Tag Info

New answers tagged

0

This Ansible role does exactly what you ask. First download the role to your machine: # ansible-galaxy install https://github.com/MindPointGroup/RHEL6-STIG,devel Then create a small playbook called harden.yml: --- hosts: 127.0.0.1 roles: - { role: RHEL6-STIG, rhel6stig_cat1: true, rhel6stig_cat2: true, rhel6stig_cat3: true } ...


1

As gwillie said in his comment, connecting to a Virtual Box guest machine depends on the network settings of that virtual machine. The default settings seem to be NAT which will make the layer between the guest and the host behave like a NAT device (like e.g. a router) and is therefore most suited for situations that don't require access from the host to ...


1

The problem was that I encrypted the volumes before enabling FIPS. As garethTheRed alluded to in a comment, LUKS used a non FIPS approved algorithm, so when FIPS was enabled things went bonkers. The solution is to Enable FIPS Encrypt volumes In that order. This guide was also useful in solving the problem. It is lengthy with extra explanation so I ...


2

This error means you don't have a X server running. If you are in ssh, you need to forward your X server as stated by Ulrich Schwarz. Also make sure that you have a Xorg server running on your client. If you are on your local machne, you need to be in a graphical session to run a graphical program. The following command might help to get the Xorg server in ...


0

Just to add to Mark's link; I recently had to upgrade to 6.6 (specifically). My method was: yum --releasever=6.6 update


-1

This is all fine and dandy, but what about the lag time between having to make the request for memory, mapping it out for what the disk cache has to release? Sure, you may say it's minimal, or not even noticeable, but maybe I care about the 0.0000001 seconds added because of this process. Who are you to decide how my RAM is used? What if I don't want to ...


0

To fix this: yum remove epel-release Re-download the epel-release RPM Install it yum install pyliblzma


4

usermod is a tool for modifying the local /etc/passwd database. It cannot be used to modify accounts delivered through Active Directory. id on the other hand looks up any user account regardless of its source. (Actually this is controlled with the passwd setting in nsswitch.conf but if you have integrated AD you'll be using multiple sources.) As mentioned ...


0

Satellite is Red Hat's product for lifecycle management, configuration management, etc, and is more than capable of meeting your stated requirements: https://access.redhat.com/products/red-hat-satellite Why are you not using it?


0

If you do not want to change any server configurations Go to $HOME/.ssh/config and add Host * GSSAPIAuthentication no


2

There is no difference between files (including directories) created by the system or by a user because in the end it is the same system call. Later on it is impossible to tell who was the owner of the process which created the file or directory. By the way, "the Linux system" is mostly the user root: there is no special user. Furthermore, installing always ...


2

Depending on what you mean by "created by system", you may be able to use the packaging system to determine how a particular directory was created. For example, on an RPM-based system (e.g. RedHat, Fedora, CentOS etc): rpm -qf /var will give something like filesystem-2.4.100.x86_64 indicating it was installed as part of the filesystem package, whereas ...


0

This is resolved. The issue was that we changed the uid of contentmanager user on all client machines so that uid is unique. The issue looks like was idmapd had cached the earlier uids . Clearing the NFS cache on all client machines resolved the issue. sudo nfsidmap -c


-1

From the command line you can use the tar command.


1

There are two parts in this. One is the grub part which is hidden by the boot screen. You can enable its output for textual consummation by changing the line GRUB_CMD_LINE_LINUX_DEFAULT in /etc/default/grub on Ubuntu machines and remove quiet splash: #GRUB_CMDLINE_LINUX_DEFAULT="quiet splash" GRUB_CMDLINE_LINUX_DEFAULT="" run update-grub after this for ...


5

I don't think that there is a concept of "directory created by system". When you're installing your system, installation media often gets job done for you - you see the result(e.g. /etc directory created), but that really is done by user who happened to run script. Anything created by "system" could be treated as created by root, but there's no way of ...


3

The shell history is maintained for interactive shell sessions (and is trivial to alter or disable); assuming the remote command is done via SSH, the shell need not even be involved given that sshd can simply fork and exec the command to run. Solutions would include turning on process accounting (this is global to a system) or using some sort of wrapper for ...


