user umarzuki to wheel group # usermod -G wheel umarzuki *Yes, I can use/setup sudo but I do this just for learning purpose My /etc/pam.d/su as below auth sufficient pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" group. #auth sufficient pam_wheel.so trust use_uid # Uncomment the following line to require

I've been looking online for resources that may help me, but I haven't found anything that worked. I'm trying to run x as a non-root user. Any suggestions? I get the messages: Fatal server error: PAM authentication failed, cannot start X server. Perhaps you do not have console ownership? Please consult the The X.Org Foundation support at

Greetings from NY! I am running SaMBa version 2.2.6 compiled from source on a RedHat 7.3 (Linux tux.#########.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown) box. I start smbd and nmbd as I usually do. Then I start winbindd I verified that they are running. I run : smbpasswd -j DOMAIN -r Windows2kDomainController -U Administrator Password: Joined domain DOMAIN. Ok, so I'm in

Finally moved my home desktop from Fedora to CentOS. My spouse was unhappy with me upgrading from F9-->F10-->f11 etc and wanted something more stable. I built a second machine which is now running in parallel to the old F11 desktop. I moved my data (mail and files) from the F11 box to the CentOS 5.4 box. I used tar to move everything. Mail and files transferred A-OK...but the Evolution

Finished installing CentOS 5.5 x86_64 on a new Dell tower workstation that has a quad core Intel processor and 8 GB of ram. BIOS has hardware virtualization support enabled. /proc/cpuinfo shows that all four cores have the vmx flag present. I applied a lot of the National Security Agency guide for securing Red Hat Linux 5, testing the key applications I need as I went. At the end of the process

Short version: Why does my domain member server create a sambaDomainName entry in LDAP? Long Version: I have created a Domain Member Server for a "NT4 style" Samba domain with an LDAP backend. It is a print server, running Winbind (because it solved a group SID mapping problem and an 'invalid SID' error in syslog), and it works fine in all other respects, but this: After

Hi When I enable a box to do authentication using LDAP it breaks cron for users like jboss. I get the following in /var/log/secure Sep 14 15:25:01 exoipatest01 crond[7214]: pam_access(crond:account): access denied for user `jboss' from `cron' I have the following in /etc/ldap.conf nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,tomcat,radiusd,news,mailman,nscd,jboss

I've installed CentOS 6.6 on a workstation at a local non-profit as a kiosk machine. I used xguest. Works great, except now the customer wants the Firefox homepage to be one pointing to a particular site. Doesn't seem to be much documentation on how to make minor changes to the account. Lots of SELinux guidance, but nothing about default home page, etc. Dave

I have a requirement to allow our security officer to regularly view and analyze the logging and auditing results of one of the machines in our lab. He comes from the Microsoft Windows world and is not a *nix trained person. I know I can configure logwatch. I can also create a script containing various 'aureport' runs into a cron job. Any recommendations for a GUI-based tool that would

Sending my son back to college with a dual-boot laptop with Win 7 and CentOS 5.5. He uses Win7 to manage his iPod and SW that sometimes issued by a professor for a specific course...otherwise he uses CentOS for everything else. That setup worked well last year, except for printing. He has a low-end Cannon printer that is not supported in the Linux realm. Most of his coursework was uploaded to

Moat of the advanced persistent threats (APT) are initiated via e-mail. Opening an attachment or clicking on a web link starts the process. Why isn't Firefox and Evolution confined with SELinux policy in a way that APT can't damage the rest of the system? Why are we not sandboxing these two apps with SELinux? I've discovered some guidance for sandboxing Firefox using the

I'm receiving the centos-request in digest mode. Using Fedora 10 and Evolution. When I tried to reply to a centos-request message inside the digest, the result doesn't seem to look right. I cut/paste the proper subject line (replacing the CentOS Digest, Vol NN, Issue nn text), but some have complained that this approach doesn't allow the original question and replies to be threaded.

Received the following message in mail to root: Message 257: >From root at desk4.localdomain Tue Oct 28 07:25:37 2014 Return-Path: <root at desk4.localdomain> X-Original-To: root Delivered-To: root at desk4.localdomain From: mdadm monitoring <root at desk4.localdomain> To: root at desk4.localdomain Subject: DegradedArray event on /dev/md0:desk4 Date: Tue, 28 Oct 2014 07:25:27

Have a quad core workstation that was running WinXP_64 that I want to blow away and install CentOS 6. C6 install process finds raid metadata associated with sda and sdb, and then excludes them from the rest of the installation process. There doesn't appear to be an option for disassembling the raid as part of the install process. I think there should be. Any tricks to removing/by-passing

> > On Wed, Jun 3, 2009 at 8:52 AM, David McGuffey > <davidmcguffey at verizon.net> wrote: > > This is my first post here on the CentOS forums.? I've been running > Fedora > > since FC4, and have been working with RHEL 4 at work.? But this is > my first > > foray into CentOS. > > > > I followed the multimedia guidance on the wiki, and now

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade

Have decided to give up on the embedded Broadcom 4312 wireless device in my son's Dell laptop. I get WEP open authentication to work, but nothing else. I was about to dump the bcm43xx kernel module and the bcm43xx-microcode5.fw firmware and work with the newer b43 module and associated firmware. However, he claims that at school, he has always had intermittent problems with wireless under