Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi)

🔒
❌ À propos de FreshRSS
Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
À partir d’avant-hiernixCraft

Multiple vulnerabilities in FreeBSD NFS server code

Par : Vivek Gite

FreeBSD is a free and open source operating system. The NFS (Network File System) is a server and client application that turn FreeBSD into a file sharing server. Users can upload or update files on a remote NFS server. NFS is standard on NAS (network attached storage) devices or sharing data for web servers. A new bug found in NFS server code which could allow a remote attacker to crash the NFS server, resulting in a denial of service (DoS) attack. Another possibility is to execute arbitrary code on the server.

The post Multiple vulnerabilities in FreeBSD NFS server code appeared first on nixCraft.

Bash read file names from a text file and take action

Par : Vivek Gite

I need to read a list of file names from a text file named input.txt and take action each file name. How do I read file names from a text file and say run /bin/foo command on each file? How do I read filenames from a text file and take certain action on those files?

The post Bash read file names from a text file and take action appeared first on nixCraft.

FreeBSD 12 released: Here is how to upgrade FreeBSD 11 to 12

Par : Vivek Gite

The FreeBSD project announces the availability of FreeBSD 12.0-RELEASE. It is the first release of the stable/12 branch. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD jails and more. One can benefit greatly using an upgraded version of FreeBSD.

The post FreeBSD 12 released: Here is how to upgrade FreeBSD 11 to 12 appeared first on nixCraft.

Helios4 Arm-Based Open Source NAS SBC For Linux/FreeBSD

Par : Vivek Gite

Helios4 is ARM-based open source NAS SBC (Single-board computer) for Linux. This NAS (Network Attached Storage) comes with 4 SATA 3.0 port and comes with ECC memory. Let us see some details about the Helios4 Arm-Based Open Source NAS SBC and ongoing Kickstarter camping.

The post Helios4 Arm-Based Open Source NAS SBC For Linux/FreeBSD appeared first on nixCraft.

Ubuntu 18.04.2 LTS released and here is how to upgrade it

Par : Vivek Gite

The Canonical LTD has released an updated version of its long term support (LTS) Linux distribution Ubuntu Linux 18.04.02. You must upgrade to get corrections for security problem as this version made a few adjustments for the severe issue found in Ubuntu version 18.04.02. The Ubuntu LTS enablement (also called HWE or Hardware Enablement) stacks provide newer kernel and X support for existing Ubuntu LTS releases. These enablement stacks can be installed manually but are also available when installing with Ubuntu LTS point release media. These newer enablement stacks are meant for desktop and server and even recommended for cloud or virtual images.

The post Ubuntu 18.04.2 LTS released and here is how to upgrade it appeared first on nixCraft.

Linux kernel 5.0 released and here is how to install it

Par : Vivek Gite

Linus Torvalds the creator and the principal developer of the Linux kernel announced the release of Linux kernel version 5.0. This release increases the major kernel version number to 5. from 4.x. The new change does not mean anything and does not affect programs in any way. From the mailing list:

Te overall changes for all of the 5.0 release are much bigger. But I'd like to point out (yet again) that we don't do feature-based releases, and that "5.0" doesn't mean anything more than that the 4.x numbers started getting big enough that I ran out of fingers and toes.

The post Linux kernel 5.0 released and here is how to install it appeared first on nixCraft.

Dell announces new Linux XPS 13 developer edition 7390 laptop

Par : Vivek Gite

Dell recently announced the new XPS 13 developer edition powered by Ubuntu Linux and Intel's 10th generation Comet Lake CPUs. The new device will soon be available in the US, Canada, and European markets. It is good news for both developers and Linux enthusiast who wants Linux laptop with preloaded Ubuntu operating systems. Let us see new Linux XPS 13 developer edition specs and other information.

The post Dell announces new Linux XPS 13 developer edition 7390 laptop appeared first on nixCraft.

In comics: Linux celebrates 28th birthday

Par : Vivek Gite

On 26 August 1991, Linus Torvalds announced hobby project that was supposed to better than Minix operating systems. He said I am doing a free operating system. Just a hobby and won't be big or professional like GNU. Linux turns 28 years old, and we are going to celebrate Linux's birthday by sharing comics in pop culture that made it even more popular.

The post In comics: Linux celebrates 28th birthday appeared first on nixCraft.

