Discuss

discuss@lists.centos.org

34753 discussions

RE: [CentOS] sticky folder permissions
by Bowie Bailey 22 Jul '08

22 Jul '08

Tom Brown wrote: > > What are the applications? What is the directory structure? Is the > > permission problem on a directory or a file? What user account owns > > the application process? Is the app un-doing your manual permission > > changes on existing files and directories, or just not granting > > read permission to new objects? > > > > > > in house apps running out of /opt/<appname> and logging into > /opt/<appname>/logs and are running as user <appname> > > need to have world read on /opt/<appname>/logs > > when permissions are 'manually' set when the app is redeployed it > seems that the world read is removed (i am investigating why this is) If it is the permissions on the directory that are the problem, then you may be able to change the owner of the logs directory and then give the application rw permissions. That way the application will be able to write its logs, but would not be able to change permissions on the directory. -- Bowie

2 1

sticky folder permissions
by Tom Brown 22 Jul '08

22 Jul '08

Hi I have a situation where i need to blanketly allow read permissions on /opt to any user at all. I have some bad behaving apps though that seem to overwrite these permissions and do not set world read on their log directories. Is there any way i can make /opt world readable and make sure these permissions stick to all subfolders and not allow users other than root/sudo to change them? thanks

4 5

wireshark install did not seem to work
by Robert Moskowitz 22 Jul '08

22 Jul '08

I needed wireshark on a test system; I had not installed it at setup time. So I did a yum install wireshark This seemed to have worked, but there is no executable that I can locate, and wireshark in not in the gnome panel. So I looked at a system were I had installed wireshark intitally, and I see a symlink for it in /usr/bin to consolehelper. What do I do to get wireshark working?

2 2

Peter Kastegård is out of the office.
by Peter.Kastegard＠cygrids.com 22 Jul '08

22 Jul '08

I will be out of the office starting Fri 07/18/2008 and will not return until Mon 09/01/2008. If you have any questions or technical issues please contact the support at support(a)cygrids.com or call +46-(0)413-19280. Cheers, //Peter

1 0

Swatch monitor for inactivity?
by Sean Carolan 22 Jul '08

22 Jul '08

I would like to use swatch to tail a log file for "PageTurnEvent", and if this is not seen in the past 15 minutes then a restart script should be run. Does anyone know if this is possible with the swatch program?

3 3

OCI
by Mad Unix 22 Jul '08

22 Jul '08

Am running centos5 , I want to compile my apache with php to support the following './configure' '--with-apxs2=/usr/local/apache/bin/apxs' '--with-mysql=/usr/local/mysql' '--with-zlib-dir=/usr/lib/' '--enable-versioning' '--enable-track-vars=yes' '--enable-url-includes--enable-sysvshm=yes' '--enable-sysvsem=yes' '--with-gettext' '--enable-mbstring' '--enable-ftp' '--enable-calendar' '--with-config-file-path=/etc' '--with-oci8=/u01/app/oracle/product/10g/db' '--enable-soap' '--with-gd' '--enable-xml' '--with-xml' '--enable-sysvsem' '--enable-sysvshm' '--enable-sysvmsg' '--with-regex=system' '--with-png' '--with-ttf=/usr/lib' '--with-freetype=/usr/lib' '--enable-sigchild' '--with-openssl' '--with-iconv' My current Config: './configure' '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--cache-file=../config.cache' '--with-libdir=lib64' '--with-config-file-path=/etc' '--with-config-file-scan-dir=/etc/php.d' '--disable-debug' '--with-pic' '--disable-rpath' '--without-pear' '--with-bz2' '--with-curl' '--with-exec-dir=/usr/bin' '--with-freetype-dir=/usr' '--with-png-dir=/usr' '--enable-gd-native-ttf' '--without-gdbm' '--with-gettext' '--with-gmp' '--with-iconv' '--with-jpeg-dir=/usr' '--with-openssl' '--with-png' '--with-pspell' '--with-expat-dir=/usr' '--with-pcre-regex=/usr' '--with-zlib' '--with-layout=GNU' '--enable-exif' '--enable-ftp' '--enable-magic-quotes' '--enable-sockets' '--enable-sysvsem' '--enable-sysvshm' '--enable-sysvmsg' '--enable-track-vars' '--enable-trans-sid' '--enable-yp' '--enable-wddx' '--with-kerberos' '--enable-ucd-snmp-hack' '--with-unixODBC=shared,/usr' '--enable-memory-limit' '--enable-shmop' '--enable-calendar' '--enable-dbx' '--enable-dio' '--with-mime-magic=/usr/share/file/magic.mime' '--without-sqlite' '--with-libxml-dir=/usr' '--with-xml' '--with-system-tzdata' '--with-apxs2=/usr/sbin/apxs' '--without-mysql' '--without-gd' '--without-odbc' '--disable-dom' '--disable-dba' '--without-unixODBC' '--disable-pdo' '--disable-xmlreader' '--disable-xmlwriter' How can I add the support of OCI8 to bind it with Oracle10g? since my Apache server run with Oracle10g DB... -- Your search - madunix - did not match any documents.

6 9

Personal Wiki for CentOS
by Joseph L. Casale 22 Jul '08

22 Jul '08

For ages I have been keeping docs and notes in Public Folders inside an Exchange server and want to move this out to a more modern facility that allows tagging and searching via a web interface for keywords so I can keep all my notes more organized. Anyone have any personal recos for the slickest system to do this with. Given the nature of my home setup, its routinely used to lab stuff up so I would want something that can be easily migrated to a new install if need be. Thanks! jlc

9 10

RE: [CentOS] Personal Wiki for CentOS
by Bowie Bailey 21 Jul '08

21 Jul '08

Joseph L. Casale wrote: > For ages I have been keeping docs and notes in Public Folders inside > an Exchange server > and want to move this out to a more modern facility that allows > tagging and searching via > a web interface for keywords so I can keep all my notes more > organized. > > Anyone have any personal recos for the slickest system to do this > with. Given the nature of my home setup, its routinely used to lab > stuff up so I would want something that can be easily migrated to a > new install if need be. I use MoinMoin. http://moinmoin.wikiwikiweb.de/ -- Bowie

2 1

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 21 Jul '08

21 Jul '08

"Lanny Marcus" <lmmailinglists(a)gmail.com> wrote: >> The above link is mostly dead. The data isn't there yet. << I did a write-up on generating SSH keys on both Windows and Linux, along with some additional tips on OpenSSH configuration. It's at http://www.lesbell.com.au/Home.nsf/web/SSH+for+Server+Administration?OpenDo… if anyone needs it. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 21 Jul '08

21 Jul '08

"Bo Lynch" <blynch(a)ameliaschools.com> wrote: >> Just wanted to know if anyone had any experience with anything like these programs or have any other advice. << No need for any add-ons. Just do two things: 1. Disable password logins. In /etc/ssh/sshd_config, add PasswordAuthentication no Now you will have to authenticate by private key, but that's always been the best idea, anyway. Now the script kiddies can bang on your system all day and they won't get anywhere. 2. If the bandwidth they're wasting continues to annoy you, then rate-limit connections to the ssh port. Using the default firewall config in /etc/sysconfig/iptables, add this: # Rate limit connections to port 22 to slow SSH brute force attacks -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m limit --limit 1/minute -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m recent --set -A INPUT -p tcp --dport 22 -i eth1 -m state --state NEW -m recent --update --seconds 180 --hitcount 3 -j DROP Then restart the iptables service. That'll slow them right down, if they can even figure out what's going on. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss