I'd like to give my username on my server permission to access g++ to compile custom C++ programs. I know I can just su - and compile as root, but I really don't like that.
What do I need to do to allow ONLY my username permission to do that?
I used to create a user by using /usr/sbin/sysinstall in freebsd, but how do i limit that user so he can't view important files (like: dhcpd.conf, rc.conf....) or can't do such as command pico, nano, vi ...etc?
All i want is that user can log in to my freebsd box and then he will ssh to other local servers, I just want my freebsd box is a bridge/gate for him to ssh to local servers which behind that freebsd box. Is it possible ?Thanks.
I know that i have to create a group with has only ssh permission but how do i do that?
every 4 or 5 days the lock table permission keeps getting revoked, does anyone have anything that can point me in the general direction of what would cause this? The only thing i can think of is a cpanel layer 2 update has occured a few times during hte periods where the permission is revoked
unfortunately whenever it happens it results in my SQL backup script failing
I have a problem with cpanel permision and joomla 1.5. In case, I install something likes templates from joomla backend, and then I try for modifying it from cpanel file manager, I got error that FileOp Failure on: "path to edit here" Permission denied
Since this got lost (google cache of thread discussion so far) [url] im reposting because i think it was an interesting discussion.
I'm setting up a cpanel server for the first time. I was wondering if i could harden the default cpanel permissions for the user folders in /home The idea is to prevent users viewing each others files. Please don't suggest the php open_basedir option as its not secure and doesn't work with cgi based file browsers.
Note I'm using suexec/suphp.
currently new cpanel users folders are created with group and user ownership and the permissions 755
I was thinking if i changed this to 711 would this break anything?
Could i lock this down even more by changing the group ownership to "nobody" and thus have permissions 710.
I copied the default config file and renamed it as .config but I get this:
Code: WARNING: No module dm-mem-cache found for kernel 2.6.27.10-grsec, continuing anyway WARNING: No module dm-region_hash found for kernel 2.6.27.10-grsec, continuing anyway WARNING: No module dm-message found for kernel 2.6.27.10-grsec, continuing anyway WARNING: No module dm-raid45 found for kernel 2.6.27.10-grsec, continuing anyway
when doing 2.6.26+ or w/e it is, how do you enable conntrack, what options do i need to enable under make menuconfig?
net.netfilter.nf_conntrack_acct = 1 net.netfilter.nf_conntrack_generic_timeout = 120 error: "net.netfilter.nf_conntrack_icmp_timeout" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_close" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_time_wait" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_last_ack" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_close_wait" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_fin_wait" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_established" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_syn_recv" is an unknown key error: "net.netfilter.nf_conntrack_tcp_timeout_syn_sent" is an unknown key error: "net.netfilter.nf_conntrack_udp_timeout" is an unknown key error: "net.netfilter.nf_conntrack_udp_timeout_stream" is an unknown key net.netfilter.nf_conntrack_max = 262144
and how do i know which hardware/devices that i can remove?
Linux: CentOS 5.2 PHP: 5.2.6 PHP-GD: php-gd.i386 0:5.2.6-jason.1 Apache: 2.2.8 with mod_proxy (Lighttpd serves in the background)Question:
I've built my server with PHP 5.2.6 and Apache and I've also installed php-gd by running 'yum install php-gd', but an application (clip bucket) I'm using requires GD with TTF enabled for the cpatcha image in 'singup'. I've checked my phpinfo [url] but didn't seem to find TTF enabled with my GD, so I wonder how to recompile GD with TTF enabled?
I want to compile a php-cgi on dreamhost with maximum security in particular ensuring that all temporary files are stored in my own directories, what are the settings to configure for that?
What .htaccess settings do I need to help with that?
I realized that some of the temp gzip files where going into the servers main temp folders.
How do you go about getting hardware info so you know what drivers to compile in? I want to build a very small and fast loading kernel for this web server.