Linux Kernel 5.3 released and here is how to install it

Par : Vivek Gite

Linux kernel version 5.3 released. This version includes many improvements including support for AMD Navi GPU, support for new IPv4 addresses in the 0.0.0.0/8 range, the lightweight hypervisor ACRN for embedded IoT devices and much more.

The post Linux Kernel 5.3 released and here is how to install it appeared first on nixCraft.

CentOS Linux 7.7 released and here is how to update it

Par : Vivek Gite

The CentOS Linux project has released an updated version of its stable Linux distribution CentOS Linux 7.7. You must upgrade to get corrections for security problem as this version made a few adjustments for the severe issue found in CentOS 7.6. CentOS is a Linux distro that is mainly maintained and updated through the work of many users who volunteer their time and effort. It is based upon RHEL 7.7 upstream source code.

The post CentOS Linux 7.7 released and here is how to update it appeared first on nixCraft.

CentOS Linux 8 released: New Features and Download

Par : Vivek Gite

CentOS Linux 8 released. It is a Linux distro derived from RHEL 8. CentOS was created when Red Hat stopped providing RHEL free. These days CentOS mostly used on servers, HPC, and desktop. CentOS is a high-quality Linux distribution. It gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.

The post CentOS Linux 8 released: New Features and Download appeared first on nixCraft.

Linux run a command with a time limit (timeout)

Par : Vivek Gite

I want to start command called foo, and kill it if still running after given DURATION in seconds. How do I run a command a time Limit on Linux? How do I run a Linux command, and have it timeout (abort) after N seconds?

The post Linux run a command with a time limit (timeout) appeared first on nixCraft.

pfetch Linux and Unix hardware information tool

Par : Vivek Gite

The neofetch command like utility written in a bash shell. The main purpose of neofetch is to be used in screenshots to display other users what operating system or Linux distro you are using including theme, icons, hardware config and more. Now we have another tool called pfetch. It is a pretty system information tool written in POSIX sh. Let us see how to install and use pfetch Linux and Unix hardware information tool.
pfetch Linux and Unix hardware running on Ubuntu

The post pfetch Linux and Unix hardware information tool appeared first on nixCraft.

Modern Linux Laptops with Coreboot Firmware From System76

Par : Vivek Gite

Are you looking for modern Linux laptops with coreboot? The wait is over. Coreboot is a free and open-source software. The coreboot project aimed at replacing the proprietary BIOS firmware and blobs. System76 recently announced two Intel laptops with Coreboot, which as an alternative to proprietary BIOS. These laptops are using Intel 10th Gen CPUs.

The post Modern Linux Laptops with Coreboot Firmware From System76 appeared first on nixCraft.

Ubuntu Linux 19.10 released: New Features and Download

Par : Vivek Gite

Ubuntu Linux 19.10 released and will be supported for nine months till July 2020. It is codenamed as Eoan Ermine. The newer release comes with updated Linux kernel 5.3.x, NVIDIA drivers for gaming or AI programming, ZFS on root, OpenStack Train, and more. Let us see what's new in Ubuntu 19.10 and how to upgrade 19.04 to 19.10 using the command-line options.
Ubuntu Linux 19.10 desktop

The post Ubuntu Linux 19.10 released: New Features and Download appeared first on nixCraft.

Debian Linux 10.9 released and here is how to upgrade it

Par : Vivek Gite


The Debian GNU/Linux project has released an updated version of its stable Linux distribution Debian 10 ("buster"). You must upgrade to get corrections for security problem as this version made a few adjustments for the severe issue found in Debian version 10.8. Debian is a Unix-like (Linux distro) operating system and a distribution of Free Software. It is mainly maintained and updated through the work of many users who volunteer their time and effort. The Debian Project was first announced in 1993 by Ian Murdock.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post Debian Linux 10.9 released and here is how to upgrade it appeared first on nixCraft.

Kubuntu Linux Focus Laptop Announced

Par : Vivek Gite

Kubuntu is a free and open-source version based upon Ubuntu Linux. Kubuntu flavor uses KDE instead of GNOME desktop. Now, the Kubuntu project announced the first authorized laptop called Kubuntu Focus in collaboration with MindShareManagement Inc, and Tuxedo Computers. Let us see technical specs and other information.

The post Kubuntu Linux Focus Laptop Announced appeared first on nixCraft.

