similar to: Bastille-linux

I have a server where /home is on a nfs. I installed an apache (my compile) server. By default, it runs as daemon. That user can't acces files in /home/*/public_html, while the nobody user can. So if I change my apache config, it now can. /home is : drwxr-xr-x /home/user is : drwxr-xr-x /home/user/public_html is : drwxr-xr-x selinux is disabled. In the error log of apache I get :

Hi all, Been using Cacti for monitoring various things like, system disk/mem/ proc, network usage, router usage etc... While its been fun, the graphs are just unruly. Was looking an OpsView (the free version), wondering what your experience with this type of trend/heuristic analysis has been and what what you like. And of course thoughts on OpsView. - aurf

Hi All:) I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from January 29th, 2012 :D Is the tool ready to use at the moment with CentOS 6/7? Are there any alternatives which you can recommend? Thanks for all info

Hi Is there any ETA for the SRPM's from the base tree of 5.6? I need to get my hands on the src for the centos-release package as i have to rebuilt it to prevent the repo definitions from being included. I see the src's for the updates RPM's but not the base. many thanks

I'm a Thunderbird user almost since day one, but now I'm looking for something else. For whatever reason, it doesn't work well for me - every once in a while it becomes non-responsive (UI completely frozen for several seconds, CPU usage goes to 100%) and I just can't afford to waste time waiting for the email software to start working again. My main desktop platform is Linux,

I have finally gotten Ruby 1.8.7 to compile properly with SSL libraries on HPUX so now I am fighting how to get puppet to manage passwords. First I modified the hpux.rb under the providers/user directory to have it use /usr/sam/lbin/useradd.sam to add users and that worked great right off the bat. The problem I am having now is that each time puppet runs it does not seem to be getting the

Has anyone also run Bastille on the Asterisk pbx? Here's the link: http://www.bastille-linux.org/ It's a Linux hardening add-on. I was wondering if it'd mess up my Asterisk installation if I also installed Bastille, if it was a good idea to install it and work through the problems that may arise - or if it's not necessary. Makarios Communications, LLC Network Monitoring,

Currently I have VNC running on my Windows desktop with Samba providing access to my Linux server. Since Linux is more reliable than Windows, I would like to be able to access my Linux (Centos 5.5) via my Windows notebook - hopefully via VNC or some similar application and then access the Windows desktop (if it is not locked up :-) ) with Samba. What is the best VNC like application to

I have a client project to implement PCI/DSS compliance. The PCI/DSS auditor has stipulated that the web server, application middleware (tomcat), the db server have to be on different systems. In addition the auditor has also stipulated that there be a NTP server, a "patch" server, The Host OS on all of the above nodes will be CentOS 6.2. Below is a list of things that would be

Hi, My boss asked me to harden a CentOS box by removing "hacker" tools, such as nmap, tcpdump, nc (netcat), telnet, etc. I would like to know which list of packages would you remove from a base install. I would appreciate if someone could point me to a "standard" way of doing this. I know there are procedures for hardening a machine (I remember reading about Bastille Linux)

Hi, Is there any automated tool like Bastille Linux for freebsd to harden the system security? Thanks jerry _________________________________________________________________ Send a funky MSN Messenger Christmas card http://www.msn.co.uk/christmascard

I'm finally biting the bullet, and replacing the 12-yr-old box that's been my firewall/router with an appliance. First, does anyone have any idea whether the WRT160 nl can use tomato? Second, is there any way, or any reason, I could/would want to run bastille against the firmware? mark

I've got a 1Tb USB disc that appears to be dying - eg it took about 10 days (!) to run 'badblocks -nsv /dev/sdc' and it only did less than 2% in that time. Read access became _really_ slow. So there's definitely something amiss and I've got it offline. There's no drama about the content as I have other backups and I'm resigned to junking the thing, but I'm curious

Hi! Just wondering if anyone has this working ... Centos-7 guest in VMware-10 host (on Windows-7 :-( ) Out of the box, shared folders and drag&drop do not work although X screen resolution sensing is fine (ie xrandr reports the resolution of the host screen as well as the peculiar screen options built-in) and I can Alt-Enter to full screen quite happily. I tried Fedora-22 too but did

Now that netflix is in Australia, I wouldn't mind giving it a burl. It's working fine on my fedora-21 lappy with chrome-40 but not on our centos-6 mythtv setup even with chrome-41. I understand the difference might be the version of NSS - fedora-21 has 3.17 while centos is stuck at 3.16. Other than that, I'm flumoxed. Anyone got netflix running on centos-6? Cheers Bob

This has been puzzling me for some time and despite bothering Auntie Google rather a lot, I've yet to find a satisfying answer. As an old-time (since 1981) unix and X guy, I've generally been fairly well-able to get fonts to behave in a rational manner. My needs are pretty simple - I just want 8-point (or 9-point etc) fonts to appear on the screen as 8-point font - ie more or less 8 *

Hi all, I have just started using shorewall. So far so good. I have two questions which I cant find an answer to either on the website or googling. They may be stupid so please forgive my ignorance. 1) What is shorewalls preferred operating status, running or stopped? What I mean is, some firewalls start-up and run, and they do their thing, then they stop. But the firewall is still really

Liam O'Toole <liam.p.otoole at ...> writes: > I doubt it. As you say, the NSS version is the blocker. Maybe that > number will get bumped in a future 6.x release. > Maybe. Centos-7 would probably do the job but this machine is 32-bit so it's a non-starter AFAIK.

Hi Folks! I''m new to shorewall (in the process of switching from Bastille), and I have a question as to how to address using Bluetooth enabled Palms with a BT dongle on a linux box protected by shorewall. Basically I followed the directions located at http://www.metacon.ca/bcs/view.php?page=bluetooth to get things working strictly with iptables, specifically: echo

try modprobe vmhgfs -- Eero 2015-08-07 6:53 GMT+03:00 Bob Hepple <bob.hepple at gmail.com>: > Bob Hepple <bob.hepple at ...> writes: > > > It's the shared folder that I would really like to get working. vmware- > > hgfsclient reports my share but there is no /mnt/hgfs directory. Also > > 'lsmod|grep hgfs' reports nothing. > > > > also: