Reputation
626
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 7
Newest
 Yearling
Impact
~59k people reached

  • 0 posts edited
  • 0 helpful flags
  • 397 votes cast
Feb
18
answered nagios.service start operation timed out. Terminating
Dec
8
awarded  Yearling
Nov
1
answered AWS ELB 400 BAD_REQUEST with space at the end of a URI
Oct
18
awarded  Civic Duty
Mar
10
comment Iptables - Bridge and Forward chain
Also, /proc/sys/net/bridge/bridge-nf-call-ip6tables
Oct
18
awarded  Commentator
Oct
18
comment /var/cache/logwatch No such file or directory at /usr/sbin/logwatch line 633
Also Ubuntu help about logwatch says that "Configuration shouldn't be edited in the install directory (/usr/share/logwatch). Copy logwatch.conf to /etc/logwatch before editing"... resulting in that error ("/var/cache/logwatch No such file or directory at /usr/sbin/logwatch line...").
Sep
29
awarded  Necromancer
May
5
comment How to check that an OpenVPN server is listening on a remote port without using OpenVPN client?
Just to state the obvious, this is for Linux/Unix, not for Windows. And it requires netcat (not installed by default in some distros). Also, if your Linux distro does not have the "timeout" command, just use the netcat "-w" parameter, like "nc -w 10 -u openvpnserver.com 1194".
Apr
1
awarded  Revival
Mar
26
comment Securing php on a shared apache
Ah, got it. Sorry, I missed it just reading your answer (you mentioned it in your question).
Mar
22
comment Securing php on a shared apache
but user A (or B) can write a PHP script to read any file in the other user's directory. As the script will be run as www-data and www-data has read access to the both user's content, they still can access any file. There are options like suphp, php-fcgi, mpm-itk, mod_ruid2 and other solutions to handle this, runnung each user's scripts as that user only (some of those solutions will only handle PHP scripts, other files will need to be readable by the Apache).
Mar
22
comment Mod_ruid2 vs. SuPHP
But mod_ruid2 will start as root then switch to the script owner, right (like mpm-itk)? So any vulnerability hitting before the setuid operation may allow an attacked to root the server. This don't happen with mod_php or suphp (as both run as non-root users).
Nov
15
comment Should I use suPHP or DSO (mod_PHP) when php scripts need to manipulate files?
suPHP is indeed slower than mod_php. However I prefer to use it because it's easier to manage permissions (specially for servers hosting scripts from different departments/users). It also uses less memory. Anyway, I think people looking to use suPHP may as well explore the PHP-FPM (FastCGI Process Manager) included in PHP since 5.3.3 (an marked stable since 5.4.0) which offer similar access separation but with better performance.
Oct
29
awarded  Revival
Aug
27
comment Is there a way to make encryption default per contact in Thunderbird?
The OP seems to be asking about S/MIME encryption, not PGP/GPG.
Jul
23
awarded  Yearling
Jul
11
answered Is there any proper documentation for mod-evasive?
Jul
11
answered What does the error message 'Attempt to serve directory' mean in apache log?
Jul
6
answered Why is Postfix trying to connect to other machines SMTP port 25?