0

I've tried systemctl, update-rc.d and even editing the GRUB config, but nothing worked. Then I commented out the default display manager in /etc/X11/default-display-manager, rebooted and finally: the terminal!!!! It's as simple as that!


0

The simplest thing is a cronned job to wget a tree off a public repo box out in the world (mirror.centos.org anyone?) and have it mirror it all in /var/www/html/reponame . Later on, strongly consider looking into the cobbler project from redhat. It's a great repo manager, and later on will help you build repos into distros, glue that with profiles to ...


0

Is your application certified for RHEL6? If so, this is then a support case; and since you're paying for this, do leverage it first. If your application isn't certified for RHEL6, then it's a learning opportunity. "It this certified for RHEL(version)" should be in the first 5 questions you ask about a given product, as you want to be able to use the ...


0

RHEL7 uses a delightfully capricious and arbitrary device name change, to keep things sensible for the non-server or laptop version of its OS which sustain$ its business (really, the advertised reason for systemd too, albeit for questionable benefit). It sets your networking devices like 'en132psDieDieDie' or so, changes if you shuffle slots with your ...


0

Request your puppet invocation generate that file with an authconfig, and THEN sort that file to a chk file which puppet THEN checks the sum on. If the order is the only different, the sorted generated file will not change in sum.


0

I suspect the solution will not be found using VNC; I think VNC will only give you one window at a time. maybe consider an X agent on your client host, and port the display back to your client via xdmcp and the DISPLAY variable? I'm not sure you'll see success there either, but I suspect the chances are higher. Good luck!


0

There is difference between subshell and child process. What you are asking is about subshell. Whenever parent shell finds executable it spawns a subshell, subshell have access to all variables of parent shell. That's why variable PATH is accessible to subshell also. When parent shell spawns a child process then access to variables is restricted in child ...


0

Ok. It was a network related issue. RHEL Cluster is using Multicast, and Cisco switches we got we're using IGMPv1. It appears that when no QUERIER is defined, Catalyst switches let multicast discussion open for 180 sec before timed out. As we can't put a Multicast Router, we decided to use the transport=udpu in the /etc/cluster/cluster.conf on the ...


0

maybe u can try to install using rpm -ivh MySQL-shared-[version].rpm then you try to remove mariadb yum remove mariadb* then you will be able solve the problem


1

The parameter VLAN_NAME_TYPE defines the naming convention that you want to use for the VLAN device names, and thus for the file names. Here are a few assumptions: - I'm using interface eth0. The configuration is the same for a bonding interface, where the physical device name would be bond0, or for the new Dell naming convention emN, pSpN see RedHat ...


0

The solution was easy. I just hadn't set the PATH variable correctly. The new intltool directory in my home directory had to be added to PATH. I had actually tried to do this but had messed up the command to set it.


0

While I think you are tying to solve a human problem programmatically, which is not yet ready to be solved so, you may want to look into the mock builder tool. I'm told it can assess dependencies and install those as required.


1

Within Red Hat Enterprise Linux 5, no. Unless Red Hat releases an enhancement to the package that provides the sort binary, the "human readable sort" behavior will never appear in any RHEL 5 point release. You may be able to install a RHEL 6 package to get this behavior, but I strongly recommend against doing so.


2

Tested on RHEL 6.6 If you're worried about glitches, or errors in your configurations, you can always run /etc/init.d/httpd configtest or /usr/sbin/apache2ctl -t before reload -- a good habit IMHO. A reload does not stop your running processes if you have errors in your configuration, and keeps the current processes running. A restart will stop the ...


-1

Workaround: %pre vgchange -a n %end


0

Are you mismatching your architecture? Uname -i vs filenames on the CD I'm seeing a LOT of i686 there, where I may want to see x86_64; or the other way around. When I see this, and the dependency barf, it's always been an arch mismatch. Good hunting.


0

What does strace show? strace -o /root/blah -ff useradd imatestuser In particular, the "/etc/.pwd.lock" file would not be found by your "/etc/*.lock" glob. blah.26812:statfs("/selinux", {... blah.26812:open("/etc/.pwd.lock", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 7 blah.26812:link("/etc/passwd.26812", "/etc/passwd.lock") = 0 ...


