Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Jon Pruente
On Fri, Jul 9, 2021 at 5:14 AM Gionatan Danti  wrote:

> While I fully understand & agree on the motivation for keeping Rocky
> (and other clones) 1:1 with Red Hat, it should be understood that
> current RHEL packages selection itself is drifting away from
> small/medium business needs. So the core issue is a more fundamental
> one: Red Hat, our upstream, is walking away from traditional server
> needs.
>
> So while I wish Rocky all the best (and I am actively using it!), I am
> looking toward Ubuntu and Debian for new deployments.
> Regards.
>

Any extensions beyond rebuilding TUV provided code are why CentOS, and now
Rocky, have SIGs. There is an appropriate place for these requests, but it
is not in the main project.

https://git.rockylinux.org/sig
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread mark

On 7/8/21 12:39 PM, Zube wrote:

On Thu Jul 08 12:32:53 PM, mark wrote:


I'm reminded of a column in SysAdmin, a long time ago. Seems the woman who
wrote? contributed? to the column Daemons and Dragons was wearing a t-shirt
with the logo, and she was traveling with some folks in the US South. She
went in to pick up some bbq... and by the time she had the food and was
walking out, was afraid that she might be attacked by one or more of the
"Real Christians" in the shop, from the comments they made, because of the
shirt.


First thing I thought of too.

https://www.netfunny.com/rhf/jokes/new89/satan.773.html



Thanks! That's exactly the one I was thinking of.

mark
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Chris Adams
Once upon a time, Gionatan Danti  said:
> While I fully understand & agree on the motivation for keeping Rocky
> (and other clones) 1:1 with Red Hat, it should be understood that
> current RHEL packages selection itself is drifting away from
> small/medium business needs. So the core issue is a more fundamental
> one: Red Hat, our upstream, is walking away from traditional server
> needs.

Like any commercial product, RHEL exists for Red Hat's customers... so
if you want to see something specific from RHEL, you need to be a
customer to give input.

-- 
Chris Adams 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread Jonathan Billings
On Fri, Jul 09, 2021 at 08:14:06AM -0400, mario juliano grande-balletta wrote:
> WAKE UP!

Whew, I needed a wake up call!  I was falling asleep at my
keyboard! 

In all seriousness, I think forwarding the audit logs works, and if
you just want to track when users execute a program, you'll need to
add an audit rule.  I believe we had something like this in
/etc/audit/rules.d/:

-a exit,always -F arch=b64 -F euid>1000 -S execve
-a exit,always -F arch=b32 -F euid>1000 -S execve

This captured all execve() syscalls for users with an effective User
ID greater than 1000 (so not to audit system processes).

We didn't actually send it to a remote auditd server, though, because
it was so chatty and we had a lot of users and workstations.  We had
an Elasticsearch cluster and sent the audit logs directly with
logstash and then Beaver
(https://python-beaver.readthedocs.io/en/latest/)
This was done because we had redundant ingesters and a cluster of ES
servers so logs were less likely to be dropped.

Then we had some simple frontends for the ES cluster to make it so we
could quickly bring up what processes a user ran on what system. (The
kibana interface is nice but too complex for a super simple query like
that.)  Along with collecting OS statistics like load, memory use,
etc., we could track what users ran and how much resources they used.

Of course, at this job, we dropped all that and switched to
Crowdstrike Falcon, a commercial security tool that does largely the
same thing but with a proprietary LSM.  

-- 
Jonathan Billings 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread mario juliano grande-balletta
Apologies for being off topic.hopefully I don't get
censored.  
Not another word.  I usually never post comments anyway.
back to my cave


On Fri, 2021-07-09 at 09:18 -0400, Stephen John Smoogen wrote:
> On Fri, 9 Jul 2021 at 08:14, mario juliano grande-balletta<
> mario.balle...@gmail.com> wrote:
> 
> This is what I remember about
> evilMicrosoft...In 1992, Microsoft
> released Windows NT, and advertised it as thegreatest operating
> system and began giving away free licenses to
> This is drifting off of being anywhere on-topic for this list.
> 
> 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread Stephen John Smoogen
On Fri, 9 Jul 2021 at 08:14, mario juliano grande-balletta
 wrote:
>
> This is what I remember about evil
> Microsoft...
> In 1992, Microsoft released Windows NT, and advertised it as the
> greatest operating system and began giving away free licenses to

This is drifting off of being anywhere on-topic for this list.


-- 
Stephen J Smoogen.
I've seen things you people wouldn't believe. Flame wars in
sci.astro.orion. I have seen SPAM filters overload because of Godwin's
Law. All those moments will be lost in time... like posts on  BBS...
time to reboot.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread Fred
I don't think it is a problem limited to America. Greed exists worldwide.

On Fri, Jul 9, 2021 at 8:48 AM mario juliano grande-balletta <
mario.balle...@gmail.com> wrote:

> Before anyone mentions "charity" and Bill Gates foundation
> just remember how many good technology companies and software that
> Microsoft destroyed with FUD tactics in the 80's, 90's, and
> 2000's.
> charity begins at home they say in America...
> what about those few million employees who lost jobs, homes, cars,
> savings because Microsoft destroyed their companies?  what about
> them?  where was their charity?
> In America it's all too common to use treachery, dishonesty in business
> and politics to climb to the top, and destroy competition, and then
> pretend to give to charitable causes...
> pure hypocrisyblatant hypocrisy
> I for one cannot be bought, never..
> as a veteran and so many other things, I will never surrender to
> corporate bullying from anyone, including Amazon, I left AWS for
> similar reasons..
> I am proud to say I have not used a Windows OS since
> 1995and still refuse to this day to allow any Microsoft
> devices attach to my SOHO networks...
> same for Apple and IBM and Oracle.
> freedom is more than an idea, more than a principle, it is a lifestyle
> too!
>
>
>
>
>
>
> On Fri, 2021-07-09 at 08:14 -0400, mario juliano grande-balletta wrote:
> > This is what I remember about evil
> > Microsoft...
> > In 1992, Microsoft released Windows NT, and advertised it as the
> > greatest operating system and began giving away free licenses to
> > colleges and universities and hiring public relations firms to
> > publish phony surveys and results to prove Windows NT was better than
> > Novell NetWare or any other OS.  Meanwhile, it took 4 years for
> > Microsoft to finally install Windows NT at their HQ in Redmond,
> > Washington.  Why so long?  Because they were successfully running
> > Novell NetWare, the same NetWare that Microsoft was slowly destroying
> > with FUD in the tech journals and media with phony surveys.
> > Someone here said a leopard never changes his spots, KUDOS Sir!
> > Microsoft is a cancer, a cancer to freedom, a cancer to innovation
> > and always was, who didn't they destroy back in the 90's and early
> > 2000's?  They stole Word from WordPerfect, they stole Office from
> > Borland, and Excel was plagiarized from Lotus 1-2-3.
> > Microsoft deserves to be hacked and destroyed and is the epitome of
> > the most evil and treacherous an American corporation can
> > become.
> > I HATE MICROSOFT and so do many others who survived their FUD tactics
> > from the 90's.  Some of you weren't even born yet...
> > I know Gates and Ballmer and company all to welllong before the
> > documentaries "Pirates Of Silicon Valley" and "Triumph Of The Nerds".
> > Any efforts they make toward linux are for control and never for
> > freedom or innovation.  Control, power, greed are their only goals,
> > always.
> > WAKE UP!
> >
> >
> >
> >
> >
> >
> >
> > On Fri, 2021-07-09 at 09:25 +0200, Ralf Prengel wrote:
> > > Zitat von Kaushal Shriyan :
> > > Hi,
> > > I have 20 Linux servers in the network. Is there a way to audit all
> > > Linuxclients using a centralized server? For example, what commands
> > > are run byJohn on Linuxnode1? Steve on Linuxnode15? and so on and
> > > so forth totrack user activity. Which files have been modified or
> > > edited or commandsetc.. by the users.
> > > I have installed auditd, but it is local to the Linux server.Thanks
> > > in advance.
> > >
> > > Hallo,what is about ansible for example.Ralf
> > >
> > >
> > > ___CentOS mailing
> > > listcen...@centos.org
> > > https://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread mario juliano grande-balletta


