Re: [CentOS] Monitor Dummy Device

2016-01-17 Thread SternData
On 01/17/2016 10:42 AM, Joey wrote:
> Dual-Screen Solution without connected a second Monitor

What is a dual screen solution without a second monitor?  Are you
talking about virtual desktops?

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Monitor Dummy Device

2016-01-17 Thread SternData
On 01/17/2016 10:58 AM, Joey wrote:
> Am 2016-01-17 17:47, schrieb SternData:
>> On 01/17/2016 10:42 AM, Joey wrote:
>>> Dual-Screen Solution without connected a second Monitor
>>
>> What is a dual screen solution without a second monitor?  Are you
>> talking about virtual desktops?
> 
> Yes. if this virtual Desktop is useable like a normal Desktop (for
> example change position in kde systemsettings)

I don't use KDE, but I see lots of info googling on "enable KDE Virtual
Desktop"

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Utility to zero unused blocks on disk

2016-02-08 Thread SternData
On 02/08/2016 06:38 PM, Always Learning wrote:
> 
> On Mon, 2016-02-08 at 14:22 -0800, John R Pierce wrote:
> 
>> the only truly safe way to destroy data on magnetic media is to grind 
>> the media up into filings or melt it down in a furnace.
> 
> I unscrew the casing, extract the disk platter(s), slide a very strong
> magnet over both sides of the platter surface then bend the platter in
> half. 
> 
> How secure is that ?
> 
> I can't afford a machine that grinds everything into dust particles.
> 
I have a sledge hammer. It's good exercise and fun.

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] A repo with latest httpd for http2?

2016-02-12 Thread SternData
Is there a well-run package repo that has httpd-2.4.17 or mod_http2 (or
mod_h2)?

I'd like to try out http2 without having to compile my own httpd.


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A repo with latest httpd for http2?

2016-02-12 Thread SternData
On 02/12/2016 04:26 PM, Guolin Cheng wrote:
> How about here, if you are using centos 6.
> 
> http://mirror.centos.org/centos/6/SCL/x86_64/httpd24/
> 
> On Fri, Feb 12, 2016 at 2:23 PM, Ulf Volmer  wrote:
> 
>> On 02/12/2016 10:54 PM, John R Pierce wrote:
>>
>>> On 2/12/2016 11:13 AM, SternData wrote:
>>>
>>>> Is there a well-run package repo that has httpd-2.4.17 or mod_http2 (or
>>>> mod_h2)?
>>>>
>>>
>>> EL7 comes with httpd-2.4...
>>>
>>> # yum list httpd
>>> ...
>>> Installed Packages
>>> httpd.x86_64 2.4.6-40.el7.centos @base
>>>
>>
>> Including support for http2?
>>
>> i doubt that. As far as i know, support was added with 2.4.17.
>>
>> [root@centos7 ~]# rpm -ql httpd|egrep 'mod_http2|mod_h2'
>> [root@centos7 ~]#
>>
>> best regards
>> Ulf
>>
>
thanks. It's not there yet for Centos 7, but I'll keep an eye on things.

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Hardening Apache on CentOS 7

2017-07-09 Thread SternData
On 07/09/2017 11:01 AM, Nicolas Kovacs wrote:
> Hi,
> 
> Some time ago one of my public servers (running Slackware64 14.0) got
> attacked and was misused to send phishing emails.
> 
> This misadventure made me more concerned about security, so I spent the
> last few weeks catching up on security, reading docs about SELinux and
> how to use it, etc.
> 
> I have a public sandbox server running CentOS 7, and I'm currently
> experimenting quite a lot with Apache and how to secure it. My approach
> is very much trial-and-error. I've started with these two articles:
> 
> https://devops.profitbricks.com/tutorials/how-to-harden-the-apache-web-server-on-centos-7/
> 
> https://www.tecmint.com/apache-security-tips/
> 
> I've also discovered the Nikto vulnerability scanner, and I'm playing
> around with it.
> 
> Besides all this, I'd be curious to know your approach in securing
> Apache, the tools you use, maybe the odd do's and don'ts, suggestions,
> some good books and/or online docs about the subject, etc.
> 
> Cheers from the sunny South of France,
> 
> Niki
> 

If you're using PHP, use php-fpm running each host under a different
user.  https://wp-root.org/server/install-php-fpm-tcp-unix-sockets-centos/

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] ALPN and Http/2, CentOS 7.4

2017-08-26 Thread SternData
Now that 7.4 CR has delivered OpenSSL 1.0.2, I should be able to serve
http/2 pages to Chrome, but I still see messages that ALPN is not enabled.

OpenSSL 1.0.2 is installed:

$ rpm -qa |grep openssl
openssl-libs-1.0.2k-8.el7.x86_64
openssl-1.0.2k-8.el7.x86_64


But https://tools.keycdn.com/http2-test says "www.stevenstern.me"
supports http 2 but ALPN is not supported.

