chris

How to Secure PostgreSQL on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Secure PostgreSQL on SLES 12

Introduction This tutorial covers How to Secure PostgreSQL on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh && […]

Read more
Common Problems 114949

RHEL 8 – NetworkManager Profile Bound to Wrong Interface

🟡 Medium   ⏱ 5–30 min  Last verified: 11 August 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 114933

RHEL 8 SELinux AVC denies web application write access

🟡 Medium   ⏱ 5–30 min  Last verified: 11 August 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How To Troubleshoot Common Nginx Errors — step-by-step Web Servers tutorial on Progressive Robot

How To Troubleshoot Common Nginx Errors

There are several methods you can use to troubleshoot Nginx errors. Keep in mind that these methods of troubleshooting are meant as a starting point, and further investigation is often required to diagnose the root cause of an issue. This tutorial will review several commands that are commonly used to troubleshoot Nginx across most Linux distributions:

Read more
How to Set Up Real-Time Performance Monitoring with Netdata on Ubuntu 16.04 — step-by-step Linux tutorial on Progressive Robot

How to Set Up Real-Time Performance Monitoring with Netdata on Ubuntu 16.04

Netdata provides accurate performance monitoring through extensible web dashboards that visualise the processes and services on your Linux systems. It monitors metrics about CPU, memory, disks, networks, processes, and more. The steps in this tutorial cover everything you need to successfully set up one Ubuntu 16.04 server running Netdata using its built-in web server or, optionally, using Nginx.

Read more
Ubuntu 18.04 — grub2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — grub2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 August 2020 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4432-2 Related CVEs: https://launchpad.net/bugs/1889556 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705  +2 more Upstream summary: USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for […]

Read more
How to Configure SSL/TLS Client Certificate Authentication on Debian 10 — step-by-step Debian 10 tutorial on Progressive Robot

How to Configure SSL/TLS Client Certificate Authentication on Debian 10

Introduction How to Configure SSL/TLS Client Certificate Authentication on Debian 10 is a fundamental operation for any administrator maintaining a Debian 10 Buster server. Debian 10 Buster ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]

Read more
How To Set Up Highly Available Web Servers with Keepalived and Reserved IPs on Ubuntu 14.04 — step-by-step Linux tutorial on Progressive Robot

How To Set Up Highly Available Web Servers with Keepalived and Reserved IPs on Ubuntu 14.04

Keepalived is a service that can monitor servers or processes in order to implement high availability on your infrastructure. In this guide, we will use the `keepalived` daemon to monitor two web servers. The secondary server will take over the web traffic if the primary server experiences issues by automatically claiming ownership of a shared Floating IP address using the cloud provider API.

Read more
Cómo listar y eliminar reglas de firewall de Iptables — step-by-step Security tutorial on Progressive Robot

Cómo listar y eliminar reglas de firewall de Iptables

Iptables es una tecnología de firewall que tiene una función esencial en la seguridad de la red para muchos sistemas Linux. En este tutorial, veremos cómo hacer las siguientes tareas de iptables: listar reglas, borrar contadores de paquetes y bytes, eliminar reglas, vaciar cadenas (eliminar todas las reglas de una cadena) y restablecer por completo un firewall de iptables.

Read more
CHAT