Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Robert P. J. Day
i'm not ignoring all of the suggestions so far (i'm taking note of all of them) but as rp herrold suggests, a lot of this is getting pretty far afield, so let me drag this back on-topic. i'm looking for cool things that can be added into a very generic 5-day course in basic RHEL (centos) admi

[CentOS] securing centos 5.2 for public usage

2010-09-18 Thread Roland RoLaNd
Dear all, i Just finished setting up an apache service on a centos 5.2 VM machine. i need to secure this machine as i'm soon to be setting a public IP over it where i'd be opening up the following services: 1. http 2. https 3. ssh Things i've done so far: 1. stopped root ssh access in sshd

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread Alexander Dalloz
Am 18.09.2010 12:08, schrieb Roland RoLaNd: > > Dear all, > > i Just finished setting up an apache service on a centos 5.2 VM machine. > > i need to secure this machine as i'm soon to be setting a public IP over it > where i'd be opening up the following services: > > > 1. http > 2. https > 3

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread RedShift
On 09/18/10 12:08, Roland RoLaNd wrote: > Dear all, > > i Just finished setting up an apache service on a centos 5.2 VM machine. > > i need to secure this machine as i'm soon to be setting a public IP over it > where i'd be opening up the following services: > > > 1. http > 2. https > 3. ssh > >

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Daniel Bird
On 17/09/2010 13:41, Les Mikesell wrote: > Oh - and how to install and use freenx/NX for remote access. And how about Serial Over LAN using IPMI if your kit supports it? Very useful is you've broken things... (speaking from experience :-) D ___ CentOS

Re: [CentOS] slightly OT: dban

2010-09-18 Thread Drew
> This command will take forever and ever and ever (reads against /dev/random > blocks as the kernel runs out of entropy). /dev/urandom would be better but > still not very fast. I recently came across a replacement for /dev/urandom called frandom that the author claims is 10x faster on i686 hardw

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Eduardo Grosclaude
On Sat, Sep 18, 2010 at 5:06 AM, Robert P. J. Day wrote: > p.s.  one stupendously trivial idea i had was to give each student a > cheap USB drive and use that as the vehicle for playing with > filesystem utilities.  with an $8 2G drive, i can demonstrate concepts > like hotplugging, udev, LVM and

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Robert P. J. Day
On Sat, 18 Sep 2010, Eduardo Grosclaude wrote: > On Sat, Sep 18, 2010 at 5:06 AM, Robert P. J. Day > wrote: > > > p.s.  one stupendously trivial idea i had was to give each student > > a cheap USB drive and use that as the vehicle for playing with > > filesystem utilities.  with an $8 2G drive,

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Keith Roberts
On Sat, 18 Sep 2010, Robert P. J. Day wrote: > To: CentOS mailing list > From: Robert P. J. Day > Subject: Re: [CentOS] looking for cool, > post-install things to do on a centos 5.5 system > > > i'm not ignoring all of the suggestions so far (i'm taking note of > all of them) but as rp her

Re: [CentOS] e2fsck with millions of files

2010-09-18 Thread Sean Carolan
> I'm not sure how much 64-bit support the kernel expects so there might be some > complications going that direction, but you can certainly install a 64-bit > system and run the 32-bit versions of the apps and have both versions of most > libraries available. To bring some closure to this thread,

[CentOS] Software RAID + LVM + Grub

2010-09-18 Thread Matthew Topper
I'm playing with software RAID and LVM in some virtual machines and I've run into an issue that I can't find a good answer to in the docs. I have the following RAID setup: md0: sda1 and sdb1, RAID 1. This is /boot md1: sda2 and sdb2, RAID 1. This is a PV for LVM. VolGroup00, this is the volum

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Eduardo Grosclaude
On Sat, Sep 18, 2010 at 10:11 AM, Robert P. J. Day wrote: > On Sat, 18 Sep 2010, Eduardo Grosclaude wrote: > >> On Sat, Sep 18, 2010 at 5:06 AM, Robert P. J. Day >> wrote: >> >> > p.s.  one stupendously trivial idea i had was to give each student >> > a cheap USB drive and use that as the vehicl

