Re: what's the current "standard" for tools to security harden fedora/RHEL?

2015-06-16 Thread Tim
On Tue, 2015-06-16 at 14:29 -0400, Robert P. J. Day wrote: > friend asked me about the most effective way to harden red hat > systems I'd venture to say that if they cannot use a computer safely (i.e. not do unsafe things, themselves), that you can only have moderate success with hardening the sec

Re: selinux problem 'popup'

2015-06-16 Thread Tim
On Tue, 2015-06-16 at 17:38 -0600, jd1008 wrote: > So, I guess I have one of 2 options: > touch /.autorelabel followed by reboot If it's just a small number of files and/or directories, simply restore their labels. That's much less disruptive, and this isn't windows. man restorecon -- tim@loca

Re: Middle mouse button stopped pasting

2015-06-16 Thread Tim
On Tue, 2015-06-16 at 11:37 -0700, stan wrote: > Have you noticed that all scroll bars became click-to-position instead > of click-pgup-pgdn? That was due to the change in gtk. That is seriously annoying. There's next to no-way to use that. You can't predict where you'll end up in a page by cli

Re: what's the current "standard" for tools to security harden fedora/RHEL?

2015-06-16 Thread Martin Cigorraga
RHEL/CentOS/Fedora comes with a quite complete set of SELinux rules making the system quite secure OOTB, however as YMWV it won't hurt to keep an eye on SELinux alerts which you can track using the SELinux Troubleshooting application; there are also other quite useful SELinux related tools like the

Re: selinux problem 'popup'

2015-06-16 Thread jd1008
On 06/16/2015 05:24 PM, Tahir Hafiz wrote: On Tue, Jun 16, 2015 at 10:27 PM, Martin Cigorraga mailto:martincigorr...@gmail.com>>wrote: Check with SELinux Troubleshooter. On Tue, Jun 16, 2015 at 6:24 PM jd1008 mailto:jd1...@gmail.com>> wrote: On 06/16/2015 03:22 PM, jd1008

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread Tahir Hafiz
If you do a systemctl status -l firewalld after starting up again that should you the errors it has from starting up (the log lines would be from journald itself). But as suggested earlier the --panic-on --panic-off flags seem really cool. --state, flag will show you if firewalld is running or no

Re: selinux problem 'popup'

2015-06-16 Thread Tahir Hafiz
If you do a sealert -a /var/log/audit/audit.log That should output what SELinux policy was infringed. SELinux logs to /var/log/audit/audit.log grep AVC /var/log/audit/audit.log is another way to parse the log file for SELinux comments. Cheers, Tahir On Tue, Jun 16, 2015 at 10:27 PM, Martin Ci

Re: selinux problem 'popup'

2015-06-16 Thread Martin Cigorraga
Check with SELinux Troubleshooter. On Tue, Jun 16, 2015 at 6:24 PM jd1008 wrote: > > > On 06/16/2015 03:22 PM, jd1008 wrote: > > Selinux comlained the a program "attempted write on this directory" > > > > but it does not say which directory. > > I looked in /var/log but even there it does not sa

Re: selinux problem 'popup'

2015-06-16 Thread jd1008
On 06/16/2015 03:22 PM, jd1008 wrote: Selinux comlained the a program "attempted write on this directory" but it does not say which directory. I looked in /var/log but even there it does not say which directory. So how can I find out which directory the program attempted the write? The progr

selinux problem 'popup'

2015-06-16 Thread jd1008
Selinux comlained the a program "attempted write on this directory" but it does not say which directory. I looked in /var/log but even there it does not say which directory. So how can I find out which directory the program attempted the write? -- users mailing list users@lists.fedoraproject.org

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread Martin Cigorraga
Quite interesting to know Matthew, thanks. Btw, F21 and F22 releases - alongside their new distribution scheme - have proven to be phenomenal so far, kudos! -Martin On Tue, Jun 16, 2015 at 1:36 PM Matthew Miller wrote: > On Tue, Jun 16, 2015 at 12:12:39AM -0700, David Highley wrote: > > Generall

Re: what's the current "standard" for tools to security harden fedora/RHEL?

