Bosen’s Playground

Archive for the ‘Linux’ Category


Posted on September 7, 2008 - by Bosen

Making SELinux allow a nonstandard port

Kadang paling ampuh untuk menghindari portscan + bruteforce attack adalah dengan mengganti port standard ke port tidak standard. Tetapi, untuk sistem yang menggunakan SELinux (Fedora, RedHat, CentOS, etc) port tersebut harus di daftarin dulu, agar bisa di pakai.

Misal kita mau ganti SSHD maka prosesnya adalah:

# /usr/sbin/semanage port -l | grep ssh
ssh_port_t                     tcp      22
# /usr/sbin/semanage port -a -t ssh_port_t -p tcp 19882
# /usr/sbin/semanage port -l | grep ssh
ssh_port_t                     tcp      19882, 22

Hehehe gampang yak ?


Posted on September 7, 2008 - by Bosen

Format Hard Disk in Linux - Krisis Space HD

Cronos dah krisis space HD nih, terpaksa deh masang 500Gb (boleh “Malak” neh kekeke).

Begitu dah di pasang, di format deh .. berikut proses nya ..

  • Create Partisi 
    # fdisk /dev/sdb
c = untuk create
p = untuk print partisi
d = delete
w = untuk write
  • Create File System 
    # mkfs -t ext3 /dev/sdb1
# mkfs -t ext3 /dev/sdb5
  • Format 
    # fsck -f -y /dev/sdb1
# fsck -f -y /dev/sdb5
  • Mount
# mount /dev/sdb1 /home2
# mount /dev/sdb5 /home3

Posted on September 7, 2008 - by Bosen

Upgrade Fedora Core 5 to Fedora Core 6

Upgrade Fedora Core 5 to Fedora Core 6

Ugh, setelah melihat2 cronos kembali, akhirnya diputuskan untuk upgrade ke FC6, mau nya seh ke latest (FC9), tapi sayang, cpanel hanya support sampai FC7.

Ya akhirnya diupgrade juga neh, and berhubung production server, jadi harus live upgrade, hahaha!

Proses upgrade nya baca2 di http://fedoraproject.org/wiki/YumUpgradeFaq, ya udah deh, nekad mode on.

Padahal uptime bagus bener neh

[bosen@cronos ~]$ uname -a;uptime
Linux cronos.bosen.net 2.6.21.5-bosen #1 SMP Wed Nov 21 15:12:59 EST 2007 i686 i686 i386 GNU/Linux
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
19:23:18 up 434 days, 18:19,  1 user,  load average: 0.07, 0.04, 0.00
[bosen@cronos ~]$

Berikut proses2 nya …

  • Clean Stuff
    • for a in $(find /etc /var -name ‘*.rpm?*’); do diff -u $a ${a%.rpm?*}; done
    • package-cleanup –orphans
    • yum install yum-fastestmirror
    • yum clean all
    • Jangan lupa pastikan kita menggunakan yang terbaru/ latest. Lakukan yum -y update all.
  • Download Repos
    • Untuk download repository, bisa menggunakan mirror yang ada di http://mirrors.fedoraproject.org/publiclist
    • rpm -Uhv http://www.muug.mb.ca/pub/fedora/linux/core/6/i386/os/Fedora/RPMS/fedora-release-6-4.noarch.rpm http://www.muug.mb.ca/pub/fedora/linux/core/6/i386/os/Fedora/RPMS/fedora-release-notes-6-3.noarch.rpm
  • Upgrade
    • yum -y upgrade
  • Reboot

Akhirnya…

root@cronos [~]# uname -a;
Linux cronos.bosen.net 2.6.22.14-72.fc6 #1 SMP Wed Nov 21 15:12:59 EST 2007 i686 i686 i386 GNU/Linux
root@cronos [~]

Ad