I've recently performed some analysis on a phpmyadmin-related vulnerability that downloads a bot onto an unsuspecting machine. I won't go into details, but sufficient to say that the bot masquerades as a "crond" process - looking at a normal process listing it is able to hide inconspicuously.

 

(I've witnessed this behaviour before, when the bot tried to masquerade as a httpd process - but was running /usr/local/bin/httpd rather than /usr/sbin/httpd so was more quickly spotted.)

 

On my servers, there should be only one crond process, root-owned. This bot tries to run under the apache account (httpd) or a normal user account for those that use suPHP. I wouldn't advise people to stop any crond process without properly analysing what those processes do, but a combination of "lsof -p PID" and "netstat -apn" ought to uncover any nefarious activity.

 

Just be warned! Thought I'd give people a heads-up here.

After recently updating to CentOS 5.6 I came across the problem that my evolution wouldn't start up anymore.

I went an searched and found out that more people are having the same problem as me. The problem is that

the latest version of glibc breaks evolution.

 

here's the bugreport

 

here's the topic of how to fix the problem

 

It's recommended that you do as post #3 says. Don't upgrade to 5.6. Do the following first:

 

add: exclude=glibc*2.5-58.el5_6.2 nscd*2.5-58.el5_6.2 xorg-x11-server-utils-7.1-5.el5_6.1 to /etc/yum.conf

 

then you can update and evolution works. If you have already updated you need to downgrade first but it's all in the topic :)

I am able to install virtualbox from the website. I am able to make a virtual machine but when I try and start it up I get an error:

 

Kernel driver not installed (rc=-1908)

 

The VirtualBox Linux kernel driver (vboxdrv) is either not loaded or there is a permission problem with /dev/vboxdrv. Please reinstall the kernel module by executing

 

'/etc/init.d/vboxdrv setup'

 

as root. Users of Ubuntu, Fedora or Mandriva should install the DKMS package first. This package keeps track of Linux kernel changes and recompiles the vboxdrv kernel module if necessary.

 

I tried executing the command to reinstall the kernel module but then I still get this error message:

 

[root@localhost maarten]# /etc/init.d/vboxdrv setup

Stopping VirtualBox kernel modules [ OK ]

Uninstalling old VirtualBox DKMS kernel modules [ OK ]

Trying to register the VirtualBox kernel modules using DKMS[FAILED]

(Failed, trying without DKMS)

Recompiling VirtualBox kernel modules [FAILED]

(Look at /var/log/vbox-install.log to find out what went wrong)

 

 

I downloaded the rpm file from the website and I also trie dto do it the way they did it in the centos wiki

 

where they say I should install: yum --enablerepo rpmforge install dkms

 

 

for both I get the same results, have searched a while but seem to figure it out.

I'm buying some new hardware at the end of the month, but I'm not that into keeping updated with what's the best hardware so just wondering what you think of the system I'm buying. I feel like I got a pretty nice system for that amount :)

 

 

https://www.alternate.nl/html/product/Mo...1/382425/?

 

https://www.alternate.nl/html/product/Be...d/391155/?

 

https://www.alternate.nl/html/product/CP...2/368975/?

 

https://www.alternate.nl/html/product/Ge...t/307110/?

 

https://www.alternate.nl/html/product/CP...5/387707/? or https://www.alternate.nl/html/product/CP...5/397107/?

 

 

All of this for about 300 euros :)Don't need hard drives cuz my current ones are fine. I'd like to hear your opinions

Quote:The CentOS project announced CentOS 5.6, which clones the vast majority of features found in Red Hat Enterprise Linux (RHEL) 5.6, including its full embrace of the Ext4 filesystem. Meanwhile, Red Hat will announce a new cloud application-building platform at its Red Hat Summit May 3. 

CentOS 5.6 ships less than a year after the arrival of CentOS 5.5. The Linux distribution is based on Red Hat Enterprise Linux (RHEL) 5.6, which was released in beta in November and shipped in final form in January.

I'm just curious where all the members are from. I'll start:

 

 

I'm from the Netherlands

Hey All,

 

I don't know if any of you remember me. I was here a while ago, and I decided to come back cause I find this forum has more friendly people

and people seem to be more respectfull towards each other here. I've switched over now from dual booting to running only Linux now :)

I'm still busy learning and enjoying it, I hope all of you are still doing good? See you on the forums!

 

Feedmebits

hey guys

 

i have a problem i am new to linux and i want to configure a Dns server for mail and web hosting but i am having an error when i try to start my name server. i have editted my named.conf file this is how it looks like

 

Error

Starting named:

Error in named configuration:

zone aromotorgroup.com/IN: loaded serial 2010052601

zone 1.168.192.in-addr.arpa/IN: loaded serial 2010052601

zone localhost.localdomain/IN: loaded serial 0

zone localhost/IN: loaded serial 0

zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0

zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0

zone 0.in-addr.arpa/IN: loaded serial 0

zone aromotorgroup.com/IN: loading from master file aromotorgroup.com failed: file not found

zone aromotorgroup.com/IN: not loaded due to errors.

external/aromotorgroup.com/IN: file not found

zone 226.99.221.41.in-addr.arpa/IN: loaded serial 2010052601

[FAILED]

 

my named.conf file looks like this

//

// named.conf

//

// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS

// server as a caching only nameserver (as a localhost DNS resolver only).

//

// See /usr/share/doc/bind*/sample/ for example named configuration files.

//

 

options {

#listen-on port 53 { 127.0.0.1; };

#listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { localhost;192.168.1.100/24; };

recursion yes;

 

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside auto;

allow-transfer { localhost; 192.168.1.0/24; };

/* Path to ISC DLV key */

bindkeys-file "/etc/named.iscdlv.key";

};

 

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

view "internal" {

match-clients {

localhost;

192.168.1.0/24;

};

zone "." IN {

type hint;

file "named.ca";

};

zone "aromotorgroup.com" IN {

type master;

file "aromotorgroup.com.lan";

allow-update { none; };

};

zone "1.168.192.in-addr.arpa" IN {

type master;

file "1.168.192.db";

allow-update { none; };

};

include "/etc/named.rfc1912.zones";

};

view "external" {

match-clients {

any;

};

zone "." IN {

type hint;

file "named.ca";

};

zone "aromotorgroup.com" IN {

type master;

file "aromotorgroup.com";

allow-update { none; };

};

zone "226.99.221.41.in-addr.arpa" IN {

 

 

type master;

file "226.99.221.41.db";

allow-update { none; };

};

};

and my zone file looks like this

 

$TTL 86400

@ IN SOA localhost.aromotorgroup.com. root.aromotorgroup.com. (

2004042801 ; Serial

2H ; Refresh

2H ; Retry

1H ; Expire

1D) ; Min TTL

 

NS localhost.aromotorgroup.com.

NS ns.domain.com.

 

aromotorgroup.com. MX 5 mail.jyrules.com.

aromotorgroup.com. MX 15 pvr.jyrules.com.

 

aromotorgroup.com. A 41.221.99.226

 

localhost A 127.0.0.1

 

www CNAME aromotorgroup.com.

ftp CNAME aromotorgroup.com.

mail CNAME aromotorgroup.com.

 

pvr IN A 226.99.221.41

 

i hope i will be helped

 

 

Thanks

Hi all..

 

I am a new linux user but an old windows user... (I think most people are)

 

I am taking a class in Linux Admin... and hope to learn a LOT with fedora..

 

if you have any questions for me...

my e-mail is:

 

[redacted]@gmail.com

 

see you all in the forums