I am trying to initilaize auditing on a Red Hat 5.2 enterprise server. Things like:
/sbin/chkconfig audit on
/etc/audit/audit.rules
/var/log/audit/audit.log
are what I am looking at, but I need to know where things go to start the audit service. A simple example with all of the pieces set to audit, then I can add rules to match requirements.
In 2 weeks, I will be handed over 8 servers, each one hosts around ~3 virtual machines, which will make them a total of around ~24 servers. And part of my initial responsibility is to make sure that these servers are secured and ready for me to look after.My question is, what are the best procedures (or as I will call it "checklist") to assess and audit each server, and be 100% sure that the server doesn't have a rootkit and everything is secured.
View 1 Replies View RelatedIm new in linux i want to configure my redhat machine as both router and transparent proxy!
View 1 Replies View RelatedTo run applications compiled for RedHat 4 Enterprise (gcc3.4) on RedHat 5 Enterprise (gcc4.1), what should I do?
View 4 Replies View Relatedhow i have a machine installed Red Hat Enterprise Linux Server release 5.1 with 2 modem (usb & com port) still i want to configure RAS server so some pple able to connect my server and send me some files.
View 4 Replies View RelatedI am trying to implement a NAS running Debian to replace the Windows 2003 file server.We implemented the system and we integrated it with the active directory. Is it possible to manage the access rights using windows tools and get the same amount of detail(not the right word) on access.As an example, we have the following folder structure:
Teams&Projects All users list, admins full
Team1 All users list, admins full, some users modify
Project1 All users no access, admins full, some modify, some list
I have read some articles on the internet that this is possible but I do not have enough information to implement this.
I am in need of the instructions of how to create a boot disk for my RED HAT Linux Enterprise Server. I have a floppy drive also it this helps.
View 2 Replies View RelatedI have a rhel5 as my file server with active directory intergeration and using samba for folder sharing ,webmin to manage the shares.We haveany folders and subfolders and files.We are facing the following issue.We had given a folder called yardworklist which is shared by 8 people with full access.The yardworklist will have more than 80 folders which represents each ship.The problem we are facing is some user copy a folder or file from a specific ship folder say SEA HERON to another ship's folder say BOW CLIPPER.The next day the person who wants to work on SEA HERON found the file or folder was missing and use his search tool to get the folder or file. I dont know who is the person did this.Basically a event log will also be enough like which file has been copied by whom to which place.
View 2 Replies View RelatedCan you Please tall me What are the configuration file for DNS
View 5 Replies View RelatedI have been out of the UNIX world for some time preoccupied with real life problems. I'm interested in getting a home system up and running, but having difficulties deciding on a base platform.I am leaning towards a Linux, versus a BSD due to the tremendous amount of employers seeking people with that technology. However, I am attracted to the auditing performed on packages on the BSD end, particularly NetBSD/OpenBSD.Is there a Linux distribution that performs auditing of third party packages? I understand there are some commercial distributions, but wonder if they are more reactive than proactive
View 5 Replies View RelatedI have in my hands a bunch of samba logs, about 24 different files and I was wondering if there was a tool that would go through them and organize them into something readable.I had a gander at Sawmill
View 2 Replies View RelatedAs part of server hardening process i would like to know the Best way of System Logging and Auditing.Following pointould be taken into consideration.Logging of critical eventsLogging access to critical accountsSecure storage and availability of logsReview of logsSecurity of logs
View 2 Replies View RelatedTo run applications compiled for RedHat 4 Enterprise (gcc3.4) on RedHat 5 Enterprise (gcc4.1), what should I do?
View 4 Replies View RelatedInstallation of CVS on Redhat linux
Installing CVS on Redhat Linux Redhat Enterprise 4.0
The following steps give simple steps to install CVS software on Redhat Enterprise Linux 4.0.
1) Download the tarball cvs-1.11.1p1.tar.gz
2) Run "gunzip cvs-1.11.1p1.tar". You will get file called cvs-1.11.1p1.tar.
3) Then extract this file using command
"tar -xvf cvs-1.11.1p1.tar".
4) Then go to directory cvs-1.11.1p1.
5) There you will find a file called INSTALL. Read it once carefully.
6) Now run the command "./configure."
7) Build it using the command "make".
8) Install binaries/documentation using command "make install".
9) Now open file called /etc/services and add the following lines.
Cvspserver 2401/tcp # CVS client/server operations
cvspserver 2401/udp # CVS client/server operations
10) Open file called /etc/xinetd.conf and add the following lines to that file.
service cvspserver
{
Port = 2401
socket_type = stream
protocol = tcp
wait = no
user = root
passenv =
server = /opt/bin/cvs
server_args = --allow-root=/home/cvs -f pserver
env = HOME=/home/cvs
log = /var/log/cvslog
}
11) Space on both sides of = in the above file is a must.
12) Restart xinetd services by running command " services xinted restart "
13) Check whether CVS is running on the port 2401 by using the following command "nmap IP |grep 2401". If the CVS server is running correctly it will give output as "2401/tcp open cvspserver ".
