@MichaelHampton I've only ever seen BSD MAC configured once. It was fail-closed. If there wasn't a definition for what you wanted to do it wasn't allowed.
your answer says if there's no policy module the app runs "unconfined" (the exact opposite behavior)
@voretaq7 SELinux does the same thing. But the targeted reference policy explicitly unconfines users. The strict policy fails closed in the way you're describing.
One of our domains has two Windows 2008 r2 servers: a domain controller which also holds all the FSMO roles and member server. If I rename a domain user, then use Windows explorer to look at a file located on the DC to which the renamed user has rights, I see the new username right away. If I l...
@voretaq7 It's kind of meant to be an SELinux "easy mode". If you confine everything then you have to do a lot more work to give users access to whatever they actually need to get done.
Why do you want this behavior changed? Access is granted based on the SID, which does not change during an account rename. Showing the name instead of the SID is just a convenience to the admin of the server. It shouldn't actually cause any problem. — MDMarra20 secs ago
@voretaq7 Yeah, not confining logged-in users is a potential risk. But it's generally acceptable on systems where the only users you expect to log in are the sysadmins.
@MDMarra that works...I honestly don't know what mechanism is causing the "caching" he speaks of. I figured a sid to name lookup happened every single time...hence the slowass response if you are stupid and put 15 individual NTFS permissions on a network share.
Over the course of their history fiber cables have evolved several new defenses in an attempt to ward off their only natural predator (the backhoe). Fiber cables born today have a tough outer shell of plastic, or in some cases metal, to attempt to deflect the teeth of their voracious predator. To date these adaptations have not proven wholly effective, though the infant mortality rate among fiber cables has dropped as the adaptation spreads through the population.
Seriously, it would be less embarrassing if the US government hadn't funded large parts of the SELinux and Trusted BSD project so unix could HAVE mandatory access control.
ready to nuke this thing from orbit. Win7 on Parallels, appcrash anytime you try to install/uninstall a program, can't download files online from any browser that is installed, but can browse online. sfc /scannow says crap is corrupt but can't fix it...grrrrrr....
@voretaq7 If someone is authorized to access material then they're authorized to access material. The solution is only to give someone access to material if they actually need it.
@ScottPack two different levels of authorization - I'm talking about "The sysadmins can see shit they shouldn't be able to (by virtue of being the sysadmin)"
the problem here is the government pay scale sucks so badly they apparently don't have any competent people who know how to use the tools they paid to develop.
(and I'd love to fix that, except I'm not taking a 50% pay cut!)
@MichaelHampton There are MAC frameworks for Windows too
So, I've messed around some in Ubuntu and CentOS and PCLinuxOS. But I suck at Linux. Anyone care to tell me which distro a Windows guy like me SHOULD get used to using? I don't mean which one is easiest...I mean which one would most likely be worth adding to a resume'
kvm is grafting hypervisor capabilities onto a general purpose OS
bhyve is doing the same thing
the Right Solution for that problem is a system designed to be a hypervisor and nothing else - it can be very good at all the things a hypervisor needs to be good at, without worrying about the stuff a hypervisor shouldn't care about (sound cards & video drivers to name two)
@dawud Except it's not really designed to be a hypervisor -- it has baggage in the kernel for interactive performance, server performance, graphics, sound, etc.
Okay, so SELinux on permissive mode, I chmodded the entire folder to 777 ...and still I get
PHP Fatal error: require_once(): Failed opening required '/var/www/html/includes/bootstrap.inc' (include_path='.:/usr/share/pear:/usr/share/php') in /var/www/html/index.php on line 19
@WesleyDavid - yeah...I'm concerned because it's the CEO's laptop. But he's running Parallels and the Win7 is completely screwed. TrustedInstaller is pissing on everything.
For the worst of the cPanel questions...
This question appears to be off-topic because it concerns the use of shared web hosting by end users or resellers, rather than the administration of web hosting.
