<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>RedHatVN Network &#187; security</title>
	<atom:link href="http://redhatvn.net/tag/security/feed" rel="self" type="application/rss+xml" />
	<link>http://redhatvn.net</link>
	<description>Shared Linux problems</description>
	<lastBuildDate>Tue, 07 Sep 2010 08:08:35 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Using Ketchup to manage your kernel sources</title>
		<link>http://redhatvn.net/using-ketchup-to-manage-your-kernel-sources</link>
		<comments>http://redhatvn.net/using-ketchup-to-manage-your-kernel-sources#comments</comments>
		<pubDate>Tue, 07 Sep 2010 07:44:30 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Cpanel]]></category>
		<category><![CDATA[Directadmin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://redhatvn.net/?p=1307</guid>
		<description><![CDATA[Today I discovered Ketchup, a little command-line tool to manage your Linux kernel sources. If you&#8217;re one of the weirdos, who is still compiling his kernel manually for whatever reason (like I do), I can only recommend it. Ketchup nicely eases up the entire process of checking for updates and applying them to your system. [...]]]></description>
			<content:encoded><![CDATA[<p>Today I discovered Ketchup, a little command-line tool to manage your  Linux kernel sources. If you&#8217;re one of the weirdos, who is still  compiling his kernel manually for whatever reason (like I do), I can  only recommend it. Ketchup nicely eases up the entire process of  checking for updates and applying them to your system.</p>
<p>Let&#8217;s not hesitate and look at few usage examples&#8230; Want to know what&#8217;s the latest version of a particular kernel-tree?<br />
<span id="more-1307"></span><br />
<code>$ ketchup -s 2.6</code></p>
<blockquote><p>2.6.17.7</p></blockquote>
<p><code>$ ketchup -s 2.6-mm</code></p>
<blockquote><p>2.6.18-rc1-mm2</p></blockquote>
<p>Let&#8217;s play with your kernel sources a bit. First of all, you surely want to check what version you currently got lying around&#8230;</p>
<p><code>$ cd /usr/src/linux</code></p>
<p><code>$ ketchup -m</code></p>
<blockquote><p>2.6.17.6</p></blockquote>
<p>Let&#8217;s assume there is a newer kernel version available and you want  to download it, bunzip it, revert the old patch and apply the new one.  Nothing easier than that:</p>
<p><code># cd /usr/src/linux</code></p>
<p><code># ketchup 2.6-tip</code></p>
<blockquote><p>2.6.17.6 -&gt; 2.6.17.7</p></blockquote>
<p>Applying patch-2.6.17.6.bz2 -R</p>
<p>Applying patch-2.6.17.7.bz2</p>
<p>That&#8217;s really it. It will download the patches, revert and apply them, so all you will have to do is watch and wait</p>
<p>Switching to an entirely different kernel versions is just as easy:</p>
<p><code># cd /usr/src/linux</code></p>
<p><code># ketchup 2.6.16.2</code></p>
<p>Final note: If Ketchup should abort with a gpg error, then it  couldn&#8217;t verify the patch&#8217;s or kernel&#8217;s signature. Either add the 2.6  public key to your keyring (this is the proper solution) or call Ketchup  with an additional -G parameter (this will override signature  checking). I&#8217;d suggest the former, which is really easy to do by  downloading it from a public pgp server:</p>
<p><code># gpg --keyserver wwwkeys.pgp.net --recv-keys 0x517D0F0E</code></p>
<p>Have fun compiling,</p>
]]></content:encoded>
			<wfw:commentRss>http://redhatvn.net/using-ketchup-to-manage-your-kernel-sources/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>[HOWTO] mod_ruid2</title>
		<link>http://redhatvn.net/howto-mod_ruid2</link>
		<comments>http://redhatvn.net/howto-mod_ruid2#comments</comments>
		<pubDate>Fri, 03 Sep 2010 08:03:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Directadmin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Apache]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://redhatvn.net/?p=1257</guid>
		<description><![CDATA[Hello everyone, Since there are alot of people asking for it, here is my HowTo about mod_ruid2 This is based on my CentOS server with Apache 2.x. Installing this module its no longer needed to chmod config files to 666 or upload/attachments directories to 777. Since with this module enabled everything @ HTTP will run [...]]]></description>
			<content:encoded><![CDATA[<p>Hello everyone,</p>
<p>Since there are alot of people asking for it, here is my HowTo about mod_ruid2<br />
