November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

Categories

November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

Open Web Application Security Project

In today’s article we will guide you through the process of installing mod_security with the OWASP (Open Web Application Security Project) core rule set on a CentOS 7 from source.

ModSecurity is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity must be configured with […]

Manage Time service on RH and CentOS 7

When Linux system first boots the hardware clock is read first. The time on the hardware clock read from local hardware clock in UTC – Universal Time. Local time is the actual time in the current time zone. System time, unlike Hardware clock maintained by operating system. System clock is completely independent of the hardware […]

LAMP on CentOS7

Many open source p[projects require LAMP with database and database user ready to go. Here we will look at basic commands on CentOS7 to get it up and running quickly.

After CentOS7 installed update all packages yum update -y Install apache web server yum install httpd Start service and enable it to start on boot […]

OpenSSH Server Best Security Practices

OpenSSH server is the standard SSH client and server. OpenSSH is suggested for remote login, transfer file by means of SCP or SFTP, and a much more. SSH is perfect to keep confidentiality and integrity for data exchanged between two systems and networks. OpenSSH encrypts all traffic and password to effectively eliminate with assaults. In […]

Open vSwitch installation on CentOS 7.2

Open vSwitch installation on CentOS 7.2 Open vSwitch (OVS) is a production quality, multilayer virtual switch software available for various platforms. The server platforms include x86 based latest Linux distributions e.g. Debian 16 LTS or CentOS 7.2. Popular SDN switch operating system development company Pica8 also bundles the OVS in a custom Ubuntu version for […]

expect,sshpass,pash

expect,sshpass,pash rpm -qa expect

yum install expect -y

useradd mohan

echo 123456|passwd –stdin mohan

su – mohan

ssh-keygen -t dsa -P ” -f ~/.ssh/id_dsa >/dev/null 2>&1

yum install lrzsz -y

cat mohan_sshkey.exp #!/usr/bin/expect if { $argc !=2 } { send_user “usage: expect mohan_sshkey.exp file host\n” exit } […]

CentOS 7 Change Network Interface Name From Eno* To Eth0

CentOS 7 Change Network Interface Name From Eno* To Eth0

After you installed CentOS 7.0 or RHEL 7.0 system, you maybe notice that the default name of network interface was changed from “Eth*” to “Eno*”. How do I change network interface name to “Eth0? in CentOS 7.0? This post will show you the ways to […]

GlusterFS servers on RHEL 7 and Centos 7

GlusterFS servers on RHEL 7 and Centos 7

vi /etc/hosts

192.168.1.71 apache1.rmohan.com apache1 192.168.1.72 apache2.rmohan.com apache2 192.168.1.74 apache3.rmohan.com apache3

For this lab, we disabled both firewall and SELinux

vi /etc/selinux/config egrep “^SELINUX=” /etc/sysconfig/selinux SELINUX=disabled systemctl is-enabled firewalld disabled

systemctl disable firewalld yum update yum -y install wget openssh* net-tools ntp ntpdate -u 0.centos.pool.ntp.org

[…]

pvresize command

Resolution

pvresize is a tool to resize Physical Volume which may already be in a volume group and have active logical volumes allocated on it.

Expand the PV on /dev/sda1 after enlarging the partition with fdisk:

pvresize /dev/sda1

Shrink the PV on /dev/sda1 prior to shrinking the partition with fdisk (ensure that the PV size […]

SSH vulnerabilities: HMAC algorithms and CBC ciphers

e defaults in the various RHEL version differ and the current default can be found in manual page for sshd_config. For example RHEL6:

The default is: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128, aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc, aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se

You can remove the CBC ciphers by adding the line for RHEL7:

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour

The line for RHEL6:

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,arcfour

The line for RHEL5 (note the […]