Re: [CentOS] Software RAID + LVM + Grub

2010-09-18 Thread Timo Schoeler
On 09/18/2010 05:13 PM, Matthew Topper wrote: > I'm playing with software RAID and LVM in some virtual machines and > I've run into an issue that I can't find a good answer to in the docs. > > I have the following RAID setup: > > md0: sda1 and sdb1, RAID 1. This is /boot > > md1: sda2 and sdb2, RA

[CentOS] CentOS-announce Digest, Vol 67, Issue 6

2010-09-18 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

Re: [CentOS] Was: Re: looking for cool, post-install things, is custom software

2010-09-18 Thread m . roth
Keith Roberts wrote: > On Fri, 17 Sep 2010, m.r...@5-cent.us wrote: >> From: m.r...@5-cent.us >> Les Mikesell wrote: >>> On 9/17/2010 3:30 PM, m.r...@5-cent.us wrote: >> Actually, my manager just laid something on me this morning: the new >> release of Adobe's 64-bit flash for Linux. I suppose I n

Re: [CentOS] Howto enter a password to mount windows share in Places

2010-09-18 Thread m . roth
Denis wrote: > Akemi Yagi wrote: >> On Thu, Sep 16, 2010 at 12:05 PM, Denis wrote: >>> Hi - using gnome I am trying to use Places -> Connect to Server to >>> mount a windows share. I can do: >>> >>> smbclient //disk.site.edu/uname$ -U uname%passwd >>> >>> but have not been able to transfer that i

Re: [CentOS] Transferring system to new drive

2010-09-18 Thread m . roth
Timothy Murphy wrote: > Timothy Murphy wrote: > >> Marcelo M. Garcia wrote: >> I was thinking of copying the old root partition with sudo cp -a -P /* /mnt/hd >> >>> I think the command rsync is a better approach for this task. It has >>> much more features, for example, you can exclude ce

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread m . roth
Roland RoLaNd wrote: > > i Just finished setting up an apache service on a centos 5.2 VM machine. > > i need to secure this machine as i'm soon to be setting a public IP over > it where i'd be opening up the following services: > > 1. http > 2. https > 3. ssh > > > Things i've done so far: > > 1. s

Re: [CentOS] Software RAID + LVM + Grub

2010-09-18 Thread Matthew Topper
Entering those commands exactly worked, but I'm not sure why it worked. So, it's progress. I need to find some good reference on GRUB, which seems difficult because most things I can find are about GRUB2, and CentOS has 0.97 On Sat, 18 Sep 2010 17:42:59 +0200 Timo Schoeler wrote: > On 09/18/20

Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-18 Thread Emmett Culley
On 09/17/2010 02:51 AM, Robert P. J. Day wrote: > >(another in an ongoing list of things i just want to clarify for the > sake of future courses taught on centos.) > >from this RHEL doc page: > > http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openss

Re: [CentOS] looking for cool, post-install things to do on a centos 5.5 system

2010-09-18 Thread Ross Walker
On Sep 17, 2010, at 3:39 AM, "Robert P. J. Day" wrote: > > (note: i asked this a few days ago but it *appears* that that post > was tossed due to getting excessive bounces from my account. so i'm > posting it again, apologies if you're seeing it a second time.) > > over the next several wee

[CentOS] Maximum IP ranges

2010-09-18 Thread Radu Gheorghiu
Hello, Is there any maximum number of IP aliases or IP ranges that ifup can handle? Right now i have about 12000 IPs assigned to the server and when trying to assign range number 47 (ifup eth0-range47), i get his error: /etc/sysconfig/network-scripts/ifup-post: line 21: 12733 Segmentation fault

[CentOS] Ac1dB1tch3z Vs Linux Kernel x86_64 0day

2010-09-18 Thread Gerhard Schneider
Are there any 64bit CentOS5 kernels available that are immune against the exploit mentioned in the subject? Turning off 32bit support is no option to me.. Gerhard Schneider P.S.: Source code can be found at http://seclists.org/fulldisclosure/2010/Sep/268 and is working "well" on 2.6.18-194.11.3.

