New answers tagged

1

Alright. I have to answer this question before anyone else. I followed this tutorial. http://blog.3mdeb.com/2015/12/30/emulate-rapberry-pi-2-in-qemu/ The key is that Changing ld.so.preload Then it boots. Then I think I can do a lot things using qemu new.sh. Here's the commands: /usr/local/src/qemu-2.6.0/bin/debug/native/arm-softmmu/qemu-system-arm \ ...


1

In short: yes! But that depends a bit in the syslog daemon you're running. Syslog-ng allows that with the program() destination. Rsyslog offers actions.


0

Time have changed. There was a time when every system's administrator could be reached at the hostmaster address for that server. Connectivity once depended on knowing an administrator who would allow you access, and a routing map between systems was regularly published. Those days are long gone and security threats are wide-spread. The userid > 1000 ...


0

Fixed. The trouble is that $! is expanded too early. So escaping it delayed the expansion su - $USER -c "nohup java $rest_api_opts -jar $app_home/$app_name \ > /dev/null 2>&1& echo \$! > $PID"


0

If you don't want or can't stop sudo from asking you the password, one simple trick is to read it locally and store it in a local variable: read -p 'Password: ' -s password ssh -t user@1.2.3.4 <<EOF echo "$password" | sudo -S whoami EOF


0

I got the idea from the answer provided by @segaps To disable: crontab -l | awk '{print "# "$1}' | crontab To enable: crontab -l | cut -c 3- | crontab The only problem with the solution provided by segaps, is that it will uncomment the jobs, that are already commented by the user.


0

0.90 seconds seems good to me you should not bother about it much. Still being paranoid you can increase the NIC card bandwidth for better performance.


-2

if you want to disallow SFTP but allow SSH, just comment the follow line: Subsystem sftp /usr/lib/openssh/sftp-server


0

You can periodically run crontab -l > my_crontab.backup to backup the crontab into file.


0

I would verify that your cron is actually running. You can look in /var/log/cron and see if there is an entry for that. If not, then possibly verify that the file is executable. If selinux is enabled, you might check in the audit logs.


0

Probably aide output to stderr but not to stdout. Try redirect stderr /sbin/aide --check 2> /tmp/$AIDEOUT Or both stdout and stderr /sbin/aide --check 2>&1 /tmp/$AIDEOUT http://stackoverflow.com/a/637834/205355


0

So this is the definitive answer i was looking for. You first need to set NAT (prerouting) rule to redirect the traffic to the correct server/computer. Done like this... iptables -t nat -A PREROUTING -p tcp -s yy.yy.yy.0/24 --dport 3389 -j DNAT --to-destination 192.168.1.xx:3389 Then you need a Filter (FORWARD) Rule to allow the traffic to flow to the ...


0

Your description isn't very clear about the traffic flow, but I would say the return route from the server is going directly to the internet, and is filtered down. you can prove or disprove it, by running tcpdump on the interface on the server, you should see the ping from the internet coming, but the answer isn't going through the tunnel, it is going ...


0

Even easier, I'd say nm-tool and if you only want the relevant line nm-tool | grep Device. That should output: - Device: wlan0 [My router name] -----------------------------------------------


0

It is generally not possible for an application to corrupt a filesystem: normal applications do not directly interact with disks, rather they use kernel-level syscalls for reading and writing. Obviously, applications designed to interact with block devices (ie: fdisk) can corrupt filesystems, but this does not seems your case. Can you provide the output of ...


0

Here is a simple bash script that can kill a process if system load is higher than a certain limit. In this example the script kills the "named" process if the load is higher than 2.5. If the load drops below this level then it checks if named is running, and starts it if needed. #!/bin/bash NOTIFY="2.5" TRUE="1" FTEXT='load average:' LOAD5MIN="$(...


1

A problem with using strings is that you don't see surrounding non printables and you have to be careful with the minimum string length. A problem using od -c FILE or hexdump -C FILE is that a sequence can be difficult to find if it wraps a line. Something I like a lot for this is ZTreeWin running in WINE on Linux - you can do a lot with it but the ...


0

create script file: touch /usr/bin/phpuid chmod +x /usr/bin/phpuid add content: #!/bin/bash UIDX="#"`stat -c '%u' $1` sudo -u $UIDX php5 $* run your scripts from root: phpuid /path/to/script.php or use interpreter in your scripts #!/usr/bin/phpuid <?php phpinfo(); note: tested on debian 7 you might require to install sudo apt-get install ...


30

fsck definitely causes more harm than good if the underlying hardware is somehow damaged; bad CPU, bad RAM, a dying hard drive, disk controller gone bad... in those cases more corruption is inevitable. If in doubt, it's a good idea to just to take an image of the corrupted disk with dd_rescue or some other tool, and then see if you can successfully fix that ...


18

You have seen one example where fsck worked, but I've seen more then enough damaged file systems where it did not work successfully at all. If it would work fully automatic, you might have no chance to do things like a dd disk dump or something like that which in many cases would be an excellent idea to do before attempting a repair. It's never, ever a ...


-2

you can use dd to mesure the latency of a disk eg. dd if=/dev/zero of=/root/testfile bs=512 count=1000 oflag=dsync


0

I have the same issue you do and, by the time, have only arrived at one possible answer. My scenario is a bit different than yours as I only need one active ssh tunnel, but all clients must be ready to connect if needed. I guess one could create a client/server simple protocol to handle all the clients and create a list of some sort. The user then could ...


2

It looks like you are running a newer OpenSSH client (OpenSSH 7.2p2) against an older OpenSSH server (OpenSSH 6.6.1p1). In the OpenSSH 7.1p2 release notes, it mentions: ssh(1), sshd(8): increase the minimum modulus size supported for diffie-hellman-group-exchange to 2048 bits. From the error message reported, it looks like it is your client ...


0

Per your post above, it appears that the reason the user isn't connecting the second time is due to it not receiving the correct password. Relevant: user@computer:~/$ mysql -u newuser -p Enter password: ERROR 1045 (28000): Access denied for user 'newuser'@'localhost' (using password: NO) user@computer:~/$ You will need to figure out the reason ...


1

I like @Law29's response and will likely choose it as the best answer for this question. That being said, in case someone else stumbles across this post, here's the authoritative answer from the bat book: SIGTERM Cleanup and exit sendmail signal. Whenever sendmail gets a SIGTERM signal (as would be the case if the system were being shut ...


0

You have set "BambooInstanceProfile" as an attribute of "BambooAgentRole" instead of it's own resource. One more } needs to come before your "BambooInstanceProfile".


0

In my case the following command fixed the problem with missing SYN/ACK replies from Linux server: sysctl -w net.ipv4.tcp_tw_recycle=0 I think it is more correct than disabling TCP timestamps, as TCP timestamps are useful after all (PAWS, window scaling, etc). The documentation on the tcp_tw_recycle explicitly states that it is not recommended to enable ...


1

Sendmail and all other properly written MTAs are written so that there are are only two possibilities: the message is first written to disk and then acknowledged to the sending MTA the message is not acknowledged With this method, there are three outcomes in case an error occurs: The error occurs before the receiving sendmail has tried to acknowledge ...


1

So how do I grant one container to docker exec only some predefined commands on a particular container? Write a shell script, which does only what you want to allow, and grant access only to that script.


0

To see a list of all "master alternative names": update-alternatives --get-selections --get-selections list master alternative names and their status. And for each of those listed, you can run --list $ALTERNATIVE_NAME, e.g. update-alternatives --list editor --list name Display all targets of the link group. If you would like to see a list of ...


0

solved :-)) with asterisk repo i installed the right libsrtp.so.0 with SONAME libsrtp.so.0 :-)))))))


0

I suggest to try the simple du command without any switches. You will eventually see which directory is slowing down the process. Might be a faulty disk, or some other reason, ...


0

From the iptables documentation: 6.2 Destination NAT This is done in the PREROUTING chain, just as the packet comes in; this means that anything else on the Linux box itself (routing, packet filtering) will see the packet going to its 'real' destination. It also means that the -i (incoming interface) option can be used. Destination NAT is ...