Ideas?  Does anything need to be explicitly enabled for ALPN?  As I
mentioned, the http2 stuff seems to be working.


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Red Hat is Planning To Deprecate KDE on RHEL By 2024

2018-11-02 Thread SternData
On 11/2/18 3:19 PM, mark wrote:
> Leroy Tennison wrote:
>> I use KDE and they need to, quality is lacking, every time I boot up I
>> get to discover where my icons will be located (and this has been going
>> on through at least a couple of recvisions).  Locking doesn't help, even
>> making the file I thought contained the positions immutable didn't help.
>> I'm going to have to look at Trinity.
>>
> Odd, I've never had that problem. On the other hand, I *really* dislike
> gnome. I think their target is 16 yr olds.


It all depends on how you arrange it and what extensions you use. I have
a very Mac-link setup on Gnome.


> 


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: good free email service ?

2018-12-02 Thread SternData
On 11/9/18 10:20 AM, Valeri Galtsev wrote:
> Dear All,
> 
> I know it is an oxymoron: good free ... service ;-)
> 
> Still, can someone recommend good free email service?
> 
https://www.zoho.com/mail/

pop, imap, 2FA
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Rsyslog warning

2018-12-20 Thread SternData
I see this error every day. What should I be looking at to fix it?

rsyslogd: sd_journal_get_cursor() failed: 'Cannot assign requested
address'  [v8.24.0-34.el7]

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] EPEL repo problem

2019-01-29 Thread SternData
This keeps logging:

Could not get metalink
https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error was
14: HTTPS Error 503 - Service Unavailable

I've removed the epel-release package, done a "yum clean all", then
reinstalled it, but still get the same error.


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EPEL repo problem

2019-01-30 Thread SternData
On 1/30/19 5:57 AM, Stephen John Smoogen wrote:
> On Wed, 30 Jan 2019 at 00:25, SternData 
> wrote:
> 
>> This keeps logging:
>>
>> Could not get metalink
>> https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error
>> was
>> 14: HTTPS Error 503 - Service Unavailable
>>
>> I've removed the epel-release package, done a "yum clean all", then
>> reinstalled it, but still get the same error.
>>
>>
> Can you run the code from: https://github.com/puiterwijk/check_metalink to
> see if we can pin down the proxy which is the problem (there are 14 and our
> checks are showing they are ok so I need to pin this down somewhere).
> 
[sdstern@sugaree check_metalink]$ ./check_metalink --repo epel
--check-mirrors
Client IP: 2604:a880:800:a1::6ab:c001

Testing repo=epel, arch=x86_64
Metalink provided by: proxy11.fedoraproject.org
Server date: Wed, 30 Jan 2019 14:43:18 GMT
Repo epel, arch x86_64 errored: list index out of range
OK metalinks (0):
Bad metalinks (0):
Exception metalinks (1): epel.x86_64
OK metalink means that at least one mirror is valid


[sdstern@sugaree check_metalink]$ ./check_metalink --repo epel
--check-master
Client IP: 2604:a880:800:a1::6ab:c001

Testing repo=epel, arch=i386
Metalink provided by: proxy11.fedoraproject.org
Server date: Wed, 30 Jan 2019 14:43:45 GMT
Repo epel, arch i386 errored: list index out of range
Testing repo=epel, arch=x86_64
Metalink provided by: proxy11.fedoraproject.org
Server date: Wed, 30 Jan 2019 14:43:45 GMT
Repo epel, arch x86_64 errored: list index out of range
OK metalinks (0):
Bad metalinks (0):
Exception metalinks (2): epel.i386, epel.x86_64
[sdstern@sugaree check_metalink]$


> 
> 


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] PHP 7.3 and IUS repo

2019-05-22 Thread SternData
Does anyone know if PHP 7.3 is coming to the IUS repo soon?  I'd rather
upgrade from 7.2 than tear out IUS and replace with Remi.

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to find out the number of updates for a system

2019-05-22 Thread SternData
maybe
  yum -q check-update | wc -l

On 5/22/19 8:42 AM, Ralf Prengel wrote:
> Hallo,
> I need the information how many updates are available for a system.
> What is the best way to find it out in a one line bash script.
> 
> Von meinem iPad gesendet
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
> 


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] deprecations leading up to C8

2019-09-20 Thread SternData
Does that mean it's gone from the CentOS repos or just that PostFix is
the default choice?

On 9/19/19 6:04 PM, Fred Smith wrote:
> Was reading the long list of things being deprecated in the RHEL 8
> release notes t'other day, and saw my old friend sendmail on the list.
> 
> I've stuck by her because I've learned how she likes to be stroked to
> get the best out of her, and quail at the thought of taking on a new
> MTA and having to learn it all all over again.
> 
> But I guess I'm going to have to, soon or late, probably sooner than
> later. :(
> 
> Can anyone point me to resources specifically for helping us ignorant
> folk in converting all the arcan-ity in sendmail.mc into something
> equivalent for Postfix?
> 
> Thanks in advancce!
> 
> Fred
> 

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] how to know when a system is compromised

2019-11-14 Thread SternData
Do you run rkhunter?

On 11/14/19 9:40 AM, Christopher Wensink wrote:
> How do you know when a Linux system has been compromised? 
> 
> Every day I watch our systems with all the typical tools, ps, top, who,
> I watch firewall / IPS logs, I have logwatch setup and mailing daily
> summaries to me and I dive deeper into logs if something looks suspicious.
> 
> What am I missing or not looking at that you security gurus are looking at?
> 
> I subscribe to the centos and SANS newsletters, and I try to keep
> current on all technology with credible sources of articles online and
> with the Lynda library.
> 
> What other sources of information do you use to stay current about the
> latest threats and technology updates?
> 
> I appreciate the feedback.
> 
> Chris


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dnf replacing yum?

2016-05-25 Thread SternData
On 05/25/2016 06:43 PM, Always Learning wrote:
> 
> On Wed, 2016-05-25 at 22:32 +0100, Timothy Murphy wrote:
> 
>> Also, yum had associations which it was sad to lose.
> 
> Perhaps the Fedora ("We love consulting all affected users") replacement
> could be named MUD.
> 
> Now we await the System-D controlling interface ;-)
> 
> 
> 
> 
There was much wailing and gnashing of teeth when these changes rolled
into Fedora.  After a while, I got used to it and now it seems normal.
Plus, if you type "yum update" it responds "what your really should type
is dnf update, but I'll do it for you anyway".

-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] photos on iPhone 6

2016-10-20 Thread SternData
On 10/20/2016 02:56 PM, J Martin Rushton wrote:
> A bit of a perennial I'm afraid.  My wife has filled up her iPhone 6
> with photos, and wants them moved onto my computer.  I'm running CentOS
> 7 patched about 30 minutes ago.  Needless to say the computer can't see
> the data on the iPhone, though it does recognise the phone as an iPhone.
> 
> Any suggestions (well any that don't involve a steam roller, sledge
> hammer or GBH to the whole of Apple Inc)?
> 
> $ uname -a
> Linux tamar.home 3.10.0-327.36.1.el7.x86_64 #1 SMP Sun Sep 18 13:04:29
> UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
> 
>
Set up a dropbox account for your wife and install the Dropbox app.
Choose the option to automatically upload images from the phone to
Dropbox, then let it do its thing.

Once the files are on dropbox, you can download them wherever you like.


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] C6: latest util-linux-ng dependency on kernel? (Linode)

2016-11-22 Thread SternData
How do I work around this?  I can't get a yum update to work. My kernel
is 4.8.6-x86_64-linode78

-- 
-- Steve


On 11/21/2016 07:05 AM, Tony Mountifield wrote:
> In article 
> ,
> Gianluca Cecchi  wrote:
>> On Mon, Nov 21, 2016 at 12:49 PM, Tony Mountifield 
>> wrote:
>>
>>> I am just applying the latest C6 updates to a couple of KVM Linodes.
>>> It appears that the latest update of util-linux-ng has added a new
>>> dependency on the kernel package.
>>>
>>> On these VMs, the kernel package is not normally installed, and the VM
>>> runs a host-supplied kernel. But now, a "yum update" wants to install for
>>> dependencies kernel, kernel-firmware and grubby, none of which should be
>>> necessary in this environment.
>>>
>>> I have allowed it on one Linode and rebooted it. All seems ok and it is
>>> still running the host-supplied kernel, but it still grates that an
>>> unused kernel should have been required to be installed.
>>>
>>> Is this an error in util-linux-ng, or a real new requirement?
>>>
>>> Cheers
>>> Tony
>>>
>>
>> If you have access to it see:
>>
>>  Bug Fix Advisory - RHBA-2016:2748-1
>>
>> Corresponding CentOS announcement here:
>> https://lists.centos.org/pipermail/centos-announce/2016-November/022148.html
> 
> Ah, ok. Looks like it will have to be an annoyance then.
> 
>> Verify that in your current kernel you don't incur in this bugzilla (I
>> think you are not using rlogin...):
>> https://bugzilla.redhat.com/show_bug.cgi?id=1335670
> 
> Nope, only ever ssh!
> 
> The linodes are currently running kernel 4.8.3
> 
> Tony
> 



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Noise Cancellation of Server Noise

2016-12-25 Thread SternData
Google "server room active noise cancellation"

On 12/24/2016 03:43 PM, H wrote:
> Has anyone come across a device that could cancel out the noise from servers, 
> ie. the fan noise? I have  a server rack near my office and would like to see 
> if i can decrease the noise level. It would seem to me that the steady drone 
> of the fans could be cancelled out to a large extent.
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
> 


-- 
-- Steve
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos