I tried updating my modsecurity core ruleset to the latest version 2.0.8 and something seems broken. I didn't change any of my configs, I just downloaded the latest ruleset archive and extracted it just like I always do, If I go back to the previous version I was using, 2.0.4. everything works fine. Has anyone else had problems with 2.0.8?
View 4 RepliesJust had ModSecurity with CRS installed for me on my hosted website, which I'm hardening after a recent hack. My site is a php-based user community with MySQL back end, so people register as members via php.
First, I'd like to properly log malicious activity Then I'd like to deny access where an attack looks likely Thing is, I'm not sure which /etc/apache2/modsecurity_crs modsecurity config files to tweak.then I can't even see my login page because I'm forbidden from the .php file it loads.I'm guessing I need to change rules individually but I have no idea how or which to change to stop attacks. The CRS documentation is just a bit too heavy to give me the basics.
I use iptables firewall (v1.4.1) installed on FC8. I'm trying to limit the inflow traffic for the port 1723 to certain MAC addresses. To experiment with the mac option, I've written the following iptables rule:
Quote:
iptables -A INPUT -m -mac --mac-source 10:08:08:08:08:10 -j ACCEPT
It didn't work. It gave me this error message:
Quote:
iptables v1.4.1: Couldn't load match `-mac':/usr/local/libexec/xtables/libipt_-mac.so: cannot open shared object file: No such file or directory
Try `iptables -h' or 'iptables --help' for more information. Does that mean the mac module wasn't installed/enabled?
I want to buy a new external USB hard disk drive, and my eye was drawn by the 1TB CORE External Desktop USB 2.0 Very appealing was the comment "Plug n Play - no software to install". But then I noticed the sentence: "Includes DES lock - Protect all your important files." This set the alarm bells ringing. If the drive comes with a DES protection lock, is this likely to work with Ubuntu? Or is it going to be a Windows-only thing, locking me out cos I don't use Windows?
View 9 Replies View RelatedI am trying to renew the existing SSL certificate by using genkey for our shopping website. i havent seen any information how to generate a new certificate for. Is any one could tell me how to change SSL certificates?
View 4 Replies View RelatedI'm going to do a fresh instalation, I have an Intel Core 2 Quad, so I'm tring to get the 64-version from [url]but the file says "amd64", will this work for me?
View 2 Replies View RelatedWhen I am trying to install Fedora Core 10 into a XEN VM i get an error stating that images/xen directory does not exist on the DVD image.
View 2 Replies View RelatedIn my Open-Suse server I have a script, where makepasswd output(by default it generates similar passwords: cGyTbqpr, tpJ1LA, 33EXdo) is redirected to mkpasswd(which uses DES by default) in order to generate salted hash of this previously generated password. I would like to test the strength of this system. I have a quad core CPU, and if I start John The Ripper like this(I want to use -incremental:all flag):
john -incremental:all passwd
..only one core is utilized at 100%. Is there a possibility to make all four cores to crack this password? Or is this possible only after reprogramming John The Ripper? Or what is the algorithm for generating passwords with with -incremental:all flag? I mean if John generates passwords randomly in brute-force mode, then it's smart to start four different John processes simultaneously because then one of those four will find the password firs
I am using HP G62 Notebook running i3 with intel(R) HD graphics card. I have installed fedora 13 and the display is not so good as it used to be when i used my old laptop and desktop effects require me to have 3D acceleration.
View 3 Replies View RelatedIm looking at buying an HP Proliant server with 4 cpus, like this [URL] will Debian be able to run on this and use the 4 CPUs?
View 2 Replies View Relatedi am running gigabyte GA-M68M-S2P and AMD sempron 2.7. the problem is when i try to run dual core. it will boot and run for 2mins then it crashes. single core runs perfect.
View 6 Replies View RelatedJust a quick question. Does Kubuntu Karmic support core 2 E8500 out of the box or do you need the SMP kernel?
View 3 Replies View RelatedI've a Compaq CQ61 laptop, and i noticed that one of the cores is always at 100%.