It doesn't output like "2401/tcp open cvspserver"
I'm trying to configure DNS on Oracle Enterprise Linux 5.4 - Kernel 2.6.18-128.el5. When I restart the named service, I'm not getting any errors. But service is showing Failed. What could be the reason?
View 3 Replies View RelatedI have a problem in connecting from windows xp OS to the REDHAT LINUX through vncviewer. The first connection works fine. However, if I want to add more than one connection by establishing the hostname:2 through vncviewer, it stops working. I have tried modifying the file /etc/sysconfig/vncservers to add more than one allowable connections. It still fails...
View 4 Replies View RelatedI am using red hat enterprise 5.7 OS and the problem is that vsftpd won't start. When issuing Service vsftpd start it comes up with failed. I am using the default RPM to install it, also using the default vsftpd.conf
View 8 Replies View RelatedI want to know that the tools used for Network Auditing in linux fedora, can any one share with me the names and little bit detail related to these specific tools. it will be the nice favor for me,
View 1 Replies View RelatedAny body knows any security auditing tool in Linux except Snare..
View 3 Replies View RelatedI set up an apache webserver on a redhat enterprise server 6 last week. It works fine on the localhost. However, the webpage can't be accessed from the other computer. I didn't modify anything related to 'allow,deny' in httpd.conf. The only thing I've done is I added a rule in iptables to approve the access from a computer with a specific IP address. Since I am quite new to iptables, I don't know if there is anything wrong with my setting.
Even I stop iptables, the problem is still there. I don't know if my setting of iptables is correct. Or, there is anything else that I should do?
One of our customers is looking at enterprise audit of their data center (primarily consists of Linux servers) We suggested them towards a SNMP based tool that has some limitations. Any other recommendation is welcome...
View 1 Replies View RelatedI am using a Red Hat enterprise server 5.0 I would like to know if there is a way to extract a single file from inside a war file and display its contents on the screen? For example: I have a file labeled test.war and inside this war there are multiple files/directories. I am interested in seeing the contents of one file labeled MANIFEST.MF without having to unzip the entire war file. does it make sense?
View 6 Replies View RelatedI successfully install vnc server and client in my machine after installation in GUI mode i clicked on service and enable vnc server when i click on start. It says that "This service is being refreshed right now" Then after i use terminal and typed "#service vncserver start"
its display error message "Starting VNC server: no displays configured [FAILED]"
at work place I have an HP ProLiant DL580 with RedHat Enterprise Server 5.4 x64. Today I cloned this machine using clonezilla. What I would like to do is restore the image to VMWare machine for personal purpose (I cannot perform tests on production machine). But after restoring on VMWare I got "Kernel Panic". That's normal due to different hardware.
Now, is there a way to remove the Kernel Panic and correctly boot the machine? I ask our tech department for the RedHat CD1 to enter the "linux rescue" enviromnent, then try to re-read the hardware list with
# chroot /mnt/sysimage
# kudzu
Im having a lot of trouble configuring freeradius for Ubuntu. I have freeradius installed but Im having trouble finding any information on how to edit the configuration files to create users and be able to WPA2 Enterprise. The wireless router that I am using is an Linksys WRT54gl.
View 2 Replies View RelatedI am installing Red Hat Linux enterprise 5.0 on HP proliant ML 110 G5 with X3330, 8 Gb 2 X 250gb SATA Config. Time required for full istallation is around 2hours 30 minutes. What could be the reason?
View 3 Replies View RelatedI have installed Redhat Enterprise Linux Server 5 on my laptop. I have also installed Windows 7 Operating system on the laptop. I want to access windows 7 created ntfs partitons on RHEL 5 server. I tried installing the following rpm's on the rhel5 for accessing the ntfs partitiins.
1. fuse-2.7.4-8_12.el5.i386.rpm
2. fuse-devel-2.7.4-8_12.el5.i386.rpm
3. fuse-libs-2.7.4-8_12.el5.i386.rpm
4. fuse-ntfs-3g-2010.5.22-1.el5.rf.i386.rpm
[code]....
I'm a linux newbie and scripting novice and I'm trying to pull auditing info and dump it into a file. I made some login changes so it would get audited but I don't want to have to sift through the log to see who the user was and what was done. This is what I have below here and I can't seem to get it to extract the info want using the event id. The "ausearch -a $10" from the script should get it from the 10th column but it's not working.If I can get this to work I would like to add additional aureport options.
#!/bin/bash
yyyy=`date "+%Y"`
mm=`date "+%m"`
[code]...
im located in Sudan which is under usa empargo, means some software is restricted in my country. My company which has 5000 emloyee os going to build their own webserver which will hold alot of apps which is compatible with linux i didn't trust M$ windows specially on web, so ive to use linux do u recommend any other release other than opensuse coz o can get free update and patches.
View 5 Replies View RelatedI have installed the Suse Enterprise server 11 SP1 on my laptop. I have the atheros AR8132 network card, and it seams the suse is detecting correctly, but i can't start the network up. He returns an erros saying that the eth0 is not supported by suse, or kernel, i must check to be sure.
View 1 Replies View Related