Re: [gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread J. Roeleveld
On Tuesday, September 11, 2018 11:48:59 AM CEST Stefan G. Weichinger wrote: > At first I emerged latest stable gentoo-sources, enabled these flags and > compiled ... but the lpfc module didn't detect the SAN devices > correctly, so I switched back to 4.1.15 (mark this as another todo here > ... soo

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread J. Roeleveld
On Tuesday, September 11, 2018 5:24:47 PM CEST Grant Taylor wrote: > On 09/11/2018 06:51 AM, wiicontrol...@gmail.com wrote: > > If by “all” activity, the customer means all activity, pam_tty_audit is > > the only solution I have heard of that fits the bill: > > > > https://access.redhat.com/docume

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread Grant Taylor
On 09/11/2018 06:51 AM, wiicontrol...@gmail.com wrote: If by “all” activity, the customer means all activity, pam_tty_audit is the only solution I have heard of that fits the bill: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sec-configuring_pam_f

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread Grant Taylor
On 09/11/2018 04:52 AM, Stefan G. Weichinger wrote: Is there a recommended way to track the logs? Specific setup for syslog-ng or in my case journald? Tracking log files is different than getting things into log files. By default, shell history is decidedly excluded from system logs. There ar

Re: [gentoo-user] logging my activity for audits

2018-09-11 Thread wiicontroller
On 2018年09月11日 12時52分, Stefan G. Weichinger wrote: At a customer we were asked to log/protocol all my administrative activity for potential audits etc If by “all” activity, the customer means all activity, pam_tty_audit is the only solution I have heard of that fits the bill: https://access.r

Re: [gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Mick
On Tuesday, 11 September 2018 10:48:59 BST Stefan G. Weichinger wrote: > I got the job to admin a gentoo server that was configured and setup by > a former admin. > > No surprise that it is outdated ... > > It runs with profile "hardened/linux/amd64" and kernel 4.1.15-gentoo-r1 This is a rather

[gentoo-user] logging my activity for audits

2018-09-11 Thread Stefan G. Weichinger
At a customer we were asked to log/protocol all my administrative activity for potential audits etc My admin-work is basically 98% ssh and maybe some additional tasks done via virt-manager (logging the work inside the VMs there is another topic ... I realize that right now). Is there a re

Re: [gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Stefan G. Weichinger
Am 11.09.18 um 11:48 schrieb Stefan G. Weichinger: Right now I always get this when I run "make bzImage" ( # make bzImage   CHK include/config/kernel.release   CHK include/generated/uapi/linux/version.h   CHK include/generated/utsrelease.h   CC  kernel/bounds.s kernel/bounds

[gentoo-user] Rebuilding a kernel on a hardened gentoo

2018-09-11 Thread Stefan G. Weichinger
I got the job to admin a gentoo server that was configured and setup by a former admin. No surprise that it is outdated ... It runs with profile "hardened/linux/amd64" and kernel 4.1.15-gentoo-r1 That kernel does not have the necessary flags enabled to support EXT4 ACLs ... At first I em

Re: : Re: [gentoo-user] Endlessly growing xorg-session.log

2018-09-11 Thread Mick
On Tuesday, 11 September 2018 09:02:18 BST Peter Humphrey wrote: > Mick wrote : > > On Monday, 10 September 2018 09:49:16 BST Peter Humphrey wrote: > > > Hello list, [snip ...] > > > It was mostly full of repetitions of this: > > > [warn] epoll_wait: Bad file descriptor The epoll API performs

Re:: Re: [gentoo-user] Endlessly growing xorg-session.log

2018-09-11 Thread Peter Humphrey
Mick wrote : > On Monday, 10 September 2018 09:49:16 BST Peter Humphrey wrote: > > Hello list, > > > > I've been suffering some very odd problems recently, including lost > e-mails, > > but I've finally found something that could explain them all: disk space > > down to zero in /home. > > > > M