https://youtu.be/Kwma71yl8mU






On Fri, 2021-07-09 at 08:47 -0400, mario juliano grande-balletta wrote:
> Before anyone mentions "charity" and Bill Gates
> foundation
> just remember how many good technology companies and software that
> Microsoft destroyed with FUD tactics in the 80's, 90's, and
> 2000's.
> charity begins at home they say in America...
> what about those few million employees who lost jobs, homes, cars,
> savings because Microsoft destroyed their companies?  what about
> them?  where was their charity?
> In America it's all too common to use treachery, dishonesty in
> business and politics to climb to the top, and destroy competition,
> and then pretend to give to charitable causes...
> pure hypocrisyblatant hypocrisy
> I for one cannot be bought, never..
> as a veteran and so many other things, I will never surrender to
> corporate bullying from anyone, including Amazon, I left AWS for
> similar reasons..
> I am proud to say I have not used a Windows OS since
> 1995and still refuse to this day to allow any Microsoft
> devices attach to my SOHO networks...
> same for Apple and IBM and Oracle.
> freedom is more than an idea, more than a principle, it is a
> lifestyle too!
> 
> 
> 
> 
> 
> 
> 
> On Fri, 2021-07-09 at 08:14 -0400, mario juliano grande-balletta
> wrote:
> > This is what I remember about evil
> > Microsoft...
> > In 1992, Microsoft released Windows NT, and advertised it as the
> > greatest operating system and began giving away free licenses to
> > colleges and universities and hiring public relations firms to
> > publish phony surveys and results to prove Windows NT was better
> > than Novell NetWare or any other OS.  Meanwhile, it took 4 years
> > for Microsoft to finally install Windows NT at their HQ in Redmond,
> > Washington.  Why so long?  Because they were successfully running
> > Novell NetWare, the same NetWare that Microsoft was slowly
> > destroying with FUD in the tech journals and media with phony
> > surveys.
> > Someone here said a leopard never changes his spots, KUDOS Sir!
> > Microsoft is a cancer, a cancer to freedom, a cancer to innovation
> > and always was, who didn't they destroy back in the 90's and early
> > 2000's?  They stole Word from WordPerfect, they stole Office from
> > Borland, and Excel was plagiarized from Lotus 1-2-3.
> > Microsoft deserves to be hacked and destroyed and is the epitome of
> > the most evil and treacherous an American corporation can
> > become.
> > I HATE MICROSOFT and so do many others who survived their FUD
> > tactics from the 90's.  Some of you weren't even born
> > yet...
> > I know Gates and Ballmer and company all to welllong before the
> > documentaries "Pirates Of Silicon Valley" and "Triumph Of The
> > Nerds".
> > Any efforts they make toward linux are for control and never for
> > freedom or innovation.  Control, power, greed are their only goals,
> > always.
> > WAKE UP!
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > On Fri, 2021-07-09 at 09:25 +0200, Ralf Prengel wrote:
> > > Zitat von Kaushal Shriyan :
> > > Hi,
> > > I have 20 Linux servers in the network. Is there a way to audit
> > > all Linuxclients using a centralized server? For example, what
> > > commands are run byJohn on Linuxnode1? Steve on Linuxnode15? and
> > > so on and so forth totrack user activity. Which files have been
> > > modified or edited or commandsetc.. by the users.
> > > I have installed auditd, but it is local to the Linux
> > > server.Thanks in advance.
> > > 
> > > Hallo,what is about ansible for example.Ralf
> > > 
> > > 
> > > ___CentOS mailing
> > > listcen...@centos.org
> > > https://lists.centos.org/mailman/listinfo/centos
> 
> 
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread mario juliano grande-balletta
Before anyone mentions "charity" and Bill Gates foundation
just remember how many good technology companies and software that
Microsoft destroyed with FUD tactics in the 80's, 90's, and
2000's.
charity begins at home they say in America...
what about those few million employees who lost jobs, homes, cars,
savings because Microsoft destroyed their companies?  what about
them?  where was their charity?
In America it's all too common to use treachery, dishonesty in business
and politics to climb to the top, and destroy competition, and then
pretend to give to charitable causes...
pure hypocrisyblatant hypocrisy
I for one cannot be bought, never..
as a veteran and so many other things, I will never surrender to
corporate bullying from anyone, including Amazon, I left AWS for
similar reasons..
I am proud to say I have not used a Windows OS since
1995and still refuse to this day to allow any Microsoft
devices attach to my SOHO networks...
same for Apple and IBM and Oracle.
freedom is more than an idea, more than a principle, it is a lifestyle
too!






