New answers tagged

0 votes

in arm64 linux, when linux is to be run in EL2 (bootloader in EL3), do I have to set something for this during kernel build?

When we use u-boot as bootloader, (I think it will be the same if we do it using UEFI and grub, or arm reference design) the bootloader runs at EL3 and at the final code sets the elr (address to ...
  • 305
0 votes

Selinux php-fpm httpd and mariadb socket connection

I can confirm that this happens with MariaDB 10.6 on AlmaLinux 9 and that the SELinux policy posted by @Brian works.
1 vote

How Does Linux Generate Random Numbers on Startup

Lack of entropy has been a problem, especially for older operating systems where there was no random device or other such API available, or for cloud or cloned operating systems that might all have ...
  • 33k
1 vote
Accepted

Firejail --private can't launch .sh file in home directory

From man firejail: --private Mount new /root and /home/user directories in temporary filesystems. All modifications are discarded when the sandbox is closed. Example: $ firejail --private firefox --...
  • 26.6k
1 vote

Should I remove ICMP Protocol from firewall rules base on security concern?

There's been many discussions around ICMP allowing leaking type of messages. However, it was strengthen in ICMPv6 which would mean that all the CVE about those messages are probably obsolete (see CVE ...
  • 2,419
0 votes

How does Linux Manage the Termination of Sessions?

Linux doesn't decide to terminate sessions because of the *.conf files. While logins are at the limit, Linux simply refuses new sessions.
  • 1,725
0 votes

Is there a better way to prevent other device access to IPv6/IPv4:80 on network?

iptables -I INPUT -p tcp --dport 80 -j DROP ip6tables -I INPUT -p tcp --dport 80 -j DROP
  • 498
0 votes

Is there a better way to prevent other device access to IPv6/IPv4:80 on network?

If you use firewalld or ufw, rules will be applied to both IPv4 and IPv6. You will not have to handle them separately. ufw might be simpler and easier to learn. firewalld runs a process which uses ...
  • 45.3k
1 vote

Weird network traffic on Ubuntu 22.04

Try using iptables instead of ufw. UFW works at the software level, where IPTables works at the kernel level: Run these commands in a terminal: /sbin/iptables -A INPUT -p tcp -m multiport --dports ...
  • 26
1 vote

How DM-Verity works?

Disclaimer: I'm no expert but sharing what I've learned as I set up dm-verity on a RPi. I'll try to address questions 1 and 2. Considering the explanations of dm-verity that I have found that ...
  • 233
0 votes
Accepted

What causes "Network Change Was Detected" warning on a machine with static IP?

This issue continued occurring, until I happen to find that Disabling IPv6 had worked on ubuntu. I have disabled my IPv6 (it was set to automatic) & I have not seen this problem occur since the ...
  • 815

Top 50 recent answers are included