CentOS

Hey guys, Im trying to compile my own kernel based on Centos 8 Stream config. During compilation via "make -j8 rpm-pkg" command im getting some error: AR kernel/built-in.a CC [M] kernel/kheaders.o error: Bad exit status from /var/tmp/rpm-tmp.Ve4SVu (%build) RPM build errors: Bad exit status from /va...

[root@ns3030517 kernels]# cp /boot/config-3.10.0-957.1.3.el7.x86_64 /usr/src/kernels/linux-4.19.9/.config
[root@ns3030517 kernels]#

Hey guys, I don't understand why after kernel compilation, im always getting error like on screenshot below. centos.png Im using exaclly the same config as centos uses. I just copied from /boot/config.... to the kernel sources. After all i just type "make -j8 rpm-pkg". Packages are build fine the sa...

Hey, I have been trying compile Centos and Fedora kernel for few days. My compile always finish with dracut screen instead login screen. No matter how i compile kernel, results are the same. I was trying using: make -j8 rpm-pkg, kernel was built successfully but after install and reboot dracut welco...

Hey, Im trying do my best with security options based on your script. I have a litte problems with few options. When im adding these options: # Enable GCC Plugins CONFIG_GCC_PLUGINS=y # Gather additional entropy at boot time for systems that may not have appropriate entropy sources. CONFIG_GCC_PLUGI...

Hey guys, Im want to configure server based of course on Centos 7. Im still wondering how SElinux can protect against some exploits/bufferoverflow etc. I made a test with PaXTest with user mapped and unmapped to user_u. getsebool: selinuxuser_execheap --> on selinuxuser_execmod --> on selinuxuser_ex...

Hey guys,

I want to install wordpress cms and wondering what way will be better. Should i use httpd_sys_content_t for /var/www/domain/public_html or install cms to the /home/user with user_t domain. What will be better solution of security ?

Thanks,

Hey guys, Im trying to run lxc with selinux on Centos 7. I installed and created lxc container with simple command lxc-create -n test -t centos. After that i just added to the: /var/lib/lxc/test/config line like belowe: lxc.selinux.context = system_u:system_r:lxc_t:s0:c22 When i want to run it, im g...

Hello guys, Im looking for and trying how to drop capabilities from lxc container created with virt-install. I think it isn't the "same" as lxc is. virt-install --connect lxc:// --name fedora20 --ram 512 --filesystem /var/lib/libvirt/filesystems/fedora20/ Selinux works good but im wondering how can ...

Hello guys, I have created user bronek and have added to staff_u selinux. root#: useradd -Z staff_u bronek The same problem exists with user_u selinux If i create user selinux (staff_u), bronek can't login via ssh. Where is a problem ? I have put logs from audit.log type=USER_AUTH msg=audit(15069709...