Helios64 Arm-Based Linux NAS announced

Par : Vivek Gite

Helios64 is an upgraded version Helios4 of ARM-based NAS SBC (Single-board computer) for Linux. This NAS (Network Attached Storage) comes with 5 SATA 3.0 port, M.2 sata slot, LPDDR 4 ram, and hexacore SoC. Let us see some details about the Helios64 Arm-Based Linux NAS SBC, including pricing and hardware specs information.

The post Helios64 Arm-Based Linux NAS announced appeared first on nixCraft.

Dell XPS 13 Developer Edition 2020 Ubuntu Laptop Announced

Par : Vivek Gite

Look like Dell listing to customer feedback. Dell XPS 13 Developer Edition is the ultimate Linux laptop for developers and Linux enthusiasts/power users. The Dell XPS 13 Developer Edition 2020 now supports 10th Gen Intel CPU and 32GB ram. This system comes pre-installed with Ubuntu Linux 18.04, but you can install any other distro.

The post Dell XPS 13 Developer Edition 2020 Ubuntu Laptop Announced appeared first on nixCraft.

CentOS Linux 8.1 (1911) released and here is how to upgrade it

Par : Vivek Gite

CentOS Linux 8.1 (1191) released. It is a Linux distribution derived from RHEL (Red Hat Enterprise Linux) 8.1 source code. CentOS was created when Red Hat stopped providing RHEL free. CentOS 8.1 gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.1 (1911) and how to upgrade existing CentOS 8.0.1905 server to 8.1.1911 using the command line.

The post CentOS Linux 8.1 (1911) released and here is how to upgrade it appeared first on nixCraft.

System76 Announces AMD Threadripper Linux Workstations

Par : Vivek Gite

System76 is a Denver, Colorado-based American computer manufacturer. They are specializing in the sale of Linux powered laptops, desktops, and servers. Last year System76 announced two Intel laptops with Coreboot, which as an alternative to proprietary BIOS using Intel 10th Gen CPUs. Now, System76 updated its Linux workstations line and ship with the latest AMD chips for CPU-intensive workloads. But how much of a difference can 64 cores AMD CPU make?

The post System76 Announces AMD Threadripper Linux Workstations appeared first on nixCraft.

Letsencrypt is revoking certificates on March 4

Par : Vivek Gite

Let's Encrypt is a non-profit certificate authority that provides X.509 certificates for Transport Layer Security (TLS) encryption free of cost. The TLS certificate is valid for 90 days only. However, Due to the bug, they need to revoke many (read as "certain") Let’s Encrypt TLS/SSL certificates. Let us see how to find out if you are affected by this bug and how you can fix it to avoid any problems with your TLS/SSL certificates.

The post Letsencrypt is revoking certificates on March 4 appeared first on nixCraft.

How to install Adminer on Ubuntu 20.04 LTS

Par : Vivek Gite

How do I install Adminer on Ubuntu 20.04 LTS for database management over the web?

The post How to install Adminer on Ubuntu 20.04 LTS appeared first on nixCraft.

bat Linux command – A cat clone with written in Rust

Par : Vivek Gite

bat Linux command in action on my Ubuntu desktop
The cat (short for concatenate) command is one of the most frequently used flexible commands on Linux and Unix-like operating systems. Say hello to bat Linux command, which is a cat command written in Rust programming language. The bat command comes with syntax highlighting, git integration, and works as is a drop-in cat command replacement. Let us see how to install bat on Linux and Unix system for fun and profit.

The post bat Linux command – A cat clone with written in Rust appeared first on nixCraft.

CentOS Linux 8.2 (2004) released and here is how to upgrade it

Par : Vivek Gite

CentOS Linux 8.2 (2004) released. It is a Linux distribution derived from RHEL (Red Hat Enterprise Linux) 8.2 source code. CentOS was created when Red Hat stopped providing RHEL free. CentOS 8.2 gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.2 (2004) and how to upgrade existing CentOS 8.1.1199 server to 8.2.2004 using the command line.

The post CentOS Linux 8.2 (2004) released and here is how to upgrade it appeared first on nixCraft.

How to push/send message to iOS and Android from Linux CLI

Par : Vivek Gite

How to push or send message to iOS and Android
One of the essential tasks for developers and sysadmin is to get an alert notification about failed services or running out of disk space and other critical failures. Let us see how to send or push a direct message to a mobile device powered by Apple iOS or Google Android phone.