This is based on my CentOS server with Apache 2.x.</p>
<p><strong>Installing this module its no longer needed to chmod config files to  666 or upload/attachments directories to 777. Since with this module  enabled everything @ HTTP will run under the user itself and not  &#8216;apache&#8217; anymore.</strong><br />
<span id="more-1257"></span><br />
** If you are using mod_ruid instead of mod_ruid2, first of all remove the mod_ruid line from &#8216;<strong>/etc/httpd/conf/httpd.conf</strong>&#8216;</p>
<p>First, we are going to install <strong>libcap-devel</strong><br />
<code>yum -y install libcap-devel</code><br />
After this is done we are going to download and install mod_ruid2<br />
<code>wget <a href="http://dave.t0xic.nl/tars/mod_ruid2-0.9.tar.bz2" target="_blank">http://dave.t0xic.nl/tars/mod_ruid2-0.9.tar.bz2</a><br />
tar xjf mod_ruid2-0.9.tar.bz2<br />
cd mod_ruid2-0.9<br />
apxs -a -i -l cap -c mod_ruid2.c</code></p>
<p>Now, if you didn&#8217;t get any errors mod_ruid2 should be installed and added to the &#8216;<strong>/etc/httpd/conf/httpd.conf</strong>&#8216;.<br />
Lets confirm mod_ruid2 is added<br />
<code>grep 'mod_ruid2' /etc/httpd/conf/httpd.conf</code><br />
If you get any response like below its installed</p>
<blockquote><p>LoadModule ruid2_module       /usr/lib/apache/mod_ruid2.so</p></blockquote>
<p>Now we need to modify the DA httpd.conf templates a little bit to enable mod_ruid2 for the users</p>
<p>Now copy the template files to custom<br />
<code>cd /usr/local/directadmin/data/templates/<br />
cp virtual_host2* custom/<br />
chown -R diradmin:diradmin custom/</code></p>
<p>Now you have copied the original templates to the &#8216;custom&#8217; directory, so they won&#8217;t be overwritten.</p>
<p>Now follow the steps below for each virtual_host2 file you&#8217;ve copied<br />
<code>nano -w virtual_host2.conf</code></p>
<blockquote><p>## replace line: <strong>SuexecUserGroup |USER| |GROUP|</strong><br />
## replace with: <strong>#SuexecUserGroup |USER| |GROUP|</strong><br />
## Add the lines below under the just replaced line<br />
RMode          config<br />
RUidGid        |USER| |GROUP|<br />
RGroups        apache</p></blockquote>
<p>Save the files and lets rewrite the HTTPd config files<br />
<code>echo "action=rewrite&amp;value=httpd" &gt;&gt; /usr/local/directadmin/data/task.queue</code></p>
<p>If you want you can start the rewrite of the HTTPd config files manually, just paste the line below and wait when its done<br />
<code>/usr/local/directadmin/dataskq d800</code><br />
After the rewrite is complete you can restart HTTPd with the command below<br />
<code>/etc/init.d/httpd restart</code><br />
Now mod_ruid2 should be installed and you don&#8217;t need to chmod anymore like &#8216;chmod 666 config.php&#8217; or &#8216;chmod 777 uploads&#8217;.</p>
<p>To be sure the webmail clients etc still works we need to change the owner permissions<br />
<code>chown -R webapps:webapps /var/www/html</code></p>
<p>** Questions with Answers **<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
<strong>Q:</strong> How can I test this is working?<br />
<strong>A:</strong> Easy, install some CMS that you are used before. Like  WordPress, Joomla that required (before!!) chmod 666 or 777 to get  install/working.</p>
<p><strong>Q:</strong> I&#8217;ve dirs/files owned by apache for some users, must I change this?<br />
<strong>A:</strong> Yes, you need to give the dirs/files owner of the user itself, not apache anymore. Check below<br />
<span style="text-decoration: underline;">Thanks for snk for the commands below, to fix the owner permissions of the dirs/files</span></p>
<p><code>cd /usr/local/directadmin/scripts &amp;&amp; ./set_permissions.sh user_homes<br />
find /home/*/domains/*/public_html -type d -print0 | xargs -0 chmod 711<br />
find /home/*/domains/*/public_html -type f -print0 | xargs -0 chmod 644<br />
cd /usr/local/directadmin/data/users &amp;&amp; for i in `ls`; do { chown -R $i:$i /home/$i/domains/*/public_html;}; done;</code></p>
<p><em>* Added &#8216;&amp;&amp;&#8217; so if they do a typo, it won&#8217;t change anything.</em></p>
<p>You are missing a question, or you have a question, please let me know and I&#8217;ll try to answer them for you!</p>
]]></content:encoded>
			<wfw:commentRss>http://redhatvn.net/howto-mod_ruid2/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Resolve Joomla error Warning: ini_set() has been disabled</title>
