This is a subject which has been blogged about at length, however now that I’ve got this working I thought I’d blog about the key things I found here to make sure that not only do I get it right in future but also provide a reference to others who are trying to fix the same issues.

(more…)

OK, so I tried to run the upgrade last night and I’ve ended up with a few issues. This could be my fault, however I did follow the instructions found on the debian website and had to resolve multiple dependencies.

The minor issues I’ve encountered:

  1. slocate appears to have been removed and replaced with mlocate.
  2. Apache is complaining about NameVirtualHost not being set anywhere for both *:80 and *:443, yet the config files show otherwise

The Major issues I’ve discovered:

  1. MySQL Server was uninstalled as part of the upgrade. The only way I have been able to re-install it is to run dpkg –set-selections < packages.list where packages.list was the file I created using dpkg –set-selections as part of the upgrade.
  2. BackupPC requires complete analysis of the config file to work out which parameters have not been defined in the old config so it will run.
  3. OcsInventory (admittedly installed from source so not a Debian problem) causes Apache2 to fail on startup owing to a missing perl module.

The solutions:

  1. Install mlocate and run updatedb
  2. Re-install OCSInventory and restart Apache2
  3. update the backuppc-config file using Meld to import the new variables and the backuppc wiki to migrate from v2 to v3.

Wasn’t that fun? :oP

I’ve been using BackupPC for the last year to securely backup servers to a remote location over Rsync and SSH, however I recently stumbled across an issue with backing up the SVN root directory on an SVN server.

(more…)

http://www.theregister.co.uk/2008/08/19/ukgov_uber_database/ has details of a possible “data silo” that contains all of our data.

This blog-post is meant to be a list of potential sites that will enable british citizens to escape the police state that we are rapidly becoming by moving their data outside teritorial waters.

For those of you who honestly believe “those who have nothing to hide have  nothing to fear”, please add a comment listing your bank account and PIN numbers, full address and contact details including every email address, mobile phone and landline number that you have and details of where you work.  If you could also send me a copy of your front door key so I can come and visit you and watch your TV or sleep in your bed whenever I want, that would also be good.  If you’re not going to do this, then you’ve got something to hide, haven’t you???

Please add to the list of datacentres using the comments section below.  I’ll turn this into a proper database at somepoint (and publish the schema here for openess!) and link to it from here.

PF.

Please note these are more notes for me than a finished write-up, however I hope to document this on the Nagios WIKI in due course…

(more…)

love it…

January 17th, 2008 | Posted by ProfFalken in Computer Security | Life | Linux | Open-Source | Stuff - (0 Comments)

"Programming is like sex. One mistake and you have to support
   it for the rest of your life". (Michael Sinz)

Securing web sessions

January 15th, 2008 | Posted by ProfFalken in Computer Security | Linux - (0 Comments)

Someone asked on the wdvl-talk email list (lists.wdvl.com) about securing your server to process sensitive information.

I’m not an expert by any means, however I thought I’d post my advice here in case anyone else wants it. (more…)

Switch to our mobile site