I didn't check the duration of the battery but surely it will "eat" my battery in a hurry
I have an HP Pavilion m7480n PC with Windows XP installed on the C-drive. I successfully installed FC 12 onto the spare USB drive. When I rebooted the PC all I got was a blinking underscore at the extreme upper left position of a totally black screen. After a bit of experimenting I found that if I hit the F1 key during the boot process, go into the BIOS setup, do nothing within the setup, and press ESC to get out of the setup then the PC will go back into the boot cycle a second time. During the second time however a small text message appears with words to the effect "Press any key to enter GRUB..." after which the GRUB splash screen comes up with the choice for FC 12 or "Other" (referring to Win XP). At that point I can boot into either one.
View 4 Replies View RelatedI just loaded F14 on an old Dell Dimension 3000 with a dual core processor but only one is showing. Here's the output from top:
processor: 0
vendor_id: GenuineIntel
cpu family: 15
model: 4
[Code]....
I have a command line OCR program called OCR Shop XTR (Vividata corp) that I am using on a system with a 6-core AMD chip. I changed the bios so that the 6-cores were activated, but htop shows me that while the program is running, I am only getting activity on one core (the program maxes out the one core with consistent usage between 97% and 100%).
I have read that many programs are not written to take advantage of multiple core cpu's. However, I am just hoping that there is some way to get this program to take advantage of the extra cores. Does anyone know of a way to invoke programs from the command line which would spread the workload out among additional cores?
Here is the output of uname -a:Linux linux 2.6.37.1-1.2-desktop #1 SMP PREEMPT 2011-02-21 10:34:10 +0100 i686 athlon i386 GNU/LinuxAnd here is the output for one of the cores from cat /proc/cpuinfo:processor : 5
vendor_id : AuthenticAMD
cpu family : 16
model : 10
model name : AMD Phenom(tm) II X6 1100T Processor
stepping : 0
[Code].....
Is there any Linux API that will let me control on what core will a thread run? If not, do I have to use assembly language?
View 2 Replies View RelatedI have now installed Wheezy on two different hard drives and in each case it seems only one CPU of my dual core CPU computer is recognized. System Monitor, Gkrellm and lscpu show just one when prior to the new install the old Wheezy showed both CPU's. I have put the hard drive into two other computers with dual core CPU's and all show just one CPU.
Interestingly System Profiler and Benchmark (hardinfo?) > Devices > Processors now show a large amount of processor infomation when with the old Wheezy I would only see both CPU's listed and nothing else.
I recently read in a forum that by default the Linux kernel only activates one of two cores in a dual core processor. Searching online gave one option to find out and that was the mpstat command. I therefore ran the command and got the following output.As the result says, it shows only 1 cpu. I was wondering what I could do to activate both cores in my machine, and whether doing so was going to cause me any problems.
View 14 Replies View RelatedAssume someone bind a particular process to a particular CPU core(In multi core machine) by using sched_setaffinity() like functions. Then how we can get that process running core id and CPU core utilisation of that process on that running CPU core(Pragmatically or by a Linux command)?.
View 5 Replies View RelatedI have created a virtual machine of a system running Fedora Core 4 and I need to upgrade it to Fedora Core 10. Based on what I have read, it iis possible so I started theupgrade process. I get an error message saying that /dev/hda6 (my root paritition does not exist) even though it does.
Does the installer need to read a label from /etc/fstab? I executed tune2fs -L / /dev/hda6 amd ,and added LABEL=/ for the corresponding entry for fstab. but the FEDORA CORE 10 is still giving the same problems for the installation process. Should I upgrade to an intermediate verson like Fedora Core 7 first?
I've a program that launches new processes, and wait for them to die before it exits. So, for example, my program is a process, and it launches 3 more processes, and when the 3 child processes end, it will exit.
As you see, at end of the example, the program used a total number of 4 processes.
1 - Now, I'm running this program in a CPU with 4 cores. This means that the program used each core for each process?
2 - How can I know which core the program used?
I want to generate core dump files from my program when it crashes. Its a pretty big process and has about 10-11 threads in it.I have followed the documentation to enable core dump by setting ulimit to unlimited etc. I quickly tried "A demo program creating a core dump" from the following webpage, which succeeds in Segfault and dumping a core file in the directory that I configured.However, I tried running my original program and caused it to crash. I did this by making calls to kill(), raise() or the same null pointer access as shown in the webpage above. In each case, my program crashed but did not generate a core dump file. Am I missing something?My program is in C++ and my environment is Redhat 9.0 (kernel 2.4.20)
Going through the "Why do I NOT get a core dump?" section on the same webpage as above, I can see two potential problems. One - there are issues with the suid/sgid (bullet # 6). I am not able to change any settings with suid because my system does not contain either /proc/sys/fs/suid_dumpable or /proc/sys/kernel/suid_dumpableTwo, my program has threads in it and the bullet # 8 is the problem.