		<link>http://redhatvn.net/resolve-joomla-error-warning-ini_set-has-been-disabled</link>
		<comments>http://redhatvn.net/resolve-joomla-error-warning-ini_set-has-been-disabled#comments</comments>
		<pubDate>Tue, 07 Sep 2010 02:48:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Cpanel]]></category>
		<category><![CDATA[Directadmin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[vps]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://redhatvn.net/?p=1262</guid>
		<description><![CDATA[Q: Warning: ini_set() has been disabled for security reasons in session/session.php on line xxx R:  you can simply add &#8220;@&#8221; in front of every occurrence of the word &#8220;ini_set&#8221; in libraries/joomla/session/session.php]]></description>
			<content:encoded><![CDATA[<p>Q: <span style="font-size: xx-small;"><strong>Warning</strong>:  ini_set() has been disabled for security reasons in <strong><a href="http://ssip.com.vn/public_html/libraries/joomla/session/session.php" target="_blank">session/session.php</a></strong> on line xxx</span></p>
<p>R:  you  can simply add &#8220;@&#8221; in front of every occurrence of the word &#8220;ini_set&#8221; in  libraries/joomla/session/session.php<span style="font-size: xx-small;"><strong></strong></span></p>
]]></content:encoded>
			<wfw:commentRss>http://redhatvn.net/resolve-joomla-error-warning-ini_set-has-been-disabled/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Resolve VBB error Warning: ini_set() has been disabled</title>
		<link>http://redhatvn.net/resolve-vbb-error-warning-ini_set-has-been-disabled</link>
		<comments>http://redhatvn.net/resolve-vbb-error-warning-ini_set-has-been-disabled#comments</comments>
		<pubDate>Tue, 07 Sep 2010 03:56:39 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Cpanel]]></category>
		<category><![CDATA[Directadmin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[vps]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://redhatvn.net/?p=1265</guid>
		<description><![CDATA[Q: Warning: ini_set() has been disabled for security reasons in [path]/vb/vb.php on line 114 R: you can simply add &#8220;@&#8221; in front of every occurrence of the word &#8220;ini_set&#8221; in [path]/vb/vb.php]]></description>
			<content:encoded><![CDATA[<p>Q: Warning: ini_set() has been disabled for security reasons in [path]/vb/vb.php on line 114<br />
R: you can simply add &#8220;@&#8221; in front of every occurrence of the word &#8220;ini_set&#8221; in [path]/vb/vb.php</p>
]]></content:encoded>
			<wfw:commentRss>http://redhatvn.net/resolve-vbb-error-warning-ini_set-has-been-disabled/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Red Hat / CentOS IPv6 Network Configuration</title>
		<link>http://redhatvn.net/red-hat-centos-ipv6-network-configuration</link>
		<comments>http://redhatvn.net/red-hat-centos-ipv6-network-configuration#comments</comments>
		<pubDate>Thu, 26 Aug 2010 04:23:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Centos]]></category>
		<category><![CDATA[Cpanel]]></category>
		<category><![CDATA[Directadmin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[shell script]]></category>
		<category><![CDATA[vps]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://redhatvn.net/?p=1248</guid>
		<description><![CDATA[Q. How do I configure static IPv6 networking under RHEL 5.x / Fedora / CentOS Linux? A. Red Hat / CentOS / Fedora RHEL support IPv6 out of box. All you have to do is update two files and turn on networking. You need to update and configure following files for IPv6 configuration: /etc/sysconfig/network : [...]]]></description>
			<content:encoded><![CDATA[<p>Q. How do I configure static IPv6 networking under RHEL 5.x / Fedora / CentOS Linux?<br />
A.  Red Hat / CentOS / Fedora RHEL support IPv6 out of box. All you have to do is update two files and turn on networking.<br />
<span id="more-1248"></span><br />
You need to update and configure following files for IPv6 configuration:</p>
<ol>
<li><strong>/etc/sysconfig/network</strong> : Turn on networking in this file.</li>
<li><strong>/etc/sysconfig/network-scripts/ifcfg-eth0</strong> : Set default IPv6 router IP and server IP address in this file.</li>
</ol>
<p>Open /etc/sysconfig/network file, enter:<br />
<code># vi /etc/sysconfig/network</code><br />
Append following line:</p>
<blockquote><p>NETWORKING_IPV6=yes</p></blockquote>
