4,737 reputation
11034
bio website mattdm.org
location Somerville, MA
age
visits member for 3 years, 10 months
seen 10 hours ago

I'm the Fedora Project Leader. I work for Red Hat — and for the Fedora community at large! – but my posts here are all my own.

Previously, I was a sysadmin in the Academic Computing group at Harvard School of Engineering and Applied Sciences, and before that, I made Boston University Linux.


Jul
24
comment How to recover deleted root of linux system?
It is unlikely that you can easily recover from this. I hope you had some basic manual backup already!
Jul
23
comment What is Linux containers after all?
@beginer You might also be interested in a newer article from Dan, Docker security with SELinux
Jun
17
comment Created 100GB ec2 instance, but only shows 10GB?
unix.stackexchange.com would also be appropriate for this level of question.
Apr
8
comment Heartbleed: how to reliably and portably check the OpenSSL version?
Useful, but doesn't tell you if you have a version with the extension and the fix.
Mar
7
comment Public Servers NATing?
@Anjan Properly speaking, PNAT, which tracks connections and remaps ports so one address can be shared. It is therefore many-to-one. Often, very many.
Dec
29
comment Should logs for /opt go in /var/opt or /var/log?
This package is in EPEL as graphite-web. If you have EPEL configured on your system, can just yum install graphite web. (And these install in standard FHS locations, including logging to /var/log/graphite-web.
Dec
5
comment Enabling Sqlite3 for php on fedora
Also, the above procedure will turn an rpm-based system into one that has a mix of RPMs and randomly-installed software, leading to a management nightmare.
Dec
5
comment Enabling Sqlite3 for php on fedora
In case anyone happens to come across this answer in the year 2013 or later, note that it is completely obsolete.
Aug
6
comment how to make bridge networking with KVM work in Fedora19
Are you sure firewalld is really disabled in the complete sense and not just disabled in the systemd sense? To really disable something in systemd, you have to "mask" it.
Jul
8
comment Is it necessary to disable root account on linux servers?
Also see this on our Unix & Linux sister site: Which is the safest way to get root privileges: sudo, su or login?
Jun
13
comment AWS: how to stop cloud-init from disabling root login
Or put the same line in the provided user-data file in a #cloud-config section.
Mar
6
comment Security concerns in Ubuntu and CentOS
If you standardize on a RHEL derivative, you have the option of paying for actual RHEL for support and updates for systems where you're really concerned about security. You get long-term support and employees working on providing updates, and as a bonus, those employees get a paycheck keep working on that providing updates. (Disclaimer: I work for Red Hat, but I would give this advice when I didn't, too.)
Mar
3
comment SSD for swap on Ubuntu server
That's not entirely true. Read more carefully. Tht said, the information is now over two years old.
Feb
23
comment Fedora Linux 18: firewalld Blocking All Ports After firewall-cmd --enable
This is totally it. I filed a bug about this a few months ago, at bugzilla.redhat.com/show_bug.cgi?id=874912
Feb
12
comment Why does host swap out VMs when there are 16GB of buffer cache and swappiness = 0?
In which case you should investigate using cgroups around your vms.
Feb
12
comment pam_tally2 or pam_faillock account lockout with ssh
This doesn't answer your question directly, but, try fail2ban. (It's in EPEL.)
Feb
8
comment Different Linux Distributions Producing Different Machine Generated Code
What libraries is this program linked against?
Feb
5
comment CentOS log high cpu usage
If this is an answer, answering the question shouldn't be out of scope. If this is just a comment, it shouldn't be an answer.
Feb
4
comment “su” does not work on FreeBSD
Yeah, this. The command given in the question won't work on Linux either.
Jan
15
comment Apachectl Missing from Apache HTTPD Binary
@Kevin: Yes, that's the source code.