1

Well I fixed the problem by installing iRedMail package on my CentOS 6. I also bought SSL certificate from Comondo Positive SSL so emails are trusted. Not to forget, OpendKIM and SPF records MUST BE ADDED to DNS records. If you do this then there is no way google will reject your email. Also make sure your domain is not added to blacklist, you can check that ...


0

umask filters the permissions requested by the application which is commonly 666 for regular files. Because shells will not set file execute bit by default, as a security precaution, you always have to set it manually when required.


0

I can't comment, but we can try coordinating through an answer. I would log in to the console (button at the top right on your droplet overview page) and stop the ssh and apache2 services and see if that stops the high load. Have a look in /var/log/auth.log to see if there are indeed a ton of SSH login failures and /var/log/apache2/error.log to see if there'...


0

The libsrtp library is available in the EPEL repository. You need to add this repository : yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm And then install libsrtp from there: yum install libsrtp


1

Do as it suggests and make a copy of the rdsosreport.txt to /boot. You could try booting the previous kernel - Reset the system, you should get an opportunity to select which kernel to boot, select an earlier one and see what happens.


0

By default, permit_mynetworks is set under smtpd_recipient_restrictions . mynetworks is set to 127.0.0.0/8 and its IPv6 equivalent. This allows unauthenticated mail from localhost. There is likely a rogue process that's just sending mail to localhost. If you remove that option, at least the mails may stop. But you'll still need to find the rogue process. You ...


0

Shared libraries don't typically produce their own debug output by default - the programs that link them are supposed to take care of that, because they may use various ways to communicate to the user: the console, some sort of X output, syslog, ... Did you try calling ldap_set_option(..., LDAP_OPT_DEBUG_LEVEL, LDAP_DEBUG_TRACE) from the program you link to ...


0

If both your projects are in the same directory on the host, it's easy - just set the web root to the containing folder (/home/user/www).


3

Maybe your crontab file now looks like: # My cronjobs: * 2 * * * /scripts/task1.sh * 4 * * * /scripts/task2.sh You have multiple options instead of hoping that scheduling two cron jobs far enough apart is sufficient that they won't overlap when one runs a bit longer than expected: 1. Simply schedule a single cron job that executes multiple scripts ...


1

Add a nginx reverse proxy on the application machine with the following configuration for the default site: server { listen 3001; server_name _; auth_basic "Restricted Access"; auth_basic_user_file /etc/nginx/htpasswd.users; location / { proxy_pass http://localhost:3000; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; ...


0

I could not figure out why it was not successfully chrooting the mounted volume but I fixed it by just manually editing /etc/shadow. Just generate a new hash & salt using ONE of the below commands: (they both do the same thing) mkpasswd -m sha-512 PASSWORD SALT python -c 'import crypt; print crypt.crypt("password", "$6$saltsalt$")' Now edit /etc/...


1

ssh isn't allocating a tty. Add -t to the ssh command.


0

Unfortunately routers will do their best to connect the endpoints. That being said, a router doesn't care if there's someone listening or not. They will just do NAT-PAT from the WAN to your LAN. Now on the other hand, there's tolerances to a lower layer to "retry" connection. Say you want your webserver to be redirected if your main server is down... then ...


-1

we solved it commenting out the Ciphers line on /etc/ssh/ssh_config


1

In man page of dnsmasq there is a option saying -l, --dhcp-leasefile=<path> Use the specified file to store DHCP lease information. So, you can use a file to log it. And the format of the file is: 946689575 00:00:00:00:00:05 192.168.1.155 wdt 01:00:00:00:00:00:05 946689522 00:00:00:00:00:04 192.168.1.237 * 01:00:00:00:00:00:04 946689351 00:...


0

centos 6 has a wonderful system for trusting CAs, shared system certificates Place the CA cert in pem format in /etc/pki/ca-trust/source/anchors/, run update-ca-trust && update-ca-trust enable The beauty of this tool is that it generates openssl, java and nss stores. So if your CA certificate is correct, it will work (at $work we deploy our ...


0

To fix this issue without making the nagios plugin world-readable and/or world-executable, add the nrpe user to the nagios group.



Top 50 recent answers are included