On Fri, 2021-07-09 at 08:14 -0400, mario juliano grande-balletta wrote:
> This is what I remember about evil
> Microsoft...
> In 1992, Microsoft released Windows NT, and advertised it as the
> greatest operating system and began giving away free licenses to
> colleges and universities and hiring public relations firms to
> publish phony surveys and results to prove Windows NT was better than
> Novell NetWare or any other OS.  Meanwhile, it took 4 years for
> Microsoft to finally install Windows NT at their HQ in Redmond,
> Washington.  Why so long?  Because they were successfully running
> Novell NetWare, the same NetWare that Microsoft was slowly destroying
> with FUD in the tech journals and media with phony surveys.
> Someone here said a leopard never changes his spots, KUDOS Sir!
> Microsoft is a cancer, a cancer to freedom, a cancer to innovation
> and always was, who didn't they destroy back in the 90's and early
> 2000's?  They stole Word from WordPerfect, they stole Office from
> Borland, and Excel was plagiarized from Lotus 1-2-3.
> Microsoft deserves to be hacked and destroyed and is the epitome of
> the most evil and treacherous an American corporation can
> become.
> I HATE MICROSOFT and so do many others who survived their FUD tactics
> from the 90's.  Some of you weren't even born yet...
> I know Gates and Ballmer and company all to welllong before the
> documentaries "Pirates Of Silicon Valley" and "Triumph Of The Nerds".
> Any efforts they make toward linux are for control and never for
> freedom or innovation.  Control, power, greed are their only goals,
> always.
> WAKE UP!
> 
> 
> 
> 
> 
> 
> 
> On Fri, 2021-07-09 at 09:25 +0200, Ralf Prengel wrote:
> > Zitat von Kaushal Shriyan :
> > Hi,
> > I have 20 Linux servers in the network. Is there a way to audit all
> > Linuxclients using a centralized server? For example, what commands
> > are run byJohn on Linuxnode1? Steve on Linuxnode15? and so on and
> > so forth totrack user activity. Which files have been modified or
> > edited or commandsetc.. by the users.
> > I have installed auditd, but it is local to the Linux server.Thanks
> > in advance.
> > 
> > Hallo,what is about ansible for example.Ralf
> > 
> > 
> > ___CentOS mailing
> > listcen...@centos.org
> > https://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Gionatan Danti

Il 2021-07-09 13:57 Nikolaos Milas ha scritto:

On 9/7/2021 1:14 μ.μ., Gionatan Danti wrote:

While I fully understand & agree on the motivation for keeping Rocky 
(and other clones) 1:1 with Red Hat, it should be understood that 
current RHEL packages selection itself is drifting away from 
small/medium business needs. So the core issue is a more fundamental 
one: Red Hat, our upstream, is walking away from traditional server 
needs.


IMHO, this is a more fundamental discussion, which is beyond future
CentOS versions and alternative RHEL-compatible projects and it
deserves a separate thread.


Sure.


In any case, I think that the existence and continuous availability /
maintenance of external RHEL / CentOS-compatible repositories probably
provides a solution for most use scenarios. Of course, I cannot
possibly know all actual needs, so I may be wrong.

I need to recognize the fact that it appears there is still a shortage
of packages for CentOS 8, even though it is active for quite long
already. Maybe this is mainly due to EPEL difficulties.


This is my impression also.
Regards.

--
Danti Gionatan
Supporto Tecnico
Assyoma S.r.l. - www.assyoma.it
email: g.da...@assyoma.it - i...@assyoma.it
GPG public key ID: FF5F32A8
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread mario juliano grande-balletta
This is what I remember about evil
Microsoft...
In 1992, Microsoft released Windows NT, and advertised it as the
greatest operating system and began giving away free licenses to
colleges and universities and hiring public relations firms to publish
phony surveys and results to prove Windows NT was better than Novell
NetWare or any other OS.  Meanwhile, it took 4 years for Microsoft to
finally install Windows NT at their HQ in Redmond, Washington.  Why so
long?  Because they were successfully running Novell NetWare, the same
NetWare that Microsoft was slowly destroying with FUD in the tech
journals and media with phony surveys.
Someone here said a leopard never changes his spots, KUDOS Sir!
Microsoft is a cancer, a cancer to freedom, a cancer to innovation and
always was, who didn't they destroy back in the 90's and early
2000's?  They stole Word from WordPerfect, they stole Office from
Borland, and Excel was plagiarized from Lotus 1-2-3.
Microsoft deserves to be hacked and destroyed and is the epitome of the
most evil and treacherous an American corporation can
become.
I HATE MICROSOFT and so do many others who survived their FUD tactics
from the 90's.  Some of you weren't even born yet...
I know Gates and Ballmer and company all to welllong before the
documentaries "Pirates Of Silicon Valley" and "Triumph Of The Nerds".
Any efforts they make toward linux are for control and never for
freedom or innovation.  Control, power, greed are their only goals,
always.
WAKE UP!






