965 reputation
1515
bio website charm.cs.uiuc.edu
location Illinois
age 27
visits member for 4 years, 10 months
seen 23 hours ago
Grad student in CS. Likes systems-y stuff, currently working on large-scale parallel programming.

Feb
11
awarded  Famous Question
Oct
18
revised Permission Denied for User with Sudo Privileges
Cut pointless signature line
Oct
18
suggested suggested edit on Permission Denied for User with Sudo Privileges
May
30
awarded  Nice Answer
May
30
awarded  Yearling
May
30
awarded  Yearling
Apr
6
awarded  Popular Question
Dec
22
comment How do I make the SSH experience for one user the same as for another user
It sounds like you used some unusual tool for user account creation that did essentially no setup. The standard tool on Debian-derived systems is adduser, which should give you a fully-configured account and populated home directory.
Nov
3
awarded  Notable Question
Oct
13
comment How useful is mounting /tmp noexec?
equaeghe: What package is that? It should probably be reported as a bug. I'm willing to bet there's a security vulnerability to be found in how it's using that, too.
May
31
awarded  Yearling
Mar
7
comment Is Postfix the same thing as Sendmail?
Postfix does emulate Sendmail's implementation of sendmail, the message submission program. Other than that, they serve the same purpose, but accomplish it by rather different means.
Jan
20
comment Quota with Git on Gitosis?
Also, Gitosis is a dead project. If you need to make this sort of change, it's probably best to migrate to Gitolite, which already has finer-grained permission structure.
Jan
10
revised How useful is mounting /tmp noexec?
added 254 characters in body
Jan
5
awarded  Popular Question
Dec
20
awarded  Citizen Patrol
Nov
4
comment How do we secure our source code?
Your usage of 'security' is primarily focused on confidentiality and availability. I've addressed the missing aspect of integrity on SO: stackoverflow.com/questions/3974075
Oct
20
comment What are best practices for securing source code on a development network?
It sounds like they key thing to your organization is being able to vouch for the integrity of the code that you deliver to your customers. You have at least one part of that down, in that you sign your binaries. The general security measures you describe can help support a claim of integrity, but there's more that can be done to address this concern directly. I've started addressing this more directly over at StackOverflow: stackoverflow.com/questions/3974075
Aug
30
awarded  Nice Answer
Aug
30
awarded  Nice Question