The post How to push/send message to iOS and Android from Linux CLI appeared first on nixCraft.

Linux Slimbook Laptop with AMD Ryzen 4000 released

Par : Vivek Gite

Slimbook
KDE project and Slimbook released a new Linux ultrabook with AMD Ryzen 4000 CPU that comes with eight cores, 16 threads, and a Plasma desktop. Let us look into laptop hardware specifications and other information.

The post Linux Slimbook Laptop with AMD Ryzen 4000 released appeared first on nixCraft.

10 Linux commands to know the system

Par : Vivek Gite

10 Linux command to know the system
Here are 10 Linux command to know the system and increase your productivity quickly.

The post 10 Linux commands to know the system appeared first on nixCraft.

bashtop – Awesome Linux resource monitor that shows usage and stats for processor, memory, disks, and network

Par : Vivek Gite

bashtop in action
There is a new kid in town for resource monitoring on Linux called bashtop. As the name suggests, the entire tool coded in the bash script itself that displays usage and stats for CPU, RAD, HDD/SSD, network, and other resources. Let us see how to install and use bashtop, which is an awesome Linux resource monitor. You don't need a Linux desktop to install it. You can also install this app on macOS/FreeBSD provided that you meet software requirements.

The post bashtop – Awesome Linux resource monitor that shows usage and stats for processor, memory, disks, and network appeared first on nixCraft.

Top 15 XKCD comics for Linux and Unix fans

Par : Vivek Gite

Linux is a free and open-source kernel developed by Linus Torvalds, a Unix-like operating system clone. XKCD comic has a long tradition for including humorous geeky cartoons. In this post, I pick my favorite XKCD comics for Linux and Unix fans.

The post Top 15 XKCD comics for Linux and Unix fans appeared first on nixCraft.

Quick tip: Display banner/message before OpenSSH authentication

Par : Vivek Gite

Want to display a message or banner before OpenSSH (SSHD server) authentication? Try this simple tip to show the banner or ASCII logo on your Linux or Unix system.

The post Quick tip: Display banner/message before OpenSSH authentication appeared first on nixCraft.

How To check LXD container BTRFS disk usage on Linux

Par : Vivek Gite
Here is a quick and dirty shell script I put to check LXD container size and how much space they are taking on the BTRFS subvolume. Naturally, you must run the script as a root user, and LXD must be configured with BTRFS storage backend on Linux operating systems. See how to set up and install LXD on Ubuntu 20.04 LTS using the apt command

Top 7 Linux GPU Monitoring and Diagnostic Commands Line Tools

Par : Vivek Gite

nvtop
A video card is a special circuit board that controls what is displayed on a computer monitor. It is also called a graphics processing unit (GPU), which calculates 3D images and graphics for Linux gaming and other usages. Let us see the top 7 Linux GPU monitoring and diagnostic command-line tools to solve issues.

The post Top 7 Linux GPU Monitoring and Diagnostic Commands Line Tools appeared first on nixCraft.

How to install Go [golang] on Ubuntu Linux

Par : Vivek Gite

How do I install Golang on Ubuntu Linux for developing apps in Go?

The post How to install Go [golang] on Ubuntu Linux appeared first on nixCraft.

CentOS Linux 8 will end in 2021 and shifts focus to CentOS Stream

Par : Vivek Gite

CentOS Linux 8 will end at 2021: Project shifts focus to CentOS Stream
CentOS is an acronym for Community Enterprise Operating System, and it is a 100% rebuild of RHEL (Red Hat Enterprise Linux). While RHEL costs money, CentOS offered as a free community-supported enterprise Linux distro. Developers and companies who are good at Linux and don't want to pay RHEL support fees always selected CentOS to save money and get enterprise-class software. However, the free ride is over. Red Hat announced that CentOS Linux 8, as a rebuild of RHEL 8, will end at 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux.

The post CentOS Linux 8 will end in 2021 and shifts focus to CentOS Stream appeared first on nixCraft.

CentOS Linux reborn as Rocky Linux enterprise operating system

Par : Vivek Gite

As you know, Red Hat and IBM shocked the Linux community by killing CentOS 8 stable. There will be no CentOS Linux. Red Hat announced that there would be only CentOS Stream, which will act as a rolling version, and it will be used as next RHEL. Now we have a possible alternative called Rocky Linux.

The post CentOS Linux reborn as Rocky Linux enterprise operating system appeared first on nixCraft.

Top 6 awesome text editors for Linux and Unix command-line users/developers

Par : Vivek Gite

Awesome text editors for Linux unix macos command line CLI users
A text editor is an essential tool for both developers and sysadmin, especially when dealing with text based sessions. We use a text editor to create, edit, and update text. A text editor is used for many things. Some use them to write documents. Some people write code and others use it to edit Linux and Unix configuration files locally or remote servers running in the cloud. Let us see the top 6 text editors for Linux, macOS, and Unix command-line users/developers.

The post Top 6 awesome text editors for Linux and Unix command-line users/developers appeared first on nixCraft.

Significant vulnerabilities that crippled IT world this decade (2010-2020)

Par : Vivek Gite

Significant vulnerabilities that crippled IT world this decade 2010-2020
The last ten years in the computer and IT security world are crippled with so many vulnerabilities. We saw massive cloud computing adoption and end-users using mobile devices with high speed 4G LTE networks. A threat actor may have exploited such weakness in modern computers and networks. Let us look into top vulnerabilities and the attack surface in this decade (2010-2020) that affected Linux/Unix, macOS, IT, cloud-computing, and computers in general.

The post Significant vulnerabilities that crippled IT world this decade (2010-2020) appeared first on nixCraft.

Red Hat introduces new no-cost RHEL option

Par : Vivek Gite

Red Hat introduces new no-cost RHEL option
As you know, Red Hat recently announced that CentOS Linux 8, as a rebuild of RHEL 8, will end in 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. The news met with a strong reaction from the open-source community and CentOS users. Today, Red Hat released a new option where RHEL developer subscriptions can now be used in production environments. The developers and team can have up to 16 systems. In other words, it is a no-cost RHEL that small groups and developers can use to build packages and in production environments.

The post Red Hat introduces new no-cost RHEL option appeared first on nixCraft.

How to install Dart on Linux and set up VIM as IDE

Par : Vivek Gite

Dart is easy to use BSD licensed programming language to build mobile, desktop, server, and web apps. Google creates and maintains the Dart ecosystem. It follows C-style syntax. We can compile code either to the native platform or JavaScript. Flutter allows building iOS/Android mobile and desktop/web apps from a single code base. Let us see how to install Dart programming language on a Debian or Ubuntu Linux and set vim as IDE.

The post How to install Dart on Linux and set up VIM as IDE appeared first on nixCraft.

FreeBSD jail, xen, and .pam_login_access security fixes released

Par : Vivek Gite

FreeBSD jail, xen, and .pam_login_access security fixes released
All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. If the process is privileged, it may escape jail and gain full access to the FreeBSD system. Similarly, when using Xen, a malicious or buggy frontend driver may be able to cause resource leaks. Let us see what and how to fix these security vulnerabilities on FreeBSD.

The post FreeBSD jail, xen, and .pam_login_access security fixes released appeared first on nixCraft.

FreeBSD 13 released: Here is how to upgrade FreeBSD 12 to 13

Par : Vivek Gite

FreeBSD 13 verfication
The FreeBSD project released FreeBSD version 13. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD. One can benefit greatly using an upgraded version of FreeBSD. Let us see what's new and quickly update FreeBSD 12 to 13 using the CLI.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post FreeBSD 13 released: Here is how to upgrade FreeBSD 12 to 13 appeared first on nixCraft.

Quick Tip: Turn off the login banner in Linux or Unix .hushlogin file

Par : Vivek Gite

Did you know? You can turn off the banner in Linux or Unix using a particular file. When you log in using ssh or other methods, you will find tons of information on the screen. Here is how my FreeBSD home server login looks:

FreeBSD login banner

Default motd with my hardware and other info

The first one is /etc/motd, and the second is the output of neofetch called from ~/.profile file. And my Ubuntu Linux box showing stuff too when I login using the ssh command:

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post Quick Tip: Turn off the login banner in Linux or Unix .hushlogin file appeared first on nixCraft.

RHEL 8.4 released and here is how to upgrade 8.3 to 8.4

Par : Vivek Gite

Red Hat Enterprise Linux (RHEL) 8.4 released. This version includes updates and various improvements for developers, hybrid cloud, edge deployments and more.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post RHEL 8.4 released and here is how to upgrade 8.3 to 8.4 appeared first on nixCraft.

