Linux - General - Revision history

NickPGSmith at 08:54, 22 October 2025

2025-10-22T08:54:38Z

← Older revision		Revision as of 08:54, 22 October 2025
Line 17:		Line 17:
	* /etc/cockpit/ws-certs.d/0-self-signed.key		* /etc/cockpit/ws-certs.d/0-self-signed.key
	* /etc/cockpit/ws-certs.d/0-self-signed.cert		* /etc/cockpit/ws-certs.d/0-self-signed.cert

			== GPG ==

			gpg -o out.txt -d in.asc

	== Gnome ==		== Gnome ==

2025-05-12T18:47:56Z

SELinux

← Older revision		Revision as of 18:47, 12 May 2025
Line 108:		Line 108:
	These are not persistent over reboots; see file:		These are not persistent over reboots; see file:
	* /etc/selinux/config		* /etc/selinux/config

			Individual domains can be made permissive in enforcing modem eg:
			semanage permissive -a httpd_t

	Show all boolean flags (state and default):		Show all boolean flags (state and default):

2025-05-12T18:42:28Z

SELinux

← Older revision		Revision as of 18:42, 12 May 2025
Line 89:		Line 89:
	See [https://docs.fedoraproject.org/en-US/quick-docs/selinux-getting-started/ here] for more details.		See [https://docs.fedoraproject.org/en-US/quick-docs/selinux-getting-started/ here] for more details.

			* SELinux labels (contexts) abstract away the details, eg a changeable exact path to a file.
			** Have fields: user, role, type, security level
			* A policy uses these contexts to define how processes can inteact (deny by default).
			* Modes:
			** Disabled
			** Permissive: applies lables and deny messages, but does not actually deny: useful for development
			** Enforcing: normal mode.

			Show current mode:
	getenforce		getenforce

			Enter permissive mode:
			setenforce 0

			Enter enforcing mode:
	setenforce 1		setenforce 1
	~~setenforce Enforcing~~
	~~sestatus~~		These are not persistent over reboots; see file:
			* /etc/selinux/config

	Show all boolean flags (state and default):		Show all boolean flags (state and default):

2025-05-12T18:25:35Z

SELinux

← Older revision		Revision as of 18:25, 12 May 2025
Line 86:		Line 86:

	== SELinux ==		== SELinux ==

			See [https://docs.fedoraproject.org/en-US/quick-docs/selinux-getting-started/ here] for more details.

	getenforce		getenforce

2025-04-19T09:00:34Z

Cockpit

← Older revision		Revision as of 09:00, 19 April 2025
Line 1:		Line 1:
			== Chrome ==

			wget https://dl.google.com/linux/linux_signing_key.pub
			sudo rpm -e "gpg-pubkey-7fac5991-" "gpg-pubkey-d38b4796-"
			sudo rpm --import linux_signing_key.pub

	== Cockpit ==		== Cockpit ==

2024-06-17T20:30:54Z

Service Definitions

← Older revision		Revision as of 20:30, 17 June 2024
Line 179:		Line 179:

	Note that systemd does not use a shell to exec so a shebang does not work: run explicity under sh, python3, etc.		Note that systemd does not use a shell to exec so a shebang does not work: run explicity under sh, python3, etc.

			For services intended to be started by systemctl, and entry such as:
			[Install]
			WantedBy=multi-user.target
			is require, or WantedBy=, RequiredBy, etc.

	=== Timers ===		=== Timers ===

2024-06-11T17:25:23Z

SELinux

← Older revision		Revision as of 17:25, 11 June 2024
Line 73:		Line 73:
	* dom0_mem=max:1024M dom0_max_vcpus=1		* dom0_mem=max:1024M dom0_max_vcpus=1
	grub2-mkconfig -o /boot/grub2/grub.cfg		grub2-mkconfig -o /boot/grub2/grub.cfg

			== RPM ==

			Extract files from an RPM without installing:
			rpm2cpio ./something.rpm \| cpio -idmv

	== SELinux ==		== SELinux ==

2024-05-29T19:43:30Z

← Older revision		Revision as of 19:43, 29 May 2024
Line 30:		Line 30:

	To disable, set to 0.		To disable, set to 0.

			== MOTD ==

			Files in /etc/motd.d, create text with banner or figlet.

	== OneDrive ==		== OneDrive ==

2024-05-26T19:55:54Z

Cockpit

← Older revision		Revision as of 19:55, 26 May 2024
Line 2:		Line 2:

	dnf install cockpit		dnf install cockpit
	systemctl enable ~~--now~~ cockpit.socket		systemctl enable cockpit.socket
	systemctl start ~~--now~~ cockpit.socket		systemctl start cockpit.socket
	firewall-cmd --permanent --add-service=cockpit		firewall-cmd --permanent --add-service=cockpit

			Access via https://host.example.conm:9090

			Default self-signed key and cert:
			* /etc/cockpit/ws-certs.d/0-self-signed.key
			* /etc/cockpit/ws-certs.d/0-self-signed.cert

	== Gnome ==		== Gnome ==

2024-05-22T20:35:48Z

SELinux

← Older revision		Revision as of 20:35, 22 May 2024
Line 81:		Line 81:
	or with semanage tool:		or with semanage tool:
	semanage boolean --modify --on httpd_enable_homedirs		semanage boolean --modify --on httpd_enable_homedirs

			Change context of the public directory and its contents:
			chcon -R -t httpd_user_content_t public_html

			Change context of writable directory:
			semanage fcontext -a -t httpd_sys_rw_content_t '/home/jblogs/public_html/writable'

			Restore to default context:
			restorecon -v '/home/jblogs/public_html'

	Interrogate SE policy:		Interrogate SE policy: