Reputation
410
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 10
Newest
 Yearling
Impact
~16k people reached

Mar
29
comment Windows translate external IPv6 to localhost IPv4
Then you definitely want SNAT
Mar
29
comment Windows translate external IPv6 to localhost IPv4
You'll want a HTTP proxy that runs on windows and speaks IPv4/IPv6. However, the premise is somewhat absurd -- at the very least you could give it an IPv4 address on the internal private network and arrange for IPv4 SNAT on your router...
Mar
19
answered Giving access of a set of commands to a non-root user without sudo
Mar
19
comment Giving access of a set of commands to a non-root user without sudo
In the specific case of rndc it's sufficient to give him read access to /etc/bind/rndc.key or wherever you've stored the key file that rndc uses to authenticate itself to the named process.
Mar
5
comment Change file system from case-sensitive to case-insensitive
The other big problem is that FAT32 does not support unix-style permissions or POSIX ACLs -- or any other file attributes that most unixen expect to exist.
Mar
5
comment Linux: Case-INSENSITIVE Filesystem
This sounds like a pretty obvious case of "Or you can teach your web developers to be consistent with their file naming, on pain of pain"
Jan
29
comment Why can't MX records point to an IP address?
@Zenexer Traffic laws aren't there for the inconvenience of relatively few expert drivers who know exactly what's safe and what isn't. They exist because of the much larger subset of fucking idiots who think they know what they're doing but don't.
Dec
24
awarded  Yearling
Dec
11
comment PHP Named Pipe Problem
By all that's holy, don't use bare mysql_*. Use mysqli or PDO.
Oct
27
comment Why is DNS returning two different results at random?
@JoshuaFox For future reference, common values for the TTL range from about 3600 seconds at the low end for domains that you know will likely have some changes coming to 86400 (24 hours) at the high end.
Jul
11
comment Restrict a Linux user to the files he owns
Any "web software" that still recommends 777 permissions needs to be taken out and shot. Use suexec or mpm_itk or similar.
Jul
10
comment Let users install software without local administrator rights on domain
I'm sorry, I can't read this question without going into screaming flashbacks around 'everybody is a member of the local administrator group'...
May
17
comment Compromising between fresh and secure PHP packages on production servers?
Uphill, both ways, in the snow, and we LIKED IT. Whippersnappers these days...
May
17
comment Is it safe for a production server to have make installed?
If you already have gcc installed, there's practically no way that make could make any potential security problem worse.
May
10
comment Is installing a GUI on my CentOS server a good idea?
@Codemonkey The fun thing about unix/linux is that the more you learn about it, the less you realize you actually know... But you learn how and where to look for what you don't know.
May
10
comment Is installing a GUI on my CentOS server a good idea?
Repeat after me: "If I don't need it, I will not install it on a security-sensitive server."
Mar
11
comment sudoers file, allow running file as root
What you did wrong was that you still need to call sudo to run evrouter as root. sudo evrouter -d ... etc will work fine.
Mar
11
comment sudoers file, allow running file as root
That's because you asked the wrong question.
Feb
14
comment remove specifying the full path in sudoers
Ding! Gold star.
Dec
27
suggested rejected edit on Allow linux root user mysql root access without password