Reputation
5,701
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
5 16 42
Newest
 Nice Answer
Impact
~713k people reached

Apr
7
comment What makes a Linux Distribution “Enterprise”?
@Erathiel I believe CentOS is largely similar to RHEL, it is even managed by Red Hat. So probably apart from proprietary management tooling in RHEL there is probably little difference. Another example: Oracle Linux used to be an exact copy of RHEL and still largely identical including the identifiers in /etc/issue and probably /etc/os-release (didn't check the latter one). Red Hat is not amused by the fact that Oracle is copying their efforts and selling premium support to former RH customers. So no, there is very little to nothing 'extra' special about enterprise readiness.
Apr
7
comment What makes a Linux Distribution “Enterprise”?
@Erathiel In my opinion CentOS is not an enterprise-grade distribution. I certainly won't approve it in my employer's datacenters, not while I'm in charge of UNIX/Linux landscape. There is no commercial support, there is no way to prove to customers that I did everything in my power to prevent unscheduled unavailability.
Mar
24
comment Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`
This was helpful: Why doesn't the TLS protocol work without the SSLv3 ciphersuites?
Jan
11
comment How to restore a Fat32 filesystem under Linux
Didn't check the article in detail, but I've done something similar like this: andremiller.net/content/… Better safe than sorry, make a temporary copy of your file for experimenting.
Nov
23
comment Should all other versions of BASH be uninstalled after patching with the latest version?
It is not so much if you need to uninstall old versions, you do have to figure out why the old version is still called while a new version is already available on your system. I am unfamiliar with your distribution, but removing software that is in active use can be dangerous.
Sep
26
comment What does env x='() { :;}; command' bash do and why is it insecure?
Nice explanation. This question is receiving a lot of views (probably not everybody being as proficient in bash as the others) and I believe no-one yet spent a couple words on what { :;}; actually says. That would be a nice addition to your answer in my opinion. May explain how you get from your example to the original command in the question?
Sep
25
comment What does env x='() { :;}; command' bash do and why is it insecure?
Up until this moment there has not been an accepted answer. I'll probably wait for another couple days before accepting one. The downside of this answer is that it doesn't break down the original command, nor discusses how to get from the original command in the question to the commands in this answer, showing they are identical. Apart from that it is a good explanation.
Sep
25
comment CVE-2014-6271 Bash Vulnerability example
Related: unix.stackexchange.com/questions/157381/…
Dec
5
comment udev rule not working
you can check what is happening with unbuffer udevadm monitor --environment. unbuffer is in expect-dev and ensures that your output is continuously updated (rather than buffered in 4kB blocks causing you sometimes to mis the last messages).
Dec
5
comment How do I find the offset of an ext4 filesystem?
photorec will probably be able to get your files off the disk, but filenames and pathnames will be lost. If you manage to mount the filesystem that is of course your better option, but if testdisk didn't find any, chances are that the start of the filesystem is corrupted too.
Dec
5
comment How do I find the offset of an ext4 filesystem?
Try testdisk and the accompanying photorec.
Nov
6
comment How to list all the files used during Linux boot
Would auditing be an option or will that start too late during boot?
Oct
5
comment Typical use case for a group password
Maybe I should send Ken an email, asking for his consideration during the design phase ;o)
Oct
2
comment Typical use case for a group password
That is just an example, it has an 'x' and there are no group members other than ntp user itself. I just don't get what problem you are solving by setting the password field to !
Oct
1
comment Typical use case for a group password
Not sure what you mean. Eg. I can't newgrp ntp already, how does !-locking change that?
Oct
1
comment Typical use case for a group password
You already mention sudo and ACLs. I guess udev comes with a similar story, of course with a focus on devices. Interesting read.
Aug
29
comment mbcache documentation
Interesting. I wonder if bcache has good resilience after a power outage. One of the problems I face with flashcache is that it takes a fairly long time to flush the cache to my RAID set. A large cache may take longer than my UPS is able to sustain power to the system. However slight chance of this happening, it does influence the size of the cache that I can use.
Aug
28
comment Solaris 11 and syslog over TLS
No I haven't tried that because at the moment I don't have access to a server and my colleagues who do are all early birds ... @Solaris 11.1 interesting find, absolutely. I have to double check with Oracle I guess, I don't like betting in 24×7 enterprise environments. At least it confirms the bits of information I found online.
Aug
28
comment Solaris 11 and syslog over TLS
I know the developers of rsyslog support Solaris, but the big question in an enterprise environment is will Oracle support my Solaris 11 server if I replaced the the standard syslog with rsyslog. And the other part of the question is if perhaps rsyslog is already installed by default (I doubt it, but haven't been able to find a reference).
Aug
17
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
@StephaneChazelas Here is an interensting find: ls -l /etc/alternatives/vi which outputs /usr/bin/vim.tiny which in turn explains a lot of the strange behaviour. I solved it with sudo update-alternatives --config vi.