Reputation
206
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 3
Newest
 Critic
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Dec
29
comment How to force maildrop to run as the specified user and group from Postfix
Yes, there is a security implication. Stated here: "if the permissions on the socket directory are changed, anyone on the system can connect and obtain any account's password!" Obviously this depends on which password back-end the authdaemon is set up to use (if the backend is hashed passwords, obviously the plaintext password isn't available at all) but in any case you're opening up a password oracle and a possible privilege escalation vector.
Nov
27
awarded  Critic
Nov
14
comment ZFS RAID and LUKS encryption in Linux
I've been running ZFS in FreeBSD on a virtual block device backed by a LUKS device on top of DMRAID for years. Many other weird combinations too. No problems, ever.
Nov
14
comment ZFS RAID and LUKS encryption in Linux
This is nonsense. Even though ZFS consists of many layers of functionality, there is no reason you need to use them all, and in fact many of the layers have been ripped out in various implementations on FreeBSD, Linux, and others. My company has been running ZFS filesystems on top of LUKS- and GELI-encrypted devices on top of various RAID devices (hardware and software) for many years, sometimes even with virtualization inbetween, with great performance and no problem, and it's not because we're lucky. Incidentally, ZFS is not a a hardware controller by our industry's definition of the term.
Nov
19
awarded  Yearling
Jan
23
comment How do I get apt-get to ignore some dependencies?
Debian's mailx package only 'recommends' exim4, doesn't require it. If you don't want to install recommended packages, just add APT::Install-Recommends "false"; to your apt.conf.
Feb
9
awarded  Supporter
Feb
9
comment Redirecting SSH through a machine
If you're going to do this, you have to trust the box in the middle. It can abuse your agent forwarding, hijack your session, etc.
Feb
7
awarded  Teacher
Feb
7
answered Quick way to restore or reload /etc/fstab settings?