<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Linux Ask! &#187; Linux Security</title>
	<atom:link href="http://www.linuxask.com/topics/linux-security/feed" rel="self" type="application/rss+xml" />
	<link>http://www.linuxask.com</link>
	<description>Linux Ask! is a Q &#38; A web site specific for Linux related questions such as how to use common Linux commands.</description>
	<lastBuildDate>Sat, 04 Feb 2012 05:57:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Allow a remote IP for incoming connection in UFW (Uncomplicated firewall)</title>
		<link>http://www.linuxask.com/questions/allow-a-remote-ip-for-incoming-connection-in-ufw-uncomplicated-firewall</link>
		<comments>http://www.linuxask.com/questions/allow-a-remote-ip-for-incoming-connection-in-ufw-uncomplicated-firewall#comments</comments>
		<pubDate>Thu, 24 Mar 2011 09:29:23 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Commands]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[ufw]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=2872</guid>
		<description><![CDATA[Allow a remote IP for incoming connection in UFW (Uncomplicated firewall) Answer: To allow a remote IP for incoming connection in Ubuntu's UFW (Uncomplicated firewall), you can use the following command: # sudo ufw allow from x.x.x.x Of course you need to reload the firewall. # sudo ufw reload Related posts: Open a TCP port <a href='http://www.linuxask.com/questions/allow-a-remote-ip-for-incoming-connection-in-ufw-uncomplicated-firewall'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/open-a-tcp-port-in-ubuntus-ufw-firewall' rel='bookmark' title='Open a TCP port in Ubuntu&#8217;s ufw firewall'>Open a TCP port in Ubuntu&#8217;s ufw firewall</a></li>
<li><a href='http://www.linuxask.com/questions/how-do-i-set-up-a-firewall-under-linux' rel='bookmark' title='How do I set up a firewall under Linux?'>How do I set up a firewall under Linux?</a></li>
<li><a href='http://www.linuxask.com/questions/block-a-remote-ip-address-using-iptables' rel='bookmark' title='Block a remote IP Address using iptables'>Block a remote IP Address using iptables</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Allow a remote IP for incoming connection in UFW (Uncomplicated firewall)</p>
<p><strong>Answer:</strong></p>
<p>To allow a remote IP for incoming connection in Ubuntu's <strong>UFW </strong>(Uncomplicated firewall), you can use the following command:</p>
<p><code># sudo ufw allow from x.x.x.x</code></p>
<p>Of course you need to reload the firewall.</p>
<p><code># sudo ufw reload</code></p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/open-a-tcp-port-in-ubuntus-ufw-firewall' rel='bookmark' title='Open a TCP port in Ubuntu&#8217;s ufw firewall'>Open a TCP port in Ubuntu&#8217;s ufw firewall</a></li>
<li><a href='http://www.linuxask.com/questions/how-do-i-set-up-a-firewall-under-linux' rel='bookmark' title='How do I set up a firewall under Linux?'>How do I set up a firewall under Linux?</a></li>
<li><a href='http://www.linuxask.com/questions/block-a-remote-ip-address-using-iptables' rel='bookmark' title='Block a remote IP Address using iptables'>Block a remote IP Address using iptables</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/allow-a-remote-ip-for-incoming-connection-in-ufw-uncomplicated-firewall/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Send ARP REQUEST to a neighbour host in Linux</title>
		<link>http://www.linuxask.com/questions/send-arp-request-to-a-neighbour-host-in-linux</link>
		<comments>http://www.linuxask.com/questions/send-arp-request-to-a-neighbour-host-in-linux#comments</comments>
		<pubDate>Fri, 22 Oct 2010 14:21:21 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Advanced Linux]]></category>
		<category><![CDATA[Basic Linux]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[networking]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=2265</guid>
		<description><![CDATA[Send ARP REQUEST to a neighbour host in Linux Answer: The arping command allow you to Ping destination on device interface by ARP packets, using source address source. E.g. # arping -U 192.168.1.5 The above command send an Unsolicited ARP request to update neighbours' ARP caches. Related posts: Get HTTP request with nc command What <a href='http://www.linuxask.com/questions/send-arp-request-to-a-neighbour-host-in-linux'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/get-http-request-with-nc-command' rel='bookmark' title='Get HTTP request with nc command'>Get HTTP request with nc command</a></li>
<li><a href='http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1' rel='bookmark' title='What is the difference between ip address 0.0.0.0 and 127.0.0.1?'>What is the difference between ip address 0.0.0.0 and 127.0.0.1?</a></li>
<li><a href='http://www.linuxask.com/questions/send-the-crontab-result-to-email' rel='bookmark' title='Send the crontab result to email'>Send the crontab result to email</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Send ARP REQUEST to a neighbour host in Linux</p>
