Search found 23 matches

by ant2ne
2017/06/27 20:37:08
Forum: CentOS 6 - Security Support
Topic: [resolved] selinux disables its self
Replies: 5
Views: 3352

[resolved] selinux disables its self

Everyday at around 1:40 to 1:55 selinux disables its self. I've checked crontab and job and don't see anything that would obviously disable selinux. I'm kind of stumped as to what is going on. I've tried rolling back the kernel, and the logs aren't real helpful. I'm wondering if anyone has seen some...
by ant2ne
2015/11/05 19:37:14
Forum: CentOS 6 - General Support
Topic: Centos repo server hosting redhat rpms
Replies: 1
Views: 607

Centos repo server hosting redhat rpms

I’ve been running a centos repository server that uses lftp to pull the rpms off of a mirror site. Then the local centos system patch off of the local repo. I’ve been asked, if it is possible to host redhat repos off of the same local centos repo. I thought I could lftp the rpms off of the official ...
by ant2ne
2015/08/27 15:48:54
Forum: CentOS 6 - Networking Support
Topic: squids version of Apache's LimitRequestFields
Replies: 0
Views: 621

squids version of Apache's LimitRequestFields

What is squids version of Apache's LimitRequestFields? I suspect it uses the same default as apache and I need to crank it up a few fields.
by ant2ne
2015/06/09 19:52:49
Forum: CentOS 6 - Software Support
Topic: freshclam expert needed
Replies: 2
Views: 1364

Re: freshclam expert needed

Incase anyone else stumbles on this thread or surfs in from google with the same error message...

I think the solution was

Code: Select all

 /bin/rm /var/lib/clamav/*
I think freshclam was comparing local files to the remote ones and getting confused. Removing the local files pretty much forces and update.
by ant2ne
2015/06/09 18:56:31
Forum: CentOS 6 - Software Support
Topic: freshclam expert needed
Replies: 2
Views: 1364

Re: freshclam expert needed

Great, now it started working. I've been troubleshooting this all day and now it just started working and I have no Idea what could have changed. I do know that I told it --no-dns but I could still see dns requests. So I was running down that angle to see if that was the issue, but it just started w...
by ant2ne
2015/06/09 15:57:52
Forum: CentOS 6 - Software Support
Topic: freshclam expert needed
Replies: 2
Views: 1364

freshclam expert needed

I have my own private freshclam mirror. The mirror updates just fine from the internet, the clients have issues. # /usr/bin/freshclam --no-dns --debug -v --config-file=/etc/freshclam.conf Current working dir is /var/lib/clamav Max retries == 2 ClamAV update process started at Tue Jun 9 10:47:07 2015...
by ant2ne
2015/03/24 18:46:54
Forum: CentOS 6 - Security Support
Topic: /etc/sudoers and piping
Replies: 5
Views: 3294

Re: /etc/sudoers and piping

I'm going to go another route. Thanks.

i still would like to know why the sudoers file hates the pipe "|"
by ant2ne
2015/03/24 18:41:56
Forum: CentOS 6 - Security Support
Topic: /etc/sudoers and piping
Replies: 5
Views: 3294

Re: /etc/sudoers and piping

Access to /sbin/iptables -S is insecure. It gives nagios the ability to see what ports are open and from where. I can't give him that kind of power. I don't mind him knowing the number of rules, just not the details of those rules. Basically I'm trying to secure a monitoring script that I found on t...
by ant2ne
2015/03/24 17:40:27
Forum: CentOS 6 - Security Support
Topic: /etc/sudoers and piping
Replies: 5
Views: 3294

/etc/sudoers and piping

Why wont this work?!

Code: Select all

nagios   ALL=(ALL) NOPASSWD: /sbin/iptables -S INPUT | /usr/bin/wc -l

Code: Select all

[nagios@server ~]$ sudo  /sbin/iptables -S INPUT | /usr/bin/wc -l
[sudo] password for nagios: