2,563 reputation
925
bio website e-quake.org
location California
age
visits member for 3 years, 2 months
seen 14 hours ago

14h
reviewed No Action Needed Hyper V host not showing in dhcp server client table, but guest is
14h
reviewed No Action Needed How to proceed in analyzing IIS 7.5 Debug Diagnostic Tool dump from w3wp.exe thread crash from Windows Process Activation Service
14h
reviewed No Action Needed Does Windows Network Load Balancing require any specific ports to be open?
14h
reviewed No Action Needed How to allow access to virtually hosted Wordpress site on Apache via IP address?
14h
reviewed No Action Needed Connect to encrypted Windows 2012 samba share on Linux
Mar
18
awarded  Notable Question
Mar
18
comment Restrict user changing xscreensaver settings
I understand what you're saying, however I meant it's not allowed to grant any sudo right just like that without any justification. In this case each user account would get a default predetermined sudo right.
Mar
11
comment Restrict user changing xscreensaver settings
Thanks, that could work. However in our environment blanket sudo rights for anything are not allowed, they're at best granted on a case by case basis with appropriate justification (I actually like that security model, less stuff users can break).
Mar
11
comment Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
I didn't bother trying to expand upon it. Since at least at the filesystem level it deals with separate encrypted partitions, I had what I needed and these are mostly laptops, not servers. Multiple partitions make a system more robust with regards to things such as /home (or /var/log etc.) filling up rather than disk errors, these days.
Mar
11
accepted Restrict user changing xscreensaver settings
Mar
11
revised Restrict user changing xscreensaver settings
deleted 10 characters in body
Mar
11
comment Restrict user changing xscreensaver settings
Thank you, I did toy with the idea of using chattr. However the problem is that the profile.d script is run as the user who logs in, which means chattr is run as that user as well and thus is easy to circumvent. I was unable to find a way to run a script upon (first) user login as the root user. Also things like /etc/skel get created with the user's ownership. It needs to be automated because we use LDAP with 1000s of potential users who can login. Similarly using (sym)links in various forms could be circumvented.
Mar
10
revised Restrict user changing xscreensaver settings
added 727 characters in body
Mar
10
revised Restrict user changing xscreensaver settings
deleted 3 characters in body
Mar
10
answered Restrict user changing xscreensaver settings
Mar
9
answered Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
Mar
5
comment How to create a bootable redundant Debian system with a 3 or 4 (or more) disk software raid10?
Thanks for the suggestion, yes I actually have done the raid1 approach you suggest as well, including on one of my desktop systems. I just used the raid10 as an example or test case to show the versatility of mdadm where it allows you to create a raid10 out of 3 disks.
Mar
4
revised Restrict user changing xscreensaver settings
edited tags
Mar
4
asked Restrict user changing xscreensaver settings
Jan
6
awarded  Yearling