Tag Info

New answers tagged

0

Possible, that some previous user of the IP had problems with his SNMP server? Then there is nothing you can or should do. The claimed attack is less than than one month ago, you may check the traffic logs for unusual high amounts of traffic (dDoS often creates noticable spikes). Traffic logs from one month ago are most likely not available in any form. ...


1

So found this in my digging, Unfortunately, this is a known bug on RHEL/CentOS 6.5 AMIs, however there are two workarounds to extend the file system as you requested: You can mount the volume to another instance and use parted to expand the partition boundary for the volume that the root FS is on as mentioned at the below link: ...


3

Under "normal/common" circumstances (for example, when you're running a "normal" server, that, as far as you know, should NOT be running and should not have installed any kind of "hostile" software), all the software components used/usable for hostile activities tries to escape any kind of detection. So, as a first rule, it's generally not possible to ...


1

You have two options for getting a newer version of gcc than the one shipped with RHEL 6, your current Linux distribution. Upgrade to RHEL 7, which shipped with gcc 4.8.2. Use the Red Hat Developer Toolset, a software collection which supplies gcc 4.9.1 and updated versions of related tools, on either RHEL 6 or RHEL 7. This software collection is available ...


1

If the attack is over and your VPS is not participating in it anymore, you can't tell. If it is still ongoing you can check it via tcpdump. You could search your system for stuff you didn't put there, but otherwise you are out of luck.


0

You can check the server outgoing traffic with TCPDump.


-2

If you are not sure of the interface name (happens with CentOS 7) try: ip addr and just pick the interface from the list


2

As already stated, you should instruct SELINUX to allow writing to that file. The right thing to do is to mark the /var/www/webapp/k/site/ as of type httpd_sys_rw_content_t To permanently mark that directory as httpd_sys_rw_content_t, you can use the command semanage fcontext -a -t httpd_sys_rw_content_t /var/www/webapp/k/site(/.*)?; restorecon -RF ...


-1

This will change the permissions: chcon --type httpd_sys_rw_content_t /var/www/webapp/k/site/k.log


1

The reason you cannot resize the file system is, that it is already taking up all the space in the partition. Growing the disk didn't change the partition table, so you still have a partition of the same size and free unpartitioned space on the rest of the disk. The necessary steps are: Grow the virtual disk (you did this already) Grow the partition (this ...


1

You can give so many data into your tmpfs, as you wish. There is no difference between tmpfs instances in their maximal usage limits. You can even change this easily by a simple remount. What in the case of the tmpfs counts, it is actual usage. Tmpfs, against ramfs, is capable to swap out its content. Thus, the statement, that "you can't have a tmpfs much ...


3

yum search graphics magick dev [ ... ] ===================================== N/S Matched: graphics, magick, dev ====================================== GraphicsMagick-devel.x86_64 : Libraries and header files for GraphicsMagick app development Thus, the equivalent is yum install GraphicsMagick-devel ...


21

Generally, password expiration is used to force users to change their passwords. What it sounds like you want to do is to lock the account, which prevents all login. What I would suggest you do instead is, when you create the account, also set up an at job which will lock the account after four hours. For example: useradd temp8143 echo chage -E 0 temp8143 ...


24

If you remove the setuid bit from the passwd command, only root will be able to use it. This will also disable the users from changing the password before it expires - which could otherwise be a way for the users to extend the account for another four hours. [jenny@finch ~] sudo chmod -s /usr/bin/passwd [jenny@finch ~]$ passwd Changing password for user ...


0

I recently had to perform a PCI audit of a very similar nature (who can log in to these systems and what are their permissions), so have a good feel for what you're trying to accomplish here. The methodology varies from environment to environment depending on how PAM and LDAP are configured. The following factors seem to apply to your environment: The ...


0

You can import you own VM into Amazon EC2. If you do this, you can prepare your VM locally then upload it to Amazon. More information about this feature of EC2 can be found at http://aws.amazon.com/ec2/vm-import/


0

I solved the problem. The error was that I was trying to connect with the Active Directory without to configure an user who was permissions over the ldap tree. The solution is: 1- Create a user with root role in the Active Directory 2- Configure the saslauthd to login in the Active Directory with this user ldap_servers: ...


0

I just had a similar problem, and the problem was with my putty settings. Every time I logged into the server, the pam_tally2 would get incremented, even when logging in "normally" (that is, by entering my password). My Putty settings were set to attempt the connection by using a private/public key, that failing (because the destination server did not have ...


0

You do not have 10 GB of space mounted on root. You have a 10 GB block device (/dev/xvda) with a 6 GB root partition (/dev/xvda1) on it. So you still have 6 GB of space mounted on root. To remedy this, assuming you are using the Linux ext4 filesystem (which is the default on RHEL6), follow these instructions to expand the partition (which involves a reboot) ...


0

Based on Redhat's documentation Creating Custom Unit Files and systemd.exec — Execution environment configuration: Not tested™ Create the file (touch>chmod>edit seems recommended, I don't known why): touch /etc/systemd/system/activefolder.service chmod 664 /etc/systemd/system/activefolder.service vim /etc/systemd/system/activefolder.service ...


1

You should take a look at software collections (SCL). You probably want to take a look at the Red Hat Developer Toolset SCL.


0

You can also check the changelog of unistalled packages with the repoquery command with is part of yum-utils package. repoquery -q --changelog httpd | less


1

Allow error messages at a minimum. If you block error messages you'll cause timeouts because a system keeps waiting for something that will never happen and it won't know about that because the error message that would have told it that was blocked. Things like redirects can usually be blocked, but depending on your network architecture it might cause less ...


1

If your users' home directories are on a local disk, or they are hosted on a Linux NFS server which you have sudo/root privileges on, then you can set each ~/.xscreensaver file as "immutable". sudo chattr +i /home/username/.xscreensaver This will prevent users from modifying it, and from deleting/moving/renaming it. Reference: ...


0

It looks like this is not really possible. I did end up slightly modifying the source of xscreensaver in order to force certain settings. I tried to use the least invasive way of accomplishing this with minimal modification of the source. This will still allow the user to configure many parts of the screensaver, just not the ones regarding screenlocking and ...


0

sudo allows shell-style wildcards (aka meta or glob characters) to be used in host names, path names and command line arguments in the sudoers file. * Matches any set of zero or more characters. ? Matches any single character. [...] Matches any character in the specified range. [!...] Matches any character not in the specified range. \x For any ...


0

It sounds like Geo's specific problem has already been solved, but I ran into a similar message while trying to set up a Rails app with sidekiq as a managed service. I'll explain my solution here in case it helps any other newbies like me. I'm working on a CentOS install, and chkconfig is already set up with several other services like httpd, mysql, and ...


0

An application server is typically started as a system service. On RHEL 7 that would be with a systemd start-up script. On previous RHEL versions that would have been by either including the start-up command in /etc/init.d/rc.local or a traditional SystemV style init script. I'm not familiar enough with Ruby to know if that community has alternative ...


0

Remote command execution on Redhat Satellite is pull/poll based by default. The rhn_check command is executed on the interval set at /etc/sysconfig/rhn/rhnsd, and it pulls whatever task is scheduled for the client on the Satellite server and locally executes it. If you want to push commands from the satellite server to the clients on real time basic, you ...


0

Are you doing sudo make install from inside a scl enable httpd24 bash? This resets $PATH to the default. You need to instead do: sudo scl enable httpd24 perl516 'make install'


0

The I/O subsystem where your /dev/sdb is served from is not responding in a timely manner; your DB2 guest server tried to write something to that disk, but gave up after three minutes of waiting. Investigate that side of things.


0

You can use OEL 6.5 LXC Linux Containers ontop of Ubuntu 14.04 as described step-by-step here at my blog: https://sites.google.com/site/nandydandyoracle/technologies/lxc/oracle-lxc-vlc


-1

You could just issue ls -al /usr/bin/java which is a link to {java_dir}/jdk/bin/java Edit : this answer is assuming that you are trying to find the jdk directory, in this case it does not matter if you JAVA_HOME is set or not or may be set incorrectly


0

The RAID controller should present the virtual volume to the BIOS once it's configured. If you go into the BIOS do you see the volume listed in the list of boot devices? If not then there's a problem with the raid configuration. If the volume is visible in the BIOS then the problem is probably related to missing drivers (although that's unlikely for ...


1

PDF Labs maintain their own pdftk binaries for EL 6. Why don't you just use those?


3

You can add the optional channel from the command line by running the command: rhn-channel –add –channel=rhel-x86_64-server-optional-7 You can run this command as root or use sudo.


1

Your questions seems a little bit incomplete, but from what I gather you want to apply the httpd_sys_rw_content_t context on all media subfolders of your vhosts/domains and everything within it. These commands should do that for you: semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/(.*)/media(/.*)?" restorecon -Rv /var/www/html This should ...



Top 50 recent answers are included