2015-06-16 Thread SternData
On 06/16/2015 01:29 PM, Robert P. J. Day wrote: > > friend asked me about the most effective way to harden red hat > systems (both fedora and RHEL). what's the state of the art these > days? i know RH has online manuals on system security -- what's > available in terms of tools to scan existing

Re: Middle mouse button stopped pasting

2015-06-16 Thread stan
On Tue, 16 Jun 2015 10:17:30 -0400 "Kevin H. Hobbs" wrote: > I have also noticed a change to middle mouse button pasting in Fedora > 20. > > The middle mouse button used to paste into gvim at the position of the > cursor regardless of where I clicked. > > Now, all of a sudden, it moves the curs

what's the current "standard" for tools to security harden fedora/RHEL?

2015-06-16 Thread Robert P. J. Day
friend asked me about the most effective way to harden red hat systems (both fedora and RHEL). what's the state of the art these days? i know RH has online manuals on system security -- what's available in terms of tools to scan existing systems for vulnerabilties? is bastille linux still a goin

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread Matthew Miller
On Tue, Jun 16, 2015 at 12:12:39AM -0700, David Highley wrote: > Generally we are needing to run a test to see if we have a firewall > issue so we want to stop for the test and then start the firewall up > again. Currently, firewalld has a "panic mode" which, as you might expect, drops everything.

Re: Re: Middle mouse button stopped pasting

2015-06-16 Thread Kevin H. Hobbs
I have also noticed a change to middle mouse button pasting in Fedora 20. The middle mouse button used to paste into gvim at the position of the cursor regardless of where I clicked. Now, all of a sudden, it moves the cursor then inserts text (Yuck!) I am using fluxbox as my window manager. Wha

Re: packages not from a trusted source

2015-06-16 Thread David Timms
On 16/06/15 01:06, Patrick O'Callaghan wrote: ... >> Well right, but what about apper? Does it really have no way to show >> me >> what it's warning me about? > > I have no idea. Everyone has different tastes but I have only ever used > the command line for updating (formerly yum, now dnf) since

Re: F22: dnf - seems to do nothing?

2015-06-16 Thread Radek Holy
- Original Message - > From: "John Horne" > To: "Fedora List" > Sent: Tuesday, June 16, 2015 12:12:51 PM > Subject: F22: dnf - seems to do nothing? > > Hello, > > I have just installed F22 (KDE spin) onto my laptop at home. After > installation I ran 'dnf update' and it installed a lo

F22: dnf - seems to do nothing?

2015-06-16 Thread John Horne
Hello, I have just installed F22 (KDE spin) onto my laptop at home. After installation I ran 'dnf update' and it installed a load of patches. However, now whenever I invoke dnf it seems to do nothing (no output on terminal). My first thought was to perhaps try using 'strace' to see what it was doi

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread Ed Greshko
On Tue, Jun 16, 2015, 10:44 David Highley wrote: We always see failures after doing; systemctl stop firewald followed by systemctl start firewalld. To clear the issue we seem to have to reboot the system. It may be helpful to know what the errors are. -- users mailing list users@lists.fedor

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread Martin Cigorraga
Use stop and start then. On Tue, Jun 16, 2015 at 4:12 AM David Highley < dhigh...@highley-recommended.com> wrote: > "Joe Zeff wrote:" > > > > On 06/15/2015 07:44 PM, David Highley wrote: > > > We always see failures after doing; systemctl stop firewald followed by > > > systemctl start firewalld.

Re: How to cleanly stop and restart firewalld?

2015-06-16 Thread David Highley
"Joe Zeff wrote:" > > On 06/15/2015 07:44 PM, David Highley wrote: > > We always see failures after doing; systemctl stop firewald followed by > > systemctl start firewalld. To clear the issue we seem to have to reboot > > the system. > > Have you tried using this: > > systemctl restart firewald