<p><strong>Answer:</strong></p>
<p>The <strong>arping </strong>command allow you to <strong>Ping </strong>destination on device interface by ARP packets, using source address source.</p>
<p>E.g.</p>
<p><code># arping -U 192.168.1.5</code></p>
<p>The above command send an Unsolicited ARP request to update neighbours' ARP caches.</p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/get-http-request-with-nc-command' rel='bookmark' title='Get HTTP request with nc command'>Get HTTP request with nc command</a></li>
<li><a href='http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1' rel='bookmark' title='What is the difference between ip address 0.0.0.0 and 127.0.0.1?'>What is the difference between ip address 0.0.0.0 and 127.0.0.1?</a></li>
<li><a href='http://www.linuxask.com/questions/send-the-crontab-result-to-email' rel='bookmark' title='Send the crontab result to email'>Send the crontab result to email</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/send-arp-request-to-a-neighbour-host-in-linux/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What is the difference between ip address 0.0.0.0 and 127.0.0.1?</title>
		<link>http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1</link>
		<comments>http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1#comments</comments>
		<pubDate>Wed, 28 Jul 2010 13:34:45 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Basic Linux]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[networking]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1919</guid>
		<description><![CDATA[What is the difference between ip address 0.0.0.0 and 127.0.0.1? Answer: Sometimes when using the netstat command, which print out something like # netstat -ntpl (No info could be read for "-p": geteuid()=1001 but you should be root.) Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 <a href='http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/find-out-which-programs-are-listening-tcp-port' rel='bookmark' title='Find out which programs are listening TCP port'>Find out which programs are listening TCP port</a></li>
<li><a href='http://www.linuxask.com/questions/limit-apache-only-listen-to-ipv4-address' rel='bookmark' title='Limit Apache only listen to IPv4 address'>Limit Apache only listen to IPv4 address</a></li>
<li><a href='http://www.linuxask.com/questions/check-for-the-number-of-connection-from-a-particular-ip-address' rel='bookmark' title='Check for the number of connection from a particular IP address'>Check for the number of connection from a particular IP address</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>What is the difference between ip address 0.0.0.0 and 127.0.0.1?</p>
<p><strong>Answer:</strong></p>
<p>Sometimes when using the <strong>netstat </strong>command, which print out something like</p>
<pre><code># netstat -ntpl
(No info could be read for "-p": geteuid()=1001 but you should be root.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN      -
...
</code></pre>
<p>What is the real meaning of <strong>0.0.0.0</strong>?</p>
<p>In fact, this special IP means "<strong>all the IP addresses on the local machine</strong>". So if you have seen a service listening on 0.0.0.0, it means you can connect to the service using any IP addresses of the machine. </p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/find-out-which-programs-are-listening-tcp-port' rel='bookmark' title='Find out which programs are listening TCP port'>Find out which programs are listening TCP port</a></li>
<li><a href='http://www.linuxask.com/questions/limit-apache-only-listen-to-ipv4-address' rel='bookmark' title='Limit Apache only listen to IPv4 address'>Limit Apache only listen to IPv4 address</a></li>
<li><a href='http://www.linuxask.com/questions/check-for-the-number-of-connection-from-a-particular-ip-address' rel='bookmark' title='Check for the number of connection from a particular IP address'>Check for the number of connection from a particular IP address</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/what-is-the-difference-between-ip-address-0-0-0-0-and-127-0-0-1/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Simple file encryption with OpenSSL</title>
		<link>http://www.linuxask.com/questions/simple-file-encryption-with-openssl</link>
		<comments>http://www.linuxask.com/questions/simple-file-encryption-with-openssl#comments</comments>
		<pubDate>Fri, 18 Jun 2010 08:15:22 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Basic Linux]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1762</guid>
		<description><![CDATA[Simple file encryption with OpenSSL Answer: You have a single file (input.txt), and you want to encrypt it with a password, it is easy with OpenSSL. # openssl aes-128-cbc -salt -in input.txt-out input.aes Enter the password twice. When you want to decrypt it, use the command. # openssl aes-128-cbc -d -salt -in input.aes -out output.txt <a href='http://www.linuxask.com/questions/simple-file-encryption-with-openssl'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/output-the-last-n-bytes-of-a-file-in-linux' rel='bookmark' title='Output the last N bytes of a file in Linux'>Output the last N bytes of a file in Linux</a></li>
