Logging Monitoring

How to Configure SELinux on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure SELinux on RHEL 7

How to Configure SELinux on RHEL 7 SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) system built into the Linux kernel and enabled by default on every RHEL 7 installation. Unlike traditional Unix discretionary access control (DAC), which lets file owners decide who can access their files, SELinux enforces a policy defined by the […]

Read more
How to Set Up DNS Forwarders on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Set Up DNS Forwarders on Windows Server 2012 R2

How to Set Up DNS Forwarders on Windows Server 2012 R2 DNS forwarders direct queries for domains that a DNS server cannot resolve locally to another DNS server that may be able to answer them. Configuring forwarders correctly is essential for efficient DNS resolution in enterprise environments, reducing resolution time for external names, enabling split-brain […]

Read more
FreeBSD 12 — cfengine — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cfengine — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cfengine — arbitrary file overwriting vulnerability Related CVEs: CVE-2005-2960 Upstream summary: A Debian Security Advisory reports: Javier Fernández-Sanguino Peña discovered several insecure temporary file uses in cfengine, a tool for […]

Read more
Ubuntu 16.04 — sa-exim — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — sa-exim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4520-1 Related CVEs: CVE-2019-19920 Upstream summary: It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-19920) […]

Read more
How to Set Up Port Knocking for SSH on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up Port Knocking for SSH on RHEL 8

Port knocking is a stealthy technique that keeps SSH’s port 22 invisible to network scanners until a client sends a precise sequence of connection attempts to predetermined ports. On RHEL 8, combining knockd with firewalld creates a powerful two-layer defense: the firewall silently drops all traffic on port 22 by default, and only the knock […]

Read more
Oracle Linux 8 — git — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — git — vulnerability — patch and remediation guide (ELSA-2020-1513)

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1513 Related CVEs: CVE-2020-5260 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 118561

Ubuntu 16.04 LTS – LightDM login loop returns to greeter repeatedly – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 24 February 2020 Affected versions: Ubuntu 16.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — py39-yaml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-yaml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution […]

Read more
How to Use sar for System Activity Reporting on IBM AIX 7.1 — step-by-step IBM AIX 7.1 tutorial on Progressive Robot

How to Use sar for System Activity Reporting on IBM AIX 7.1

Introduction IBM AIX 7.1 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.1 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use sar for system activity reporting on ibm aix […]

Read more
FreeBSD 12 — krfb — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — krfb — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krfb — Multiple security issues in bundled libvncserver Related CVEs: CVE-2014-4607 CVE-2014-6055 Upstream summary: Martin Sandsmark reports: krfb 4.14 [and earlier] embeds libvncserver which has had several security issues. Several […]

Read more
CHAT