We have a small cluster of 20 HP systems, all running CentOS 5.3 in an NFS-root environment. Half are quad-socket, quad-core Xeon E7340 @ 2.40GHz (total 16 cores), the other half are 8-socket, quad-core Opteron 8354 (total 32 cores). All systems have a Mellanox Infiniband adapter ("Mellanox Technologies MT25418 [ConnectX VPI PCIe 2.0 2.5GT/s - IB DDR / 10GigE] (rev a0)")
With kernel 2.6.18-128.1.6.el5, infiniband works fine on all systems.
With the update to kernel 2.6.18-164.11.1.el5 (and both types of node running the same NFS-root image), the 16-core Xeons still work fine. Infiniband no longer works on the 32-core Opterons. Specifically, either the ib0 interface fails to appear, or it does appear but when configured with an IP address, doesn't actually work. In either case, loading the IB kernel modules takes a long time, but I haven't instrumented the load script yet to see which module, if any, is at fault. More errors listed below.
However, if I tweak the BIOS of the 32-core systems to reduce the per-socket core count to 2 (so effectively 8-socket, dual-core, down to a total of 16 available cores), Infiniband starts working again. Putting it back to 32-cores makes it fail. Booting the older kernel makes it work again. In summary: old kernel, IB works on all systems. Newer kernel, IB only works on 16-core systems.
Updating the IB firmware from 2.5.0 to 2.7.0 (latest available) doesn't help. I also did a full 'yum update' to make sure that libmlx4, openibd all other associated packages were up-to-date. Doesn't help either.
Some errors that appear on 32-core nodes:
ib_query_port failed (-16) for mlx4_0
ib_query_port failed (-16) for mlx4_0
mlx4_core 0000:04:00.0: SW2HW_MPT failed (-16)
mlx4_core 0000:04:00.0: SW2HW_MPT failed (-16)
[Code]....
Only Single core active on quad core AMD when acpi is active.with acpi=offuname -aLinux dvip4 2.6.32-30-server #59-Ubuntu SMP Tue Mar 1 22:46:09 UTC 2011 x86_64 GNU/Linux
Code:
cat /proc/cpuinfo
processor : 0
[code]...
i download the rpm package of gcc .
View 10 Replies View RelatedI just wonder how does the security work over here.I got no anti-virus no firewall no thing and I use Linux mint 24h/7 .I got some important stuffs in my system I'm so a fried to lose them or someone hacking me.
View 2 Replies View RelatedI am in school for my CIS degree and the book I am using this session covers Windows XP and Fedora Core 4. I am having trouble finding & downloading Fedora Core 4. My question is: Is there a big enough difference between Fedora Core 4 and Fedora Core 14 that I would not be able to use 14 instead of 4?
View 14 Replies View RelatedA couple of weeks ago I was using openvpn with a provider of PVNs on a home wifi network with no problems.I had installed openvpn using apt-get install and downloaded theopvn PVN files from the organization.erything worked fine.I would type sudo openvpn nameoffile.ovpn and then add my username and password during the installation process.However, when I try to do the same on an Ethernet network, the installation work fines (as above) and informs me that everything is connected (same as on the home Wifi network) but Firefox and all other software cannot connect to anything on the Internet.I contacted the organization who said the DNS was a problem and I needed to install resolvconf then modify each .opvn file using up /etc/openvpn/update-resolv-conf and down /etc/openvpn/update-resolv-confcauses the installation to hang because it does not like openvpn pointing to an external file.Irrespective of the problem I have with this "solution", previously I could use openvpn without modifying the .ovpn files. It just worked! I wonder if anyone knows why using the exact same configuration on an Ethernet network (which I have not used before with openvpn) is causing problems
View 4 Replies View RelatedDoes anyone know if Apparmor will work on the Ubuntu 10.04 livecd? I know there are currently issues running Apparmor on stacked filesystems with aufs. Currently a casper scripts disables Apparmor during boot up. Would be very useful if it could be run in a live session.
View 4 Replies View Related