<li><a href='http://www.linuxask.com/questions/print-the-first-n-bytes-of-a-file-in-linux' rel='bookmark' title='Print the first N bytes of a file in Linux'>Print the first N bytes of a file in Linux</a></li>
<li><a href='http://www.linuxask.com/questions/create-password-file-for-basic-apache-authentication' rel='bookmark' title='Create password file for basic Apache authentication'>Create password file for basic Apache authentication</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Simple file encryption with OpenSSL</p>
<p><strong>Answer:</strong></p>
<p>You have a single file (<strong>input.txt</strong>), and you want to encrypt it with a password, it is easy with <strong>OpenSSL</strong>.</p>
<p><code># openssl aes-128-cbc -salt -in input.txt-out input.aes</code></p>
<p>Enter the password twice.</p>
<p>When you want to decrypt it, use the command.</p>
<p><code># openssl aes-128-cbc -d -salt -in input.aes -out output.txt</code></p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/output-the-last-n-bytes-of-a-file-in-linux' rel='bookmark' title='Output the last N bytes of a file in Linux'>Output the last N bytes of a file in Linux</a></li>
<li><a href='http://www.linuxask.com/questions/print-the-first-n-bytes-of-a-file-in-linux' rel='bookmark' title='Print the first N bytes of a file in Linux'>Print the first N bytes of a file in Linux</a></li>
<li><a href='http://www.linuxask.com/questions/create-password-file-for-basic-apache-authentication' rel='bookmark' title='Create password file for basic Apache authentication'>Create password file for basic Apache authentication</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/simple-file-encryption-with-openssl/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to transfer your identity.pub to the remote machine’s authorized_keys?</title>
		<link>http://www.linuxask.com/questions/how-to-transfer-your-identity-pub-to-the-remote-machine%e2%80%99s-authorized_keys</link>
		<comments>http://www.linuxask.com/questions/how-to-transfer-your-identity-pub-to-the-remote-machine%e2%80%99s-authorized_keys#comments</comments>
		<pubDate>Sat, 12 Jun 2010 04:29:10 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Commands]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1727</guid>
		<description><![CDATA[How to transfer your identity.pub to the remote machine’s authorized_keys? Answer: While you can ssh into the remote machine and edit the authorized_keys file, it is easier with the following command. # ssh-copy-id -i identity-rsa-dsa.pub user@remote-server Related posts: Edit a remote file with vim over SSH Copy file to remote server using scp Running a <a href='http://www.linuxask.com/questions/how-to-transfer-your-identity-pub-to-the-remote-machine%e2%80%99s-authorized_keys'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/edit-a-remote-file-with-vim-over-ssh' rel='bookmark' title='Edit a remote file with vim over SSH'>Edit a remote file with vim over SSH</a></li>
<li><a href='http://www.linuxask.com/questions/copy-file-to-remote-server-using-scp' rel='bookmark' title='Copy file to remote server using scp'>Copy file to remote server using scp</a></li>
<li><a href='http://www.linuxask.com/questions/running-a-command-on-the-remote-server' rel='bookmark' title='Running a command on the remote server'>Running a command on the remote server</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>How to transfer your identity.pub to the remote machine’s authorized_keys?</p>
<p><strong>Answer:</strong></p>
<p>While you can ssh into the remote machine and edit the <strong>authorized_keys</strong> file, it is easier with the following command.</p>
<p><code># ssh-copy-id -i identity-rsa-dsa.pub user@remote-server</code></p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/edit-a-remote-file-with-vim-over-ssh' rel='bookmark' title='Edit a remote file with vim over SSH'>Edit a remote file with vim over SSH</a></li>
<li><a href='http://www.linuxask.com/questions/copy-file-to-remote-server-using-scp' rel='bookmark' title='Copy file to remote server using scp'>Copy file to remote server using scp</a></li>
<li><a href='http://www.linuxask.com/questions/running-a-command-on-the-remote-server' rel='bookmark' title='Running a command on the remote server'>Running a command on the remote server</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/how-to-transfer-your-identity-pub-to-the-remote-machine%e2%80%99s-authorized_keys/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Kill all processes listening on a particular port</title>
		<link>http://www.linuxask.com/questions/kill-all-processes-listening-on-a-particular-port</link>
		<comments>http://www.linuxask.com/questions/kill-all-processes-listening-on-a-particular-port#comments</comments>
