Re: CSRF protection done!

2009-11-28 Thread Frank Chiulli
On Fri, Nov 27, 2009 at 10:15 PM, Toshio Kuratomi wrote: > I'd just like to say thanks to G_work, mdomsch, lmacken, ricky, > ivazquez, mikem, and mbonnet.  Thanks to the efforts of all of these people > we have finally succeeded in adding csrf protection to all of the web apps > we've coded for in

Re: IPTable setting for Infrastructure

2009-08-13 Thread Frank Chiulli
On Thu, Aug 13, 2009 at 12:20 PM, Ricky Zhou wrote: > On 2009-08-13 11:59:35 AM, Frank Chiulli wrote: >> I recently installed F11 over F10.  Everything appears to be working >> just fine.  However, I just remembered that Mike McGrath had sent out >> an email about settings

IPTable setting for Infrastructure

2009-08-13 Thread Frank Chiulli
I recently installed F11 over F10. Everything appears to be working just fine. However, I just remembered that Mike McGrath had sent out an email about settings for IPTables that he wanted everyone to use. Unfortunately, I did not bookmark the page. I did try the Infrastructure SOPs (https://fed

Re: exim: SELinux

2009-07-13 Thread Frank Chiulli
Didar, Mail is arriving. I just get one SELinux message for every mail message. I agree...exim should not be referencing /boot AFAIK. But I'm not an expert. Frank On Mon, Jul 13, 2009 at 2:14 AM, Didar Hossain wrote: > On Mon, Jul 13, 2009 at 5:41 AM, Frank Chiulli wrote: >> Tho

Re: exim: SELinux

2009-07-12 Thread Frank Chiulli
Thomas, Thanks for the suggestion. Unfortunately it did not work. I'm still getting the same error. Frank On Sun, Jul 12, 2009 at 3:20 PM, Thomas Spura wrote: > Am Montag, den 13.07.2009, 00:04 +0200 schrieb Frank Chiulli: >> SELinux is preventing exim (exim_t) &q

exim: SELinux

2009-07-12 Thread Frank Chiulli
This is a recently installed/patched F11 system. It was a fresh install to one disk leaving my home directory untouched on another disk. Today, I installed exim and removed sendmail via yum at the command line. I am using the same exim.conf file that I had used with F10 after having compared it

Re: Infrastructure Tickets

2009-02-21 Thread Frank Chiulli
On Fri, Feb 20, 2009 at 11:46 AM, Mike McGrath wrote: > Just a reminder for you to all check your infrastructure tickets. If you > are working on them, great. If not, unset them so we know and can assign > them to someone else: > > https://fedorahosted.org/fedora-infrastructure/report/7 > >

Re: CSI (Security Policy) Help

2009-02-01 Thread Frank Chiulli
On Sun, Feb 1, 2009 at 11:08 AM, Stephen John Smoogen wrote: > On Sat, Jan 31, 2009 at 10:09 PM, Frank Chiulli > wrote: > >> >> I'm not running samba. If I put the following rule before the LOG >> rule, will the packets be dropped and the messages stopped? >

Re: CSI (Security Policy) Help

2009-01-31 Thread Frank Chiulli
On Sat, Jan 31, 2009 at 7:59 PM, seth vidal wrote: > On Sat, 2009-01-31 at 21:30 -0600, Mike McGrath wrote: >> On Sat, 31 Jan 2009, Frank Chiulli wrote: >> >> > So I've implemented the CSI (Security Policy) as previously posted by Mike >> > (http://infrast

CSI (Security Policy) Help

2009-01-31 Thread Frank Chiulli
So I've implemented the CSI (Security Policy) as previously posted by Mike (http://infrastructure.fedoraproject.org/csi/security-policy/en-US/html-singel/) Now I'm seeing the following messages in /var/log/messages: Jan 31 19:09:21 localhost kernel: FW-REJECT IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:

Re: CSI (Security Policy)

2009-01-29 Thread Frank Chiulli
On Thu, Jan 29, 2009 at 9:51 AM, Mike McGrath wrote: > Hey all. I've placed our security policy CSI docs in a standard location > now. Just a reminder: If you have shell access on any of our servers you > need to be compliant with all of these rules by the end of March. Which > should be plenty

Re: RFC - sysadmin guidelines

2009-01-16 Thread Frank Chiulli
On Thu, Jan 15, 2009 at 9:25 PM, Frank Chiulli wrote: > On Thu, Jan 15, 2009 at 9:35 AM, Mike McGrath wrote: >> On Sun, 11 Jan 2009, Mike McGrath wrote: >> >>> This isn't really required but it's my intention to implement these >>> policies (or what

Re: RFC - sysadmin guidelines

2009-01-15 Thread Frank Chiulli
On Thu, Jan 15, 2009 at 9:35 AM, Mike McGrath wrote: > On Sun, 11 Jan 2009, Mike McGrath wrote: > >> This isn't really required but it's my intention to implement these >> policies (or what we come to after some discussion). This is targeted >> _ONLY_ at this team and those with shell access to o

Re: Introductions

2008-08-28 Thread Frank Chiulli
2008/8/28 Mike <[EMAIL PROTECTED]>: > Toshio, > > I am most definitely interested, I will jump on IRC as soon as I can find a > hole in the firewall at work, Otherwise I will be on when I get back home. > I am in US Central Time. if I can find a hole before the meeting I will > attend. > > if pos

Password Migration

2008-03-13 Thread Frank Chiulli
Should the password migration associated with FAS2 be complete by now? I still have to use my old password on publictest1. Frank ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/f

Re: But 429469

2008-03-08 Thread Frank Chiulli
On Sat, Mar 8, 2008 at 10:36 AM, Mike McGrath <[EMAIL PROTECTED]> wrote: > In our efforts to track down https://bugzilla.redhat.com/429459 I've > disabled all iscsi on xen2. Some of those guests have been moved > elsewhere, and some of them have been converted to local storage. > > Please do no

Printing Problems on F8

2008-01-14 Thread Frank Chiulli
My system is running Fedora 8 and is up-to-date. I have an HP Deskjet 932C printer attached to a Hawking HPS12U print server on the network. I've configured the printer using system-config-printer. I set the printer mode to be draft. I can print a short simple text file. But it prints double-sp

Ticket #116 - Fedora Poll

2008-01-10 Thread Frank Chiulli
I've accepted this ticket. The first thing I did was look for any Fedora packages (repoquery); but came up empty. Next, I tried Source Forge. A query for 'poll' yielded 70 results. None of these are written in Python. AFAIK Python is not a requirement. I've downloaded and am testing the first

Re: FC6 guests

2008-01-08 Thread Frank Chiulli
On Jan 8, 2008 8:26 AM, Matt Domsch <[EMAIL PROTECTED]> wrote: > On Tue, Jan 08, 2008 at 11:23:25AM -0500, Luke Macken wrote: > > So, we still have a handful of FC6 guests lying around in PHX. > > After a quick look, it seems that we're using them for the following > > services. > > > > publict

A Volunteer

2007-04-11 Thread Frank Chiulli
Hi, My name is Frank and I would like to volunteer to help. I've already traded a few emails with Mike McGrath. He suggested that I send a short introduction the list. So here it is. I am 58 years old. I have been writing software for about 37 years professionally - longer if you count colle