On Fri, 2021-07-09 at 09:25 +0200, Ralf Prengel wrote:
> Zitat von Kaushal Shriyan :
> Hi,
> I have 20 Linux servers in the network. Is there a way to audit all
> Linuxclients using a centralized server? For example, what commands
> are run byJohn on Linuxnode1? Steve on Linuxnode15? and so on and so
> forth totrack user activity. Which files have been modified or edited
> or commandsetc.. by the users.
> I have installed auditd, but it is local to the Linux server.Thanks
> in advance.
> 
> Hallo,what is about ansible for example.Ralf
> 
> 
> ___CentOS mailing
> listCentOS@centos.orghttps://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Nikolaos Milas

On 9/7/2021 1:14 μ.μ., Gionatan Danti wrote:

While I fully understand & agree on the motivation for keeping Rocky 
(and other clones) 1:1 with Red Hat, it should be understood that 
current RHEL packages selection itself is drifting away from 
small/medium business needs. So the core issue is a more fundamental 
one: Red Hat, our upstream, is walking away from traditional server 
needs. 


IMHO, this is a more fundamental discussion, which is beyond future 
CentOS versions and alternative RHEL-compatible projects and it deserves 
a separate thread.


In any case, I think that the existence and continuous availability / 
maintenance of external RHEL / CentOS-compatible repositories probably 
provides a solution for most use scenarios. Of course, I cannot possibly 
know all actual needs, so I may be wrong.


I need to recognize the fact that it appears there is still a shortage 
of packages for CentOS 8, even though it is active for quite long 
already. Maybe this is mainly due to EPEL difficulties.


Nick

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Gionatan Danti

Il 2021-07-08 23:21 J. Adam Craig ha scritto:

Well said.  It is worth pointing out also that, while Kurtzer and other
Rocky community leads are devoted to keeping Rocky 1:1 with upstream, 
they
are also committed to engaging with the CentOS Stream community 
themselves

(if they find a bug in upstream code and they can fix it, Kurtzer and
others have stated multiple times that they will contribute the fix 
into
Stream), and to encouraging such engagement among those who desire to 
see
improvements with upstream.  In other words, if we are uncomfortable 
with

the direction Stream is going, the preferred approach is mobilisation
within and engagement with the Stream community to have those changes
realised there, so that they flow into Enterprise Linux and everyone
benefits.


While I fully understand & agree on the motivation for keeping Rocky 
(and other clones) 1:1 with Red Hat, it should be understood that 
current RHEL packages selection itself is drifting away from 
small/medium business needs. So the core issue is a more fundamental 
one: Red Hat, our upstream, is walking away from traditional server 
needs.


So while I wish Rocky all the best (and I am actively using it!), I am 
looking toward Ubuntu and Debian for new deployments.

Regards.

--
Danti Gionatan
Supporto Tecnico
Assyoma S.r.l. - www.assyoma.it
email: g.da...@assyoma.it - i...@assyoma.it
GPG public key ID: FF5F32A8
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread Ralf Prengel



Zitat von Kaushal Shriyan :


Hi,

I have 20 Linux servers in the network. Is there a way to audit all Linux
clients using a centralized server? For example, what commands are run by
John on Linuxnode1? Steve on Linuxnode15? and so on and so forth to
track user activity. Which files have been modified or edited or commands
etc.. by the users.

I have installed auditd, but it is local to the Linux server.
Thanks in advance.



Hallo,
what is about ansible for example.
Ralf



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread J Martin Rushton via CentOS

A cut-and-paste from my Wiki:

---%<

Remote logging

Auditing, particularly from compute nodes, may be centralised to reduce 
the number of files needed to get a view of the cluster.

Server

The server machine must be configured to accept messages and must have a 
large enough logging area to store the records.


The server listens on port 60. Configure this as tcp_listen_port in 
/etc/audit/auditd.conf.


The server must only accept messages from a privileged port. If this is 
not done any userland process could inject nefarious messages. It is 
safe to configure the server to accept messages from any privileged 
port: tcp_client_ports=1-1023 in /etc/audit/auditd.conf.


On the server increase tcp_listen_queue to 16 to ensure enough requests 
for connections can be handled during a power-on bootup.