2

Canonical Hostnames Description: The goal of this rule is to force the use of a particular hostname, in preference to other hostnames which may be used to reach the same site. For example, if you wish to force the use of www.example.com instead of example.com, you might use a variant of the following recipe. Solution: For sites running on a ...


0

Start with service autofs stop and chkconfig autofs off. You can also disable GNOME's automounting with the following command: gconftool-2 --direct \ --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \ --type bool \ --set /desktop/gnome/volume_manager/automount_drives false If you also want to disable the automounting of media like CD/DVD ...


1

Running gconftool-2 --get /apps/gnome-screensaver/lock_enabled will return a boolean telling you if screen locking is enabled for the current user. If it is true, you'll know that when the "ActiveChanged" signal is true, the screen is also locked. Since you asked about the config file for both options, you can also check if the screensaver is set to ...


0

The Fedora Project has a list of best practices. Basically, the idea is that if a package requires a specific group, user/group management should be handled by the rpm install script using useradd or groupadd and should use getent to determine if the user or group it needs already exists. This allows administrators the flexibility to manage system ...


0

I realize this is an old question, but I came here trying to find how to create groups in an rpm spec file. Hopefully, the following will be helpful. To check if if a group exists and see which users are part of it, use getent group root for group "root" for example. I also found the following helpful as a standard way to add groups in an rpm spec file: ...


0

you can attempt gcc source buid.GCC requires MPC , MPFR and GMP as pre requisites.For GCC 4.8 , The version dependencies are MPC 0.8 GMP 6.0 MPFR 2.4.2.Down load the source packages , and install all packages under /usr/lib.The order of installation is gmp,mpfr,mpc


0

I posted this question to the Centos 6 Networking forum and the response there was that using HWADDR is the only supported method (at least for NetworkManager). They suggested that I generate the ifcfg-device files with the exact MAC address before the network comes up. That would be straightforward using a init script.


0

Your umask is set to 0002, which means it will mask out write permissions for others. In both your examples, the file created is not writable by others. It's working properly.


0

This is what worked for me. Please change the values as per your environment. This is my PXE file /var/lib/tftpboot/pxelinux.cfg/default parameters :- KERNEL distros/CentOS_7.1_64/images/pxeboot/vmlinuz INITRD distros/CentOS_7.1_64/images/pxeboot/initrd.img APPEND ks=http://192.168.1.100/kscfg/ks_CentOS_7.1_64.cfg ksdevice=link Additionally, I have ...


1

Your example shows that you specified -p which the quoted documentation explains copies the file permissions from the source instead of using umask. Remove the -p flag if you want to use the umask instead.


1

On CentOS (similar to RHEL), libjpeg.so.62(LIBJPEG_6.2)(64bit) appears to be provided by the libjpeg-turbo package. If it is available on your install (probably not if it could not be resolved), you should be able to install it with: sudo yum install libjpeg-turbo Otherwise, you could download the CentOS 6 package and install that - e.g. with: wget ...


1

Have you tried a cron command for job scheduling. Refer this link https://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-autotasks.html


0

This is probably not the answer you're looking for, but to get a new enough glibc for Visual Studio you'd need to upgrade to RHEL 7... If you don't care for support you could try installing a newer RPM from somewhere but I'd recommend against it.


2

It's not usually the parent that searches $PATH. It's usually the kernel. Internally, spawning a new process is a fork (creates a new process but keeps running the current code; the parent and child each usually go into their own if branch) followed by an exec* call (replaces the current process image with a new process image) with optional stuff (such as ...


2

The mysqldump command returns nothing, which is piped trough gzip and ends in an empty gzip file. See: $ echo -n "" | gzip -9 > test.gz $ stat -c %s test.gz 20 This results in a file with size 20 bytes. So the problem is the mysqldump command. Since it's root's crontab the script runs with root priviledges. sudo is not necessary. Use it without sudo. ...


0

The environment that cron runs scripts in is very limited. It may not be finding all of the required programs. Capture the environment variables of the shell in which you get a good dump and carry that over to your cron script.



Top 50 recent answers are included