=== King is now known as hiwhiteboy === hiwhiteboy is now known as King === King is now known as hiwhiteboy [09:05] Good morning. === fayyaz is now known as Ather === Ather is now known as ather === ather is now known as ather_ [13:37] how can I login as root from a ssh session? I have ssh root disabled, but I can sudo su -, however the old login session stays open if I do this, and I can't change usernames with the old user session still open [13:38] devster31: Login as user, and dont use sudo su - (which is nonsense), but just sudo -i [13:38] And for changing usernames, you need to create another user capable of using sudo -i, login as the new user, and change the username of the old user. [13:39] No need for unlocking the root account, no need for enabling ssh as root. [13:41] so the only way to rename a user is to create a new one with root privileges and log in as this one? [13:41] Correct. [14:49] is there some way I can audit all access in apparmor? [14:49] I cannot seem to locate the correct path to block access for a file [14:55] patdk-lap: you can set it in learning mode [14:55] see https://help.ubuntu.com/lts/serverguide/apparmor.html [14:56] (see aa-genprof) [14:56] ya, but that only works if a something matches [14:56] the problem is, I can't get anything to match [14:56] atleast for the folder I am concerned about [14:56] for other folders, works fine [15:04] nothing was captured by aa-genprof :( [15:05] is there a way I can show what profile I'm running in, to confirm it's actually matching? [15:06] ah, na, it's not matching the program [15:07] ok, so the path to the program itself is also messed up [15:17] bekks: why is sudo su - nonsense? doesn't it login as root? === hiwhiteboy is now known as King [15:44] devster31: ? [15:49] he said: Login as user, and dont use sudo su - (which is nonsense), but just sudo -i [15:53] sudo su - messes up the environment, sudo -i gives you a proper one [15:54] (and "sudo su" generally starts extra subshells which is pointless) [16:08] but sudo resets the entire env, only some variables are passed right? [16:12] devster31: what's the concern? they will elevate privileges differently [16:24] no concern, I'm curious, if I have for example local::lib perl variables with sudo -i they won't be passed [16:29] i have a server with an nfs filesystem in fstab. the filesystem fails to mount at boot, but mounts just fine with mount -a after boot. so far, i've not found much in the way of logging. how can i troubleshoot this further? the os is 14.04.4 [16:30] lunaphyte: try adding _netdev to the options [16:30] with the underscore [16:31] i did try that, but it doesn't seem to have an effect [16:31] here's the current fstab entry: [16:31] 10.128.35.251:/home /home/example.com nfs auto,_netdev,rw,hard,intr 0 0 === InfoTest1 is now known as InfoTest [17:44] So, I'm playing with lxd on 16.04 for a bit. "lxc-ls" shows no defined containers, "lxc list" shows the ones I'm running but its output is not easily parseable. Am I missing something? I'd like to feed the output into lxc-destroy (or should I use "lxc delete"?) [17:46] hello everyone === King is now known as hiwhiteboy === _thumper_ is now known as thumper === Monthrect is now known as Piper-Off [22:31] hi guys. [22:32] have some problem with ssh. when I don't use ssh-session for few minutes I got "broken pipe" [22:33] in sshd_config fix timeout 120 to 0, but it's not fix. [22:34] It's no problem to reconnect, but realy irritabel [22:45] enable keepalives :) [22:50] hey, how do I upgrade apache from Apache/2.4.7 (Ubuntu) to 2.4.16 via apt? We're on 12.04 LTS. [22:51] sudo apt update; sudo apt full-upgrade; [22:51] trying to find some info online but it's bee tricky finding documentation to upgrading to a specific version [22:51] a full upgrade? [22:51] tdelam: Sure. [22:51] tdelam: we only maintain one version per Ubuntu release. [22:52] Oh [22:52] 2.4.16 is in the most recent? [22:52] 2.4.7 in Trusty, 2.4.12 in Wily. [22:52] Wily is the most recent Ubuntu release. [22:52] ah [22:52] Xenial is on 2.4.18. [22:52] (but not released yet) [22:52] damn [22:52] I might have to do this from source :/ [22:53] If there's a specific bugfix you need, we can backport a fix depending on what it is. [22:53] PCI scan is calling specifically for 2.4.16 [22:53] If it's a security thing, we quite likely already have backported the fix to 2.4.7. [22:54] Get a better PCI scan. [22:54] heh [22:54] if it were only that easy [22:54] https://www.dropbox.com/s/v7sj60f87yadcqj/Screenshot%202016-03-20%2018.54.07.png?dl=0 [22:54] Doing it yourself from source is clearly worse for security. [22:54] Unless you want to also pay a security team to keep it up to date. [22:55] yep [22:55] that's not efficient [22:56] You can look up CVEs at http://people.canonical.com/~ubuntu-security/cve/ [22:56] For example your first CVE is fixed in the version in Trusty. [22:56] No need to update to anything else. [22:56] oh wow [22:57] this will be good, I can show them it's resolved in 2.4.7 [22:57] looks like their scan is checking version, not pen testing any of this. [22:57] If your scan says you're vulnerable and you have the latest package installed, then your scan is wrong. [22:57] Right [22:57] petty dumb pci scanner [22:57] thx a ton rbasak, ill check that url [22:57] No problem. [22:59] rbasak: sorry, https://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0231.html the green "released" text depicts that it was patched in those releases? [23:00] Right. And the version in brackets tells you the package version it was fixed in. Make sure you have that version (or higher) installed. [23:00] gotcha, thanks! [23:02] gorgeous! all the issues listed in their scan threat is resolved in my version. [23:02] thankscience! [23:07] nacc_: FYI, https://www.stewright.me/2016/03/upgrade-php-7-0-ubuntu/ [23:07] Oh, he's using Ondrej's PPA [23:07] Never mind! [23:22] rbasak: yep, that's on 14.04 [23:22] Sorry. I assumed it was talking about 16.04 without reading further. [23:23] How's it going BTW? Near the finish line yet? [23:23] I haven't been following because you seemed to have a very good handle on it. [23:23] rbasak: php7 progress is good, it's the removal of php5 that's going slowly [23:24] we finally got symfony updated last week