You will need to restart the daemon for these changes to come into effect.

Clients

The client machines may either forward messages at once or else batch 
them up in a queue. Generally machines with local storage should use the 
queue which preserves the log in the event of a crash.


You will need to restart the daemon for all these changes to come into 
effect: systemctl restart auditd.


Ensure the appropriate software and configuration is loaded: # yum 
install audisp-remote.

/etc/audisp/audisp-remote.conf

The client needs to know where, and to which port to send messages. As 
mentioned above, the client must send from a privileged port.


remote_server=
port=60
local_port=61

On diskless clients set mode=immediate, on other clients set 
mode=forward. Accept the defaults for queue_file and queue_depth.

/etc/audisp/plugins.d/au-remote.conf

By default the dispatcher is configured off, therefore remember to set

active=yes

to turn on the remote logging.

/etc/audit/auditd.conf

Once you are happy with the logging, turn off the local copy. For CentOS 
C7.3 and later machines use:


local_events = no
log_format = RAW

--%<

I have not tested this recently, it was last running (IIRC) on C6/7, so 
proceed with caution.


Regards,
Martin



On 09/07/2021 08:08, Kaushal Shriyan wrote:

Hi,

I have 20 Linux servers in the network. Is there a way to audit all Linux
clients using a centralized server? For example, what commands are run by
John on Linuxnode1? Steve on Linuxnode15? and so on and so forth to
track user activity. Which files have been modified or edited or commands
etc.. by the users.

I have installed auditd, but it is local to the Linux server.
Thanks in advance.

Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos



--
J Martin Rushton MBCS
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] Auditing all Linux clients with centralised server

2021-07-09 Thread Kaushal Shriyan
Hi,

I have 20 Linux servers in the network. Is there a way to audit all Linux
clients using a centralized server? For example, what commands are run by
John on Linuxnode1? Steve on Linuxnode15? and so on and so forth to
track user activity. Which files have been modified or edited or commands
etc.. by the users.

I have installed auditd, but it is local to the Linux server.
Thanks in advance.

Best Regards,

Kaushal
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Gordon Messmer

On 7/8/21 11:13 PM, Nicolas Kovacs wrote:

This being said, things have changed, and Microsoft is now - amongst other
things - the most important contributor to the Linux kernel in sheer terms of
lines of code.



I don't think that's true.

Microsoft has, infrequently, appeared in the top 5 for specific 
releases.  Mostly, as I understand it, those were due to large dumps of 
Hyper-V related code.  Overall, Microsoft doesn't appear to be active in 
the Linux kernel, though they do have a large number of Open Source 
projects of their own.


In general, Intel and Red Hat seem to be pretty consistently the top two 
corporate contributors to the Linux kernel.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread J Martin Rushton via CentOS

On 09/07/2021 07:13, Nicolas Kovacs wrote:

Le 08/07/2021 à 22:53, mario juliano grande-balletta a écrit :

I'm an idealist, there is no way in hell I would ever accept anything
from Amazon or Microsoft


I started with Linux back in 2001, the year where Microsoft CEO Steve Ballmer
called Linux "a cancer that attaches itself to intellectual property", so my
views on Microsoft are about the same as yours.

This being said, things have changed, and Microsoft is now - amongst other
things - the most important contributor to the Linux kernel in sheer terms of
lines of code.

Cheers,

Niki


Embrace, extend, and extinguish.
https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguish

Remember the leopard never changes his spots.

Martin

--
J Martin Rushton MBCS
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos versions in the future?

2021-07-09 Thread Nicolas Kovacs
Le 08/07/2021 à 22:53, mario juliano grande-balletta a écrit :
> I'm an idealist, there is no way in hell I would ever accept anything
> from Amazon or Microsoft

I started with Linux back in 2001, the year where Microsoft CEO Steve Ballmer
called Linux "a cancer that attaches itself to intellectual property", so my
views on Microsoft are about the same as yours.

This being said, things have changed, and Microsoft is now - amongst other
things - the most important contributor to the Linux kernel in sheer terms of
lines of code.

Cheers,

Niki

-- 
Microlinux - Solutions informatiques durables
7, place de l'église - 30730 Montpezat
Site : https://www.microlinux.fr
Blog : https://blog.microlinux.fr
Mail : i...@microlinux.fr
Tél. : 04 66 63 10 32
Mob. : 06 51 80 12 12
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos