OpenSSL is the most widely used toolkit for working with SSL/TLS certificates on Linux systems. On RHEL 9, it provides everything you need to generate private keys, create certificate signing requests (CSRs), sign certificates using your own certificate authority, and convert between certificate formats. Understanding OpenSSL is essential for any sysadmin managing secure services. This […]
Docker containers are ephemeral by default — all data written inside a container is lost when the container is removed. Docker provides two mechanisms for persisting data and sharing files between containers and the host: volumes (managed by Docker, stored in /var/lib/docker/volumes/) and bind mounts (map a host directory directly into a container). Volumes are […]
Podman is RHEL 9’s default container engine and, unlike Docker, runs entirely rootless and integrates natively with systemd. Socket activation is a systemd feature that lets the kernel hold a listening socket open while the service is stopped; the moment the first connection arrives, systemd starts the corresponding service and hands the socket over. This […]
🟡 Medium ⏱ 5–30 min Last verified: 19 March 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 15–60 min Last verified: 18 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1227 CVE-2005-2977 CVE-2009-0579 CVE-2009-0887 CVE-2009-3232 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 +12 more Upstream summary: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows […]
cAdvisor (Container Advisor) is an open-source daemon from Google that collects, aggregates, and exposes resource usage and performance metrics for every running container on a host. Unlike Docker’s built-in docker stats, cAdvisor exposes its data in Prometheus format, making it a natural fit for scraping alongside Node Exporter. This tutorial covers running cAdvisor on RHEL […]
🟢 Low ⏱ 5–15 min Last verified: 12 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4713 CVE-2006-0056 Upstream summary: Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 5–30 min Last verified: 9 March 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction This guide explains how to Use Podman on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory RHSA-2024:5076 (see also SUSE bugzilla) Related CVEs: CVE-2024-37370 CVE-2024-26458 CVE-2024-26462 CVE-2023-36054 CVE-2024-37371 CVE-2024-26461 Upstream summary: In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count […]