		<pubDate>Thu, 01 Apr 2010 14:49:57 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Commands]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[command]]></category>
		<category><![CDATA[network]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1521</guid>
		<description><![CDATA[Kill all processes listening on a particular port Answer: To kill all processes listening on a particular port, e.g. port 80 # kill -9 $( lsof -i:80 -t ) Replace 80 by the port you want. Related posts: Kill all processes accessing the a particular file/folder Find out which programs are listening TCP port Best <a href='http://www.linuxask.com/questions/kill-all-processes-listening-on-a-particular-port'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/kill-all-processes-accessing-the-a-particular-filefolder' rel='bookmark' title='Kill all processes accessing the a particular file/folder'>Kill all processes accessing the a particular file/folder</a></li>
<li><a href='http://www.linuxask.com/questions/find-out-which-programs-are-listening-tcp-port' rel='bookmark' title='Find out which programs are listening TCP port'>Find out which programs are listening TCP port</a></li>
<li><a href='http://www.linuxask.com/questions/best-way-to-kill-all-child-processes-forked-by-a-given-program' rel='bookmark' title='Best way to kill all child processes forked by a given program'>Best way to kill all child processes forked by a given program</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Kill all processes listening on a particular port</p>
<p><strong>Answer:</strong></p>
<p>To kill all processes listening on a particular port, e.g. port 80</p>
<pre><code># kill -9 $( lsof -i:80 -t )
</code></pre>
<p>Replace 80 by the port you want.</p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/kill-all-processes-accessing-the-a-particular-filefolder' rel='bookmark' title='Kill all processes accessing the a particular file/folder'>Kill all processes accessing the a particular file/folder</a></li>
<li><a href='http://www.linuxask.com/questions/find-out-which-programs-are-listening-tcp-port' rel='bookmark' title='Find out which programs are listening TCP port'>Find out which programs are listening TCP port</a></li>
<li><a href='http://www.linuxask.com/questions/best-way-to-kill-all-child-processes-forked-by-a-given-program' rel='bookmark' title='Best way to kill all child processes forked by a given program'>Best way to kill all child processes forked by a given program</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/kill-all-processes-listening-on-a-particular-port/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>SSHMenu: SSH connections manager for GNOME</title>
		<link>http://www.linuxask.com/questions/sshmenu-ssh-connections-manager-for-gnome</link>
		<comments>http://www.linuxask.com/questions/sshmenu-ssh-connections-manager-for-gnome#comments</comments>
		<pubDate>Sat, 06 Mar 2010 02:02:31 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[GNOME]]></category>
		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1454</guid>
		<description><![CDATA[SSHMenu: SSH connections manager for GNOME Answer: SSHMenu is a GNOME panel applet* that keeps all your regular SSH connections within a single mouse click. Highly recommended if you need to manage a lot of SSH sessions. Official homepage: http://sshmenu.sourceforge.net/ Related posts: How to pronounce Gnome? Set the maximum allowed number of connections in MySQL <a href='http://www.linuxask.com/questions/sshmenu-ssh-connections-manager-for-gnome'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/how-to-pronounce-gnome' rel='bookmark' title='How to pronounce Gnome?'>How to pronounce Gnome?</a></li>
<li><a href='http://www.linuxask.com/questions/set-the-maximum-allowed-number-of-connections-in-mysql' rel='bookmark' title='Set the maximum allowed number of connections in MySQL'>Set the maximum allowed number of connections in MySQL</a></li>
<li><a href='http://www.linuxask.com/questions/install-the-node-package-manager-npm' rel='bookmark' title='Install the node package manager (npm)'>Install the node package manager (npm)</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>SSHMenu: SSH connections manager for GNOME </p>
<p><strong>Answer:</strong></p>
<p><strong>SSHMenu </strong>is a GNOME panel applet* that keeps all your regular SSH connections within a single mouse click.</p>
<p><img src='http://sshmenu.sourceforge.net/images/sshmenu_screenshot.png' /></p>
<p>Highly recommended if you need to manage a lot of SSH sessions.</p>
<p>Official homepage: <a href='http://sshmenu.sourceforge.net/'>http://sshmenu.sourceforge.net/</a></p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/how-to-pronounce-gnome' rel='bookmark' title='How to pronounce Gnome?'>How to pronounce Gnome?</a></li>
<li><a href='http://www.linuxask.com/questions/set-the-maximum-allowed-number-of-connections-in-mysql' rel='bookmark' title='Set the maximum allowed number of connections in MySQL'>Set the maximum allowed number of connections in MySQL</a></li>