On a serious note though:
If you have precedent of admins login in to your CPanel (or other server management consoles) intoxicated/drunk, it might be wiser to look at this problem as a personnel/management issue instead of looking for a solution to a problem as trying to put a bandaid on a gapi...
Display some lines of a randomly selected text and let the admin retype it from the screen before giving him the login screen. Measure the relative timing of the key strokes and plot them one against the other in an x-y diagram, namely points {..., (t(n+1), t(n)), (t(n), t(n-1)), ...} This gives ...
^ He thought about that a lot. Scares me.
Although, substance abuse and the hosting industry are closely tied.
Seriously, hosting sucks.
@MDMarra Is it a proposal? Think the client will spring for it?
Week 1 I assessed their current environment. Week 2 was this week, which is install and config a new domain and make a migration plan, week three is next week where we do a test migration and knowledge transfer
Then, they take it and run with the migration themselves
I want to see an admin get pissed, create a GPO that enables the messenger service on all domain computers, and then "net sends' a big tell off/tell all as he quits.
@TheCleaner There was a story someone shared recently about a guy who would send net send messages to his wife that worked at the same company... until one day he told the entire domain that he wanted to take their underwear off with his teeth.
They had just put a Win 2k domain in place and joined everything to the domain. He thought he could net send to just one person, but accidentally sent "Hey Baby, I looooove you" to everyone
And everyone means everyone across 9 cities in the USA
@WesleyDavid This one time - at band camp - I shoved a pussy up a flute. (they couldn't get the cat parts out of the blender - had to throw it away...)
@MattBear Symantec File Share (formerly PGP NetShare) also works fantastically with Dropbox so long as you edit the policy to exclude automagic decryption of files from Dropbox.exe
@Dan I talked to an artist friend of mine and she said she would love to do it. She says: "We can discuss what style he wants whether realism, impressionistic-realism, impressionistic-expressionistic like Van Gogh style, or he would let me be free to do what comes up. I can send him a photo of one of the paintings I did on commission that was from my imagination; a night beach scene with a few Maui landscapes combined into one." Drop me an e-mail ([email protected]) for her info.
Any one here have an RHN account and can read view this document? Our guy with the login/password is gone for the weekend. access.redhat.com/site/solutions/171933
I was thinking more along the lines of the bottom half of this image http://4-akamai.tapcdn.com/images/thumbs/taps/2012/08/browser-wars-internet-explorer-eating-glue-e94336ba-sz460x871-animate.jpg
@MattBear Thanks. It's OK to cause permanent injury to the English language, but you must do so either cleverly or amusingly, lest we think less of you.
@I'll-Be-Back In all seriousness, if all they're using it for is an IE bounce you can probably do it with a desktop. But we don't know (and can't invest the time to fully understand) your whole use case - that's why we have that canonical "You have to do your own capacity planning" family of questions.
@voretaq7 Well, I like my cats, but that sounds like it be a good solution for @WesleyDavid. Much easier than a restraining order to get him to stop hitting on me...
@Ill-Be-Back That's an adequate server in terms of horsepower, but will it be adequate in terms of uptime? How much will your business care if/when it goes down?
When we adopted our cat she was a stray. A bit of a mess from the outdoors, but so sick he put up no fight to being bathed. Now....... I think I'd be sliced open about the face and arms.
Fortunately she is well enough she does a good job of bathing herself.
And my dog never rolled in poop, so that was nice.
Lab / Cocker mix. Mutant thing.
Had the body of a lab and the legs of a cocker. Looked like a pickle barrel on straws.
Whereas cats can eat 4 ounces of food and produce 8 ounces of vomit, labs are similarly evil in that they can find 4 ounces of water and make a five gallon mess.
Laser guided water finders. OH LOOK A PUDDLE BETTER DRINK IT, ROLL IN IT, PEE IN IT, SPLASH IT ALL OVER MY MASTER!