FreeBSD bhyve, OpenSSL, GEOM & libfetch security fixes released

Par : Vivek Gite

All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. For example, a memory corruption bug exists in the bhyve hypervisor. Another overwrite the stack of ggatec and potentially execute arbitrary code. There are two issues fixed for OpenSSL in this security advisory too. Let us see what and how to fix these security vulnerabilities on FreeBSD.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post FreeBSD bhyve, OpenSSL, GEOM & libfetch security fixes released appeared first on nixCraft.

How to migrate from CentOS 8 to CentOS stream conversion

Par : Vivek Gite

As you know, CentOS 8 is ending soon. Red Hat is making the shift from CentOS 8 to CentOS Stream. CentOS stream places itself between Fedora Linux and RHEL. It is not 100% RHEL clone but ahead of RHEL development. Think of it as a midstream distro. Of course, if you need 100% RHEL compatibility, then you need Rocky Linux or AlmaLinux. However, the CentOS stream is more than sufficient for me as I only need Apache, Perl, and Python for my use case. This page explains how to migrate the existing installation of CentOS 8 stable to CentOS Stream without reinstalling a new operating system.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post How to migrate from CentOS 8 to CentOS stream conversion appeared first on nixCraft.

How to migrate from CentOS 8 to Rocky Linux (conversion)

Par : Vivek Gite

I already wrote about migrating from CentOS 8 to CentOS Stream. Now, I am migrating Linode VM from CentOS 8 to Rocky Linux 8. The server runs a very simple workload that includes PHP 8.1, MariaDB server and Nginx, and SELinux and firewalld.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post How to migrate from CentOS 8 to Rocky Linux (conversion) appeared first on nixCraft.

How to migrate from CentOS 8 to AlmaLinux (conversion)

Par : Vivek Gite

I already wrote about migrating from CentOS 8 to CentOS Stream. I also have a guide about migrating from CentOS 8 to Rocky Linux. Today, I am working on another side project with my partner, and I wanted to try out AlmaLinux. Hence, this quick post will list steps to convert existing VM or bare metal server from CentOS 8 to AlmaLinux 8. The server currently acts as API for mobile apps, including PostgreSQL, Redis, Python+Django, Apache web server, and SELinux and firewalld.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post How to migrate from CentOS 8 to AlmaLinux (conversion) appeared first on nixCraft.

A cautionary tale about locking Linux & FreeBSD user accounts

Par : Vivek Gite

A cautionary tale about locking Linux and FreeBSD user accounts and ssh logins
Like every other solo developer and sysadmin, I do stuff using ssh. Some stuff is automated using scripts, and others require ssh login. For example, one of my scripts logs into my Linux and FreeBSD server using public ssh keys and does a particular type of work for me. I have a dedicated user account for that purpose called autovivek on Raspberry PI 4 for Ansible and custom script automation. Here is how it works:
{rpi4:~}$ ssh autovivek@192.168.2.17 /path/to/taks1
In other cases, it sends scripts and then executes them on the remote server named 192.168.2.17. Sounds good, right? So, when I need to make backups and other tasks, I lock down the autovivek user account on the server so that it will not modify data on disks. For example, here is how to lock down a user account:
{linux-server:~}$ sudo usermod -L -e 1 autovivek
## OR ##
{freebsd-server:~}$ sudo pw lock -n autovivek

A cautionary tale about locking Linux and FreeBSD user accounts

However, I soon discovered that a user named autovivek can still log into the server and make changes despite being locked down on both Linux and FreeBSD servers.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post A cautionary tale about locking Linux & FreeBSD user accounts appeared first on nixCraft.

How to protect Linux against rogue USB devices using USBGuard

Par : Vivek Gite
usbgurd

usbgurd

You deployed a perfect firewall and other network security policies preventing unauthorized access to the user's desktop computer over a network. However, you still need to block USB device access. We can configure a Linux desktop security policy to protect your computer against rogue USB devices (a.k.a. BadUSB) by implementing essential allow and blocklisting capabilities based on device attributes. For instance, I can define what kind of USB devices are authorized and how a USB device interacts with the Linux system. For example, I can define policy allowing Yubikey with serial number "XYZ" and USB LTE modem with serial # "ABC." Every other USB device access is denied by default.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post How to protect Linux against rogue USB devices using USBGuard appeared first on nixCraft.

❌