I would like to learn and play with SELinux on Slackware, my distro of choice. The kernel already includes SELinux code, so that is not a problem. Slackware does not ship with PAM, and I would prefer to avoid it if possible.
Is this simply a matter of obtaining the userland tools, and compiling without PAM support, or is there more to it?
What makes DNSSEC immune to a MITM attack?
Why can't I sign a key for example.com and get this to a resolving nameserver or client before they can get it from the real source?
I have a folder full of 600gb of files. I want to automatically copy the first 300 to one folder, and the rest to another folder. I am not sure how to limit the results with ls or whichever so I can pass it as an argument...
platform is linux...
edit: I want to move 300gb, not the first 300 files. File sizes are arbitrary, and ordering does not matter.
I have been reading about the kaminsky DNS bug, trying to better understand how it works. I think I have the gist of it, but Dan mentions bailiwicks, being used to target DNS servers behind firewalls.
Can someone explain what a bailiwick is, and give an example of how it is used to target servers behind firewalls to exploit the kaminsky bug?
Can someone informed, please give a lengthy reply about the differences and advantages/disadvantages of both approaches?
I am not a DNS expert, not a programmer. I have a decent basic understanding of DNS, and enough knowledge to understand how things like the kaminsky bug work. From what I understand, DNSCurve has stronger encryption, is far simpler to setup, and an altogether better solution.
DNSSEC is needlessly complicated and uses breakable encryption, however it provides end to end security, something DNSCurve does not. However, many of the articles I have read have seemed to indicate that end to end security is of little use or makes no difference.
So which is true? Which is the better solution, or what are the disadvantages/advantages of each?
edit:
I would appreciate if someone could explain what is gained by encrypting the message contents, when the goal is authentication rather than confidentiality.
The proof that keys are 1024bit RSA keys is here.
I have a cron script that runs daily to LOAD DATA INFILE into a MySQL database. I would like to, using PHP as part of a web application, generate a weekly report showing the total number of inserted records from the last 7 days.
I would like to know the best way to go about this. Patching or modifying MySQL is not an option, and changing the way data is inserted is not either. I would prefer to avoid counting the CSV files before inserting, as it would be messy to read this data bac into PHP.
Suggestions?
What is better for performance? A partition closer to the inside of the disk will have slower access times, and we must wait for the drive to switch between the OS and swap partitions.
On the other hand, a swap partition bypasses all of the filesystem allowing writes to the disk directly, which can be faster than a file.
What is the performance trade off?
How much does having a fixed size swapfile make a difference?
Is it a case that it will be longer to change to the swap partition, but performance will be better while it is on the swap partition that if it had been a swap file?
how do I enable packet forwarding for an ethernet dsl modem? Must this be done with iptables?
I was looking here
Now, it sounds promising to be able to restrict where programs are executed from, making sure they only execute from %PROGFILES% and %WINDIR%, but I have to wonder how enforceable and lock-downable that is to do. Assuming that page is followed, and there are no current vulnerabilities(only for the purposes of my question).
Can you ensure that programs can't be executed from %TEMP%, that programs couldn't just be launched from cmd or start commands, or from within other programs? Basically, are there any ways around this, and if so, how too could you lock them down?