[CentOS] Went with OpenDNS for now

2010-09-18 Thread Ron Blizzard
A few weeks ago I asked about firewalls and family filters. Lanny Marcus, I believe, suggested OpenDNS. Just wanted to thank him (and everyone here) for their suggestions. Eventually I would like to learn about firewalls, but I don't really want to run another machine at this time. OpenDNS is trivi

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread Eero Volotinen
2010/9/18 Roland RoLaNd : > Dear all, > > i Just finished setting up an apache service on a centos 5.2 VM machine. > > i need to secure this machine as i'm soon to be setting a public IP over it > where i'd be opening up the following services: > > > 1. http > 2. https > 3. ssh > > > Things i've do

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread Tom Bishop
+1 for bastille... On 9/18/10, m.r...@5-cent.us wrote: > Roland RoLaNd wrote: >> >> i Just finished setting up an apache service on a centos 5.2 VM machine. >> >> i need to secure this machine as i'm soon to be setting a public IP over >> it where i'd be opening up the following services: >> >> 1

Re: [CentOS] securing centos 5.2 for public usage

2010-09-18 Thread John R. Dennison
On Sat, Sep 18, 2010 at 12:26:04PM -0400, m.r...@5-cent.us wrote: > > Well, you could set selinux enforcing (AUGH!!!). Another possibility is > run Bastille Linux on it to harden it. I really like the latter - I used > it to harden an old system of mine, first Redhat 7.x, then Redhat 9 (yes, > this

Re: [CentOS] Ac1dB1tch3z Vs Linux Kernel x86_64 0day

2010-09-18 Thread Ned Slider
On 18/09/10 20:11, Gerhard Schneider wrote: > > Are there any 64bit CentOS5 kernels available that are immune against > the exploit mentioned in the subject? Turning off 32bit support is no > option to me.. > > Gerhard Schneider > > P.S.: Source code can be found at > http://seclists.org/fulldisclo

Re: [CentOS] Ac1dB1tch3z Vs Linux Kernel x86_64 0day

2010-09-18 Thread Kay Diederichs
Am 18.09.2010 21:11, schrieb Gerhard Schneider: > > Are there any 64bit CentOS5 kernels available that are immune against > the exploit mentioned in the subject? Turning off 32bit support is no > option to me.. > > Gerhard Schneider > > P.S.: Source code can be found at > http://seclists.org/fulldi

Re: [CentOS] Software RAID + LVM + Grub

2010-09-18 Thread Tom H
On Sat, Sep 18, 2010 at 2:41 PM, Matthew Topper wrote: > On Sat, 18 Sep 2010 17:42:59 +0200 Timo Schoeler > wrote: > >> On 09/18/2010 05:13 PM, Matthew Topper wrote: >> > I'm playing with software RAID and LVM in some virtual machines and >> > I've run into an issue that I can't find a good answ

[CentOS] NX and CentOS 5.5?

2010-09-18 Thread Raymond Jender
I am pulling my hair out here folks..   I am running CentOS 5.5 in command line only.  Reason being I am standing up an IDS system on it.    I have installed the NX client/node and server pkgs.  I have installed the NX client for windows on a Vista box.   When I attemtp to connect from the V

Re: [CentOS] NX and CentOS 5.5?

2010-09-18 Thread Craig White
On Sat, 2010-09-18 at 16:08 -0700, Raymond Jender wrote: > I am pulling my hair out here folks.. > > I am running CentOS 5.5 in command line only. Reason being I am > standing up an IDS system on it. > > I have installed the NX client/node and server pkgs. I have installed > the NX clie

Re: [CentOS] should vsftpd be disabled in favour of sftp for security reasons?

2010-09-18 Thread Jeff Allison
On 19/09/2010, at 4:48 AM, Emmett Culley wrote: > On 09/17/2010 02:51 AM, Robert P. J. Day wrote: >> >>(another in an ongoing list of things i just want to clarify >> for the >> sake of future courses taught on centos.) >> >>from this RHEL doc page: >> >> http://docs.redhat.com/docs/en-

Re: [CentOS] NX and CentOS 5.5?

2010-09-18 Thread Joseph L. Casale
>I am running CentOS 5.5 in command line only.  Reason being I am standing up >an IDS system on it.  >  >I have installed the NX client/node and server pkgs.  I have installed the NX >client for windows on a Vista box.   When I attemtp to connect from the Vista >to CentOS, I get this: Huh? So