<li><a href='http://www.linuxask.com/questions/install-the-node-package-manager-npm' rel='bookmark' title='Install the node package manager (npm)'>Install the node package manager (npm)</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/sshmenu-ssh-connections-manager-for-gnome/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Put a profile in AppArmor complain mode</title>
		<link>http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode</link>
		<comments>http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode#comments</comments>
		<pubDate>Thu, 18 Feb 2010 13:53:36 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[Ubuntu]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1357</guid>
		<description><![CDATA[Put a profile in AppArmor complain mode Answer: Some applications, such as the MySQL server, if you changed the default datadir, you might not be able to startup MySQL. To solve the problem, put the MySQL profile in AppArmor complain mode can solve the problem. # sudo aa-complain /usr/sbin/mysqld Then reload AppArmor # sudo invoke-rc.d <a href='http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/disable-apparmor-in-ubuntu' rel='bookmark' title='Disable AppArmor in Ubuntu'>Disable AppArmor in Ubuntu</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-check-the-startup-time-of-a-particular-program' rel='bookmark' title='How to check the startup time of a particular program'>How to check the startup time of a particular program</a></li>
<li><a href='http://www.linuxask.com/questions/enable-perl-strict-mode-to-restrict-unsafe-constructs' rel='bookmark' title='Enable Perl strict mode to restrict unsafe constructs'>Enable Perl strict mode to restrict unsafe constructs</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Put a profile in AppArmor complain mode</p>
<p><strong>Answer:</strong></p>
<p>Some applications, such as the <strong>MySQL </strong>server, if you changed the default <strong>datadir</strong>, you might not be able to startup MySQL.</p>
<p>To solve the problem, put the MySQL profile in AppArmor complain mode can solve the problem.</p>
<p><code># sudo aa-complain /usr/sbin/mysqld </code></p>
<p>Then reload AppArmor</p>
<p><code># sudo invoke-rc.d apparmor reload </code></p>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/disable-apparmor-in-ubuntu' rel='bookmark' title='Disable AppArmor in Ubuntu'>Disable AppArmor in Ubuntu</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-check-the-startup-time-of-a-particular-program' rel='bookmark' title='How to check the startup time of a particular program'>How to check the startup time of a particular program</a></li>
<li><a href='http://www.linuxask.com/questions/enable-perl-strict-mode-to-restrict-unsafe-constructs' rel='bookmark' title='Enable Perl strict mode to restrict unsafe constructs'>Enable Perl strict mode to restrict unsafe constructs</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to check failed login attempt in Ubuntu</title>
		<link>http://www.linuxask.com/questions/how-to-check-failed-login-attempt-in-ubuntu</link>
		<comments>http://www.linuxask.com/questions/how-to-check-failed-login-attempt-in-ubuntu#comments</comments>
		<pubDate>Sun, 31 Jan 2010 06:07:59 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Commands]]></category>
		<category><![CDATA[Debian]]></category>
		<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1078</guid>
		<description><![CDATA[How to check failed login attempt in Ubuntu Answer: Every login attempts are logged in the file /var/log/auth.log in Ubuntu. To check failed login attempt(s), E.g. # grep 'Failed password' /var/log/auth.log Jan 31 14:00:27 localhost sshd[16141]: Failed password... Jan 31 14:00:46 localhost sshd[16141]: Failed password... Jan 31 14:00:49 localhost sshd[16141]: Failed password... Related posts: How <a href='http://www.linuxask.com/questions/how-to-check-failed-login-attempt-in-ubuntu'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/how-to-check-which-mime-types-are-supported-by-your-debianubuntu' rel='bookmark' title='How to check which mime types are supported by your Debian/Ubuntu'>How to check which mime types are supported by your Debian/Ubuntu</a></li>
<li><a href='http://www.linuxask.com/questions/check-debian-version-information' rel='bookmark' title='Check Debian version information'>Check Debian version information</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-change-the-login-shell' rel='bookmark' title='How to change the login shell?'>How to change the login shell?</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>How to check failed login attempt in Ubuntu</p>
<p><strong>Answer:</strong></p>
<p>Every login attempts are logged in the file <strong>/var/log/auth.log</strong> in Ubuntu.</p>
<p>To check failed login attempt(s), </p>
<p>E.g.</p>
<pre><code># grep 'Failed password' /var/log/auth.log

Jan 31 14:00:27 localhost sshd[16141]: Failed password...
