Re: [CentOS] server is always getting hacked

2009-06-30 Thread Justin Bull
On Tue, Jun 30, 2009 at 5:26 PM, Michael A. Peters mpet...@mac.com wrote:
 How does that help?

Its considered proper convention to use sudo on individual commands
instead of changing the user to root. With sudo you can water down the
ability of a user, eg can't use the shutdown command.

I don't know if you can disable su -, but that would be the plus of this style.

--
Best Regards,

Justin Bull
So Hip it MHz Studios
www.sohipitmhz.com

http://www.sohipitmhz.com/pubkey.txt (PGP Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] server is always getting hacked

2009-06-28 Thread Justin Bull
On Sat, Jun 27, 2009 at 12:21 PM, Mag Gammagaw...@gmail.com wrote:
 I am not sure what else measures I can take. Can someone please assist?

You should install an Intrusion Detection System (IDS) as they are
great tools to assist you in how the crackers are gaining access into
your system.

We see load averages of 500+ and see people from all over the world
logging into our server (used last).

If I understood you correctly, you're saying that running the last
command shows logins worldwide that are not yours? Immediately suspend
/ disable / lockdown the accounts they're logging into if they're not
important (say a user thats only used for a daemon).

If I were you I would immediately set up keys for your ssh, disabling
root ssh login (you can gain root via su - or sudo once you
login), and only enable protocol 2 for ssh.

Install an iptables frontend like APF to help you ban malicious IP addresses.

Are you running the latest version of CentOS? Make sure they don't
have a critical exploit like a kernel privilege escalation exploit.


-- 
Best Regards,

Justin Bull
http://www.sohipitmhz.com/pubkey.txt (PGP Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] x86_64 CentOS 5.3 Users - Library Issue

2009-06-17 Thread Justin Bull
On Wed, Jun 17, 2009 at 2:11 AM, Ralph Angenendtra+cen...@br-online.de wrote:

 As if it was news that cpanel/WHM renders your system more or less
 unusable for further working with CentOS repositories or doing compiles
 on such a system.

Correct, but so many use this damned cPanel I have to work with it!

 I gather I can close your bug report then? vbeg

Yes, I'll be closing my bug and talk to cPanel about it (maybe list it
as a bug on their end?)


-- 
Best Regards,

Justin Bull
http://www.sohipitmhz.com/pubkey.txt (Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] x86_64 CentOS 5.3 Users - Library Issue

2009-06-16 Thread Justin Bull
Hello,

I need to conduct a little research.

Anyone who is running CentOS 5.3 x86_64 please run the following:

# yum install libxml2-devel
# nm /usr/lib64/libxml2.a | grep xmlXPathContextSetCache

If my suspicions are correct, if you run cPanel/WHM you will not see
any output and if without cPanel/WHM you'll see something similar to
this:

23a0 T xmlXPathContextSetCache

Thanks for your time and help.


-- 
Best Regards,

Justin Bull
http://www.sohipitmhz.com/pubkey.txt (Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Welcome to the CentOS mailing list

2009-06-15 Thread Justin Bull
On Mon, Jun 15, 2009 at 7:52 PM, Sagar Koiralasagar.koir...@gmail.com wrote:
 My apologies for posting an already solved problem, but dont know if its my
 ignorance that is not getting me to my desired results.trying to mount
 an external usb hard drive(ntfs) in my system.

As far as I know you just run the following command as root:

# mount -t ntfs-3g /dev/sda1 /mnt/windows

Where /dev/sda1 is the location of your USB media and /mnt/windows is
where you want your mountpoint to be.

 The hard drive shows in GUI, but doesn't open or mount as I expected.

I didn't see you run the above mount command, what did you do to mount
the device?

-- 
Best Regards,

Justin Bull
http://www.sohipitmhz.com/pubkey.txt (Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Source RPM issues. Mismatched Libs?

2009-06-13 Thread Justin Bull
Hello,

I am having some issues with the installation of the Icecast2 software
on my CentOS 5.3 x64 machine. I am attempting to install from a source
RPM provided by the developer.

Upon executing:

# rpmbuild --rebuild icecast-2.3.2-0.src.rpm

Normal compilation takes place until the following error is thrown out:

/usr/lib64/libxslt.so: undefined reference to `xmlXPathContextSetCache'

I've done some research and found others have a similar issue. It
appears this is only isolated with CentOS 5.x x64 builds and,
according to the Icecast2 developer, is due to a mismatch between
libxml2 and libxslt.

My machine is a brand new install and is updated from the official
mirrors. libxml2-devel and libxslt-devel are installed and are at
their latest version (2.6.26-2.1.2.7.x86_64 and
1.1.17-2.el5_2.2.x86_64 respectively at the time of this writing).

For anyone who is interested in reading up on this, here are the
Icecast2 threads related to this issue:
http://icecast.imux.net/viewtopic.php?t=4851
http://icecast.imux.net/viewtopic.php?t=6506
http://icecast.imux.net/viewtopic.php?t=6210

I do apologize if I've made any formating mistakes and/or incorrect
posting etiquette to the mailing list, as it is my first time using
one.

--
Best Regards,

Justin Bull
http://www.sohipitmhz.com/pubkey.txt (Public Key)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos