Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-24 Thread Jim Perrin
On Mon, Aug 24, 2009 at 11:12 AM, Voyek, Williamwvo...@edmc.edu wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256

 Ok, I have changed it to WilliamVoyek.

 Thanks,

 William

Okay, you should have permissions to make the necessary changes.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-22 Thread Karanbir Singh
On 08/21/2009 11:50 PM, Voyek, William wrote:
 whats your username ?
 wvoyek

Would you be able to make it FirstnameLastname ? That way things stay 
uniform for everyone

-- 
Karanbir Singh : http://www.karan.org/  : 2522...@icq
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-22 Thread Jim Perrin
On Fri, Aug 21, 2009 at 6:50 PM, Voyek, Williamwvo...@edmc.edu wrote:

 wvoyek

Once you have your username in the format Karanbir describes, we can
give you the appropriate permissions.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Jim Perrin
On Fri, Aug 21, 2009 at 12:57 PM, Voyek, Williamwvo...@edmc.edu wrote:
 Hello,



 There are some errors on the HowTos/OS_Protection page on the CentOS wiki. I
 would like to correct the errors.

Sure. What are you seeing as errors though?

-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Voyek, William
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Jim,

Under Pam modifications:

authrequired  pam_tally2.so onerr=fail unlock_time=60 no_magic_root

account required  pam_tally2.so deny=3  no_magic_root per_user

deny=3 should be in auth. It's not allowed in account.
no_magic_root is not a valid option for pam_tally2, only for pam_tally. The 
default behavior for pam_tally2 is no_magic_root. You need to supply the 
magic_root flag to enable the magic_root behavior.

Under Sysctl Security:

The net.ipv4.icmp_ignore_bogus_error_messages = 1 doesn't appear to be valid, 
but it's included in the NSA guide, as well as other reputable sources. It's 
probably best to not include this

While this is technically correct, there is no 
net.ipv4.icmp_ignore_bogus_error_messages. However there is 
net.ipv4.icmp_ignore_bogus_error_responses. That should be the the entry in 
/etc/sysctl.conf


Thanks,

William

- -Original Message-
From: centos-docs-boun...@centos.org [mailto:centos-docs-boun...@centos.org] On 
Behalf Of Jim Perrin
Sent: Friday, August 21, 2009 1:21 PM
To: Mail list for wiki articles
Subject: Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

On Fri, Aug 21, 2009 at 12:57 PM, Voyek, Williamwvo...@edmc.edu wrote:
 Hello,



 There are some errors on the HowTos/OS_Protection page on the CentOS wiki. I
 would like to correct the errors.

Sure. What are you seeing as errors though?

- -- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs

-BEGIN PGP SIGNATURE-
Version: 9.10.0 (Build 500)
Charset: utf-8

wsBVAwUBSo8GedBiDE1p8+k6AQiSXgf/QAzVkFAALI4pW9mfAZbCdJCUz7RFY4Hq
o7KwOdvARlHPPzoxDt/pMO9jnPtefbRpm2uTBr0KygYLHZlT6bGCljefIkKNtCR0
rd+lShQIlDFpQB1xpwMMtYqiAdLwumv0GSXcliNBp1X6IAFryPTh2emmWwgYhG3H
7rqUEm+h9nih+5hII+Y+CeRN9JyPC9dXJYy3U4Xp5vZiK9H+MjdoUm3I0CwJv2ib
KLhkcNwkgXYocwbomv2+KXrgjbxWye3RqLeJFlNga+QDO4JlZv+uxEUfzQ/7Y+Og
ytkcfwZLeUgPum3bNU93IUeb2mqlgRsF+gkGxmm4Bpw3K+AnQlQvNA==
=zCOm
-END PGP SIGNATURE-

___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Jim Perrin
On Fri, Aug 21, 2009 at 4:41 PM, Voyek, Williamwvo...@edmc.edu wrote:
snip
All valid points, I'm sold. Do you have access already to make these changes?


 - -Original Message-
 From: centos-docs-boun...@centos.org [mailto:centos-docs-boun...@centos.org] 
 On Behalf Of Jim Perrin
 Sent: Friday, August 21, 2009 1:21 PM
 To: Mail list for wiki articles
 Subject: Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

 On Fri, Aug 21, 2009 at 12:57 PM, Voyek, Williamwvo...@edmc.edu wrote:
 Hello,



 There are some errors on the HowTos/OS_Protection page on the CentOS wiki. I
 would like to correct the errors.

 Sure. What are you seeing as errors though?

 - --
 During times of universal deceit, telling the truth becomes a revolutionary 
 act.
 George Orwell
 ___
 CentOS-docs mailing list
 CentOS-docs@centos.org
 http://lists.centos.org/mailman/listinfo/centos-docs

 -BEGIN PGP SIGNATURE-
 Version: 9.10.0 (Build 500)
 Charset: utf-8

 wsBVAwUBSo8GedBiDE1p8+k6AQiSXgf/QAzVkFAALI4pW9mfAZbCdJCUz7RFY4Hq
 o7KwOdvARlHPPzoxDt/pMO9jnPtefbRpm2uTBr0KygYLHZlT6bGCljefIkKNtCR0
 rd+lShQIlDFpQB1xpwMMtYqiAdLwumv0GSXcliNBp1X6IAFryPTh2emmWwgYhG3H
 7rqUEm+h9nih+5hII+Y+CeRN9JyPC9dXJYy3U4Xp5vZiK9H+MjdoUm3I0CwJv2ib
 KLhkcNwkgXYocwbomv2+KXrgjbxWye3RqLeJFlNga+QDO4JlZv+uxEUfzQ/7Y+Og
 ytkcfwZLeUgPum3bNU93IUeb2mqlgRsF+gkGxmm4Bpw3K+AnQlQvNA==
 =zCOm
 -END PGP SIGNATURE-

 ___
 CentOS-docs mailing list
 CentOS-docs@centos.org
 http://lists.centos.org/mailman/listinfo/centos-docs




-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Voyek, William
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

No, I don't have editing access.

Thanks,

William


- -Original Message-
From: centos-docs-boun...@centos.org [mailto:centos-docs-boun...@centos.org] On 
Behalf Of Jim Perrin
Sent: Friday, August 21, 2009 2:29 PM
To: Mail list for wiki articles
Subject: Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

On Fri, Aug 21, 2009 at 4:41 PM, Voyek, Williamwvo...@edmc.edu wrote:
snip
All valid points, I'm sold. Do you have access already to make these changes?


 - -Original Message-
 From: centos-docs-boun...@centos.org [mailto:centos-docs-boun...@centos.org] 
 On Behalf Of Jim Perrin
 Sent: Friday, August 21, 2009 1:21 PM
 To: Mail list for wiki articles
 Subject: Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

 On Fri, Aug 21, 2009 at 12:57 PM, Voyek, Williamwvo...@edmc.edu wrote:
 Hello,



 There are some errors on the HowTos/OS_Protection page on the CentOS wiki. I
 would like to correct the errors.

 Sure. What are you seeing as errors though?

 - --
 During times of universal deceit, telling the truth becomes a revolutionary 
 act.
 George Orwell
 ___
 CentOS-docs mailing list
 CentOS-docs@centos.org
 http://lists.centos.org/mailman/listinfo/centos-docs

 -BEGIN PGP SIGNATURE-
 Version: 9.10.0 (Build 500)
 Charset: utf-8

 wsBVAwUBSo8GedBiDE1p8+k6AQiSXgf/QAzVkFAALI4pW9mfAZbCdJCUz7RFY4Hq
 o7KwOdvARlHPPzoxDt/pMO9jnPtefbRpm2uTBr0KygYLHZlT6bGCljefIkKNtCR0
 rd+lShQIlDFpQB1xpwMMtYqiAdLwumv0GSXcliNBp1X6IAFryPTh2emmWwgYhG3H
 7rqUEm+h9nih+5hII+Y+CeRN9JyPC9dXJYy3U4Xp5vZiK9H+MjdoUm3I0CwJv2ib
 KLhkcNwkgXYocwbomv2+KXrgjbxWye3RqLeJFlNga+QDO4JlZv+uxEUfzQ/7Y+Og
 ytkcfwZLeUgPum3bNU93IUeb2mqlgRsF+gkGxmm4Bpw3K+AnQlQvNA==
 =zCOm
 -END PGP SIGNATURE-

 ___
 CentOS-docs mailing list
 CentOS-docs@centos.org
 http://lists.centos.org/mailman/listinfo/centos-docs




- -- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs

-BEGIN PGP SIGNATURE-
Version: 9.10.0 (Build 500)
Charset: utf-8

wsBVAwUBSo8ULtBiDE1p8+k6AQixVAf/SD0i7Ws2nkv83to4IK3giRt9vniMj2bg
JF/gQuz9R+Dr3l/1Q0aah0YAwOYOSTcG5SiEFR/ojssmTQ6utxjkaIybPJISAQlM
UVnAQRSpCypSEWOkNQifA0/gEvboJS9HhA6RVhxafUj4tAorFypOzIm9aN55iQvG
OESGLjlJbicLWtWD8UnD+1g5dnb2S89DLcv+vJ3uSLVvPLB6DYKulkK9XuAb0MXg
/9Y8VuXKRVZ6kUJIdVKrONnhrwy2VvbdpozbzWyJb5PIosaIXrzk7fripgtOR9jl
T5n36xkHkR+r9N/30k3W6i3ZC+sCfEwiz2GpDXm8wLwcOY2CsC0XXQ==
=ZKEB
-END PGP SIGNATURE-

___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Karanbir Singh
On 08/21/2009 10:39 PM, Voyek, William wrote:
 No, I don't have editing access.

whats your username ?

-- 
Karanbir Singh : http://www.karan.org/  : 2522...@icq
___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs


Re: [CentOS-docs] Wiki Edits: HowTos/OS_Protection

2009-08-21 Thread Voyek, William
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

 On 08/21/2009 10:39 PM, Voyek, William wrote:
 No, I don't have editing access.
 
 whats your username ?
 
 -- 
 Karanbir Singh : http://www.karan.org/  : 2522...@icq

wvoyek


-BEGIN PGP SIGNATURE-
Version: 9.10.0 (Build 500)
Charset: utf-8

wsBVAwUBSo8kz9BiDE1p8+k6AQiocgf/VXA4n/DpZ3War/V4dZL3u9NsrvDcNNaA
c+zlkYzNqHXKnQi2BLx/hqLi6KvjWhM7rvl+NmXrYoO4m9VPQ6/BkV/OuuvNHkfP
9FaUMCNpHXiyNnqdCRQs0tV72fGIKUo3Wu2ovKwMlFmBYshKHdaO30lCXHESUvVB
AwSdg4+zlNLi/B5F9zVr98wPLuqsrPwnyhVJ6f0+0L9jUdxcQ+cjCWifmjs/wRHu
Sjgx/Jn27ZbcTp5j9TncmiyA4P7UDxmaxKch/CRYfeuG+Xo//9Mv8r6sR3YcnCSI
Szk2OvMmxGKUExZPFRjQLXIUe1uWXdoFPWJoXnht1/FGonW1XdF5zA==
=T4A0
-END PGP SIGNATURE-

___
CentOS-docs mailing list
CentOS-docs@centos.org
http://lists.centos.org/mailman/listinfo/centos-docs