<p>Open /etc/sysconfig/network-scripts/ifcfg-eth0 (1st network config file)<br />
<code># vi /etc/sysconfig/network-scripts/ifcfg-eth0</code><br />
Append following config directives for IPv6:</p>
<blockquote><p>IPV6INIT=yes<br />
IPV6ADDR=&lt;IPv6-IP-Address&gt;<br />
IPV6_DEFAULTGW=&lt;IPv6-IP-Gateway-Address&gt;</p></blockquote>
<p>Here is my sample file with mix of IPv4 and IPv6 assigned to eth0:</p>
<blockquote><p>DEVICE=eth0<br />
BOOTPROTO=static<br />
ONBOOT=yes<br />
HWADDR=00:30:48:33:bc:33<br />
IPADDR=202.54.1.5<br />
GATEWAY=202.54.1.3<br />
NETMASK=255.255.255.248<br />
IPV6INIT=yes<br />
IPV6ADDR=2607:f0d0:1002:0011:0000:0000:0000:0002<br />
IPV6_DEFAULTGW=2607:f0d0:1002:0011:0000:0000:0000:0001</p></blockquote>
<p>Where,</p>
<ul>
<li><strong>NETWORKING_IPV6=yes|no</strong> &#8211;  Enable or disable global IPv6 initialization.</li>
<li><strong>IPV6INIT=yes</strong> &#8211;  Enable or disable IPv6 configuration for all interfaces.</li>
<li><strong>IPV6ADDR=2607:f0d0:1002:0011:0000:0000:0000:0002</strong> &#8211;   Specify a primary static IPv6 address here.</li>
<li><strong>IPV6_DEFAULTGW=2607:f0d0:1002:0011:0000:0000:0000:0001</strong> &#8211; Add a default route through specified gateway.</li>
</ul>
<p>Save and close the file. Restart networking:<br />
<code># service network restart</code><br />
Verify your configuration by pinging ipv6 enabled site such as ipv6.google.com:<br />
<code>$ ping6 ipv6.google.com</code><br />
Sample output:</p>
<blockquote><p>PING ipv6.google.com(2001:4860:b002::68) 56 data bytes<br />
64 bytes from 2001:4860:b002::68: icmp_seq=1 ttl=59 time=93.2 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=2 ttl=59 time=95.0 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=3 ttl=59 time=94.2 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=4 ttl=59 time=95.2 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=5 ttl=59 time=94.8 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=6 ttl=59 time=95.1 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=7 ttl=59 time=93.3 ms<br />
64 bytes from 2001:4860:b002::68: icmp_seq=8 ttl=59 time=93.8 ms</p>
<p>&#8212; ipv6.google.com ping statistics &#8212;<br />
8 packets transmitted, 8 received, 0% packet loss, time 7010ms<br />
rtt min/avg/max/mdev = 93.268/94.376/95.268/0.799 ms</p></blockquote>
<p>Traces path to a network host, enter:<br />
<code>$ traceroute6 ipv6.google.com</code><br />
Print default IPv6 routing table, enter:<br />
<code>$ route -n -A inet6</code><br />
Sample output:</p>
<blockquote><p>Kernel IPv6 routing table<br />
Destination                                 Next Hop                                Flags Metric Ref    Use Iface<br />
::1/128                                     ::                                      U     0      42531       1 lo<br />
::62.41.14.144/128                          ::                                      U     0      0        1 lo<br />
::127.0.0.1/128                             ::                                      U     0      0        1 lo<br />
::/96                                       ::                                      U     256    0        0 sit0<br />
2001:470:1f04:55a::2/128                    ::                                      U     0      15201       1 lo<br />
2001:470:1f04:55a::/64                      ::                                      U     256    0        0 sit1<br />
fe80::4833:22f4/128                         ::                                      U     0      0        1 lo<br />
fe80::212:3fff:fe75:fa0d/128                ::                                      U     0      0        1 lo<br />
fe80::/64                                   ::                                      U     256    0        0 eth0<br />
fe80::/64                                   ::                                      U     256    0        0 sit1<br />
ff00::/8                                    ::                                      U     256    0        0 eth0<br />
ff00::/8                                    ::                                      U     256    0        0 sit1<br />
::/0                                        ::                                      U     1      0        0 sit1
</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://redhatvn.net/red-hat-centos-ipv6-network-configuration/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
<!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->