LinuxQuestions.org

Securing your passwords in KeePass

Posted 12-04-2013 at 11:14 AM by sag47
Updated 12-04-2013 at 11:22 AM by sag47

The Linux port of KeePass is called KeePassX.

The following knowledge base article discusses the encryption mechanisms involved with securing keepass databases.

http://keepass.info/help/base/security.html

That's a good read and I highly recommend everyone read it. It tells you about mitigating brute force attacks by modifying iterations of hashes. It even has a little button that computes 1 seconds worth of hashes automatically so that it takes one second...

sag47

Senior Member

Posted in Uncategorized

Views 186 Comments 0 sag47 is online now

iptables workstation config

Posted 11-17-2013 at 10:03 AM by sag47
Updated 11-17-2013 at 11:07 AM by sag47

Tags iptables, ufw

Here's a decent iptables for a workstation that doesn't normally serve hosted applications. It is meant to just block the network while allowing the user to still use the network unhindered. If services will need to connect to your system then you'll have to open ports in the firewall.

Code:

#load firewall config with iptables-restore < iptables.rules
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
#The following rules required

...

sag47

Senior Member

Posted in Uncategorized

Views 202 Comments 0 sag47 is online now

podupti.me statistics for Diaspora

Posted 10-21-2013 at 11:24 AM by sag47
Updated 10-21-2013 at 01:59 PM by sag47

Tags diaspora, openssl

If you've not heard of Diaspora I recommend you check it out.

Today I was playing with SSL statistics with podupti.me which is a list of publicly hosted Diaspora pods. After viewing their source I found that I could knock against their API to pull domain names. This was more for a personal scripting exercise than anything. I'm sharing the results with you, the reader.

Getting secure host names

I basically ran python code like the following......

sag47

Senior Member

Posted in Uncategorized

Views 274 Comments 0 sag47 is online now

sshd chroot jails based on hostname and SELinux

Posted 04-01-2013 at 10:46 AM by sag47
Updated 04-01-2013 at 10:51 AM by sag47

Tags chroot, jenkins, security, selinux, sshd

Why chroot jails based on host name?
If you don't care about the background info just jump to Setting up sshd chroot jail and SELinux.

So I have started configuring automated deployments through my organization using a continuous integration server called Jenkins. I'll post more on Jenkins regularly so that eventually you can have a series of posts which wrap up into a nice and secure howto for Jenkins. So here's why I want chroot jails based on host names.

...

sag47

Senior Member

Posted in SELinux Adventures

Views 2845 Comments 0 sag47 is online now

man page keyboard shortcuts

Posted 02-24-2013 at 08:30 AM by sag47

Here's a short list of keyboard shortcuts for reading man pages that I've learned by usage. I've not found a good place shortcuts are documented; man page or otherwise.

Code:

man bash

Use SHIFT+G to scroll to bottom of the page and look at FILES. You'll also learn more about how bash loads the bashrc if you read the INVOCATION section of the bash man page.

Helpful shortcuts for man pages...

k and j go up and down one line.
Ctrl+u and Ctrl+d go up and down half

...

sag47

Senior Member

Posted in Uncategorized

Views 1095 Comments 0 sag47 is online now

Page 1 of 7

Last »