Jan 31 14:00:46 localhost sshd[16141]: Failed password...
Jan 31 14:00:49 localhost sshd[16141]: Failed password...
</code></pre>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/how-to-check-which-mime-types-are-supported-by-your-debianubuntu' rel='bookmark' title='How to check which mime types are supported by your Debian/Ubuntu'>How to check which mime types are supported by your Debian/Ubuntu</a></li>
<li><a href='http://www.linuxask.com/questions/check-debian-version-information' rel='bookmark' title='Check Debian version information'>Check Debian version information</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-change-the-login-shell' rel='bookmark' title='How to change the login shell?'>How to change the login shell?</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/how-to-check-failed-login-attempt-in-ubuntu/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Disable AppArmor in Ubuntu</title>
		<link>http://www.linuxask.com/questions/disable-apparmor-in-ubuntu</link>
		<comments>http://www.linuxask.com/questions/disable-apparmor-in-ubuntu#comments</comments>
		<pubDate>Mon, 18 Jan 2010 13:53:59 +0000</pubDate>
		<dc:creator>Linux Ask!</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.linuxask.com/?p=1359</guid>
		<description><![CDATA[Disable AppArmor in Ubuntu Answer: A lot of people don't like AppArmor and think it is too annoying, just like the SELinux, people sometimes want to disable it. To do so: # sudo invoke-rc.d apparmor stop # sudo update-rc.d -f apparmor remove Related posts: Put a profile in AppArmor complain mode How to disable a <a href='http://www.linuxask.com/questions/disable-apparmor-in-ubuntu'>[...]</a>
Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode' rel='bookmark' title='Put a profile in AppArmor complain mode'>Put a profile in AppArmor complain mode</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-disable-a-service-from-startup-in-ubuntu' rel='bookmark' title='How to disable a service from startup in Ubuntu?'>How to disable a service from startup in Ubuntu?</a></li>
<li><a href='http://www.linuxask.com/questions/disable-a-service-in-ubuntu-using-upstart' rel='bookmark' title='Disable a service in Ubuntu using upstart'>Disable a service in Ubuntu using upstart</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Disable AppArmor in Ubuntu</p>
<p><strong>Answer:</strong></p>
<p>A lot of people don't like <strong>AppArmor </strong>and think it is too annoying, just like the <a href="http://www.linuxask.com/questions/how-to-turn-off-selinux">SELinux</a>, people sometimes want to disable it.</p>
<p>To do so:</p>
<pre><code># sudo invoke-rc.d apparmor stop
# sudo update-rc.d -f apparmor remove
</code></pre>
<p>Related posts:<ol>
<li><a href='http://www.linuxask.com/questions/put-a-profile-in-apparmor-complain-mode' rel='bookmark' title='Put a profile in AppArmor complain mode'>Put a profile in AppArmor complain mode</a></li>
<li><a href='http://www.linuxask.com/questions/how-to-disable-a-service-from-startup-in-ubuntu' rel='bookmark' title='How to disable a service from startup in Ubuntu?'>How to disable a service from startup in Ubuntu?</a></li>
<li><a href='http://www.linuxask.com/questions/disable-a-service-in-ubuntu-using-upstart' rel='bookmark' title='Disable a service in Ubuntu using upstart'>Disable a service in Ubuntu using upstart</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://www.linuxask.com/questions/disable-apparmor-in-ubuntu/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

