similar to: files automatically changing permissionssdsds

I?m looking to configure a centos 7 server to lock out anaccount after 3 login failures. I?ve followed this ? https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/chap-Security_Guide-Securing_Your_Network.html#sect-Security_Guide-Workstation_Security-Administrative_Controls ? Section2.1.9.5 Account Locking ? And even rebooted the serverbut it

Is it possible to audit the Linux User Shell? I am trying to gather what commands a user is running no our systems. Can auditd handle this? TIA -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20070903/3d4d491d/attachment.html>

hey guys, I'm attempting to install php 5.2.7 using the webtatic repo.. but it looks like my exclude isn't working.. I'd appreciate it if someone could point out the mistake I'm making/flaw in my approach... ## machine info [root at ec2-174-129-154-179 yum.repos.d]# cat /etc/redhat-release CentOS release 5.5 (Final) [root at ec2-174-129-154-179 yum.repos.d]# uname -a Linux

Hi All, I was searching around but was not able to find out. We all know that packet traverses through the Net Filter hooks but how to practically realize that. Please guide Regards Clove

Hi All:) I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from January 29th, 2012 :D Is the tool ready to use at the moment with CentOS 6/7? Are there any alternatives which you can recommend? Thanks for all info

I've just encountered a problem starting tor. When I do 'systemctl start tor' it fails and I get selinux errors in the log. There was suggestion to do full auditing with 'auditctl -w /etc/shadow -p w'. Which I did and it gave the following type=PROCTITLE msg=audit(1539540150.692:60570): proctitle=2F7573722F62696E2F746F72002D2D72756E61736461656D6F6E0030002D2

I know how to use 'ip' to set up a static route, e.g.: ip route add 192.168.128.0/17 via 40.53.24.3 dev eth0 But if you reboot or restart network, you loose this. Thus you have to make it persistant. I found: http://www.cyberciti.biz/tips/configuring-static-routes-in-debian-or-red-hat-linux-systems.html where it says to add to ifcfg-eth0: 192.168.128.0/17 via 40.53.24.3 But this

I've got a fully updated Fedora Core 4 server crashing hard every week or two. I use Samba via smbmount and autofs to read & delete log files on 17 XP boxs and 6 NT4SP6 boxes as well as a couple other Windows files servers every 5 minutes. The first indication of a problem I get is smbmount stops working, then the server becomes unresponsive to the point where only a power slam will fix

On Mon, February 9, 2015 3:14 pm, PatrickD Garvey wrote: > On Mon, Feb 9, 2015 at 11:12 AM, John R Pierce <pierce at hogranch.com> wrote: >> On 2/9/2015 11:06 AM, Always Learning wrote: >>> The third item was a 16.1 MB PDF of 1,344 pages. A quick scan of the PDF >>> shows every page appears to be readable. 11 pages devoted to BASH. Information on other interesting

I''m trying to use environments and seem to be failing. Right now I have 4 defined environments: production, cat, development, beta They are defined as follows on my puppetmaster: cat /etc/puppet/puppet.conf [main] pluginsync = true vardir = /var/lib/puppet manifest = /etc/puppet/environments/production/site.pp modulepath = /etc/puppet/environments/production/modules [master] reports =

Hi ALL #!/bin/sh # Shell script to monitor or watch the disk space # It will send an email to $ADMIN, if the (free avilable) percentage # of space is >= 90% # ------------------------------------------------------------------------- # Copyright (c) 2005 nixCraft project <http://cyberciti.biz/fb/> # This script is licensed under GNU GPL version 2.0 or above #

Dear Linux Gurus I'm having problems with KVM and networking. My guest cannot use NAT through the host's connection. This is what I've done: I installed a new version of Centos 6.5 on the hardware. Starting with a Net-Install, I selected the Virtual Hosting, and later added "Desktop". I ran "yum update" with some reboots until nothing needed updating. The

I'm confused about this.? Is this supposed to work without me mounting my CD/DVD?? If you are supposed to mount it, what path should you use to make this work? ?? http://www.cyberciti.biz/faq/centos-linux-install-packages-from-dvd-using-yum/ ?=== Al

2016-06-02 8:48 GMT+02:00 Volker Lendecke <Volker.Lendecke at sernet.de>: > On Wed, Jun 01, 2016 at 07:44:26PM +0000, Seth Goldin wrote: > > I disabled client signing from the client side, via OS X's global > nsmb.conf > > file: https://discussions.apple.com/message/30282470#30282470 > > > > The performance was back to over 600 MB/s, as compared to 60 MB/s

Hello all: I am looking at the documentation of the new firewalld service in CentOS 7. It looks like no matter what I configure with it, outgoing connections are still going to be allowed. That does not seem very secure. I always set my servers to default policy of DROP for everything incoming and outgoing and then add rules to allow very specific traffic through. Is this possible using the

>I would also start by putting an audit rule on the binary. Something like this: >auditctl -w /usr/sbin/asterisk -p war -k asterisk-bin >then you can get a report on who modified it and when by using: >ausearch -f /usr/sbin/asterisk >Its a start, but eventually you might need to monitor even keystrokes with pam_tty_audit.so to understand who is doing this:

On Wed, Nov 04, 2015 at 05:39:59PM +0200, Eero Volotinen wrote: > I think, this is possible with scsi disks > > http://www.cyberciti.biz/tips/vmware-add-a-new-hard-disk-without-rebooting-guest.html While I believe that this URL has technically correct advice, it's basically doing a subset of the commands in the scsi-rescan script in the sg3_utils package. I wonder if you need to be

On Mar 12, 2015, at 11:52 AM, Jason Warr <jason at warr.net> wrote: > > On Thu, 12 Mar 2015 12:43:27 -0500, Robert Moskowitz <rgm at htt-consult.com> wrote: > >> I found: >> >> http://www.cyberciti.biz/tips/configuring-static-routes-in-debian-or-red-hat-linux-systems.html >> >> where it says to add to ifcfg-eth0: >> >>

Is there a linux command that would tell me what model of monitor is presently attached to my computer? Thought about automating different setups based on the monitor connected. X config files basically. Could be done with different kickstart files - but would like to not go there if I dont have to. Jerry

Can I just download an rpm from a repo without installing it? I don't see anything like yum download or yum install --downonly