Sun Nov 24 15:52:59 2024
EVENTS
 FREE
SOFTWARE
INSTITUTE

POLITICS
JOBS
MEMBERS'
CORNER

MAILING
LIST

NYLXS Mailing Lists and Archives
NYLXS Members have a lot to say and share but we don't keep many secrets. Join the Hangout Mailing List and say your peice.

DATE 2022-05-01

HANGOUT

2024-11-24 | 2024-10-24 | 2024-09-24 | 2024-08-24 | 2024-07-24 | 2024-06-24 | 2024-05-24 | 2024-04-24 | 2024-03-24 | 2024-02-24 | 2024-01-24 | 2023-12-24 | 2023-11-24 | 2023-10-24 | 2023-09-24 | 2023-08-24 | 2023-07-24 | 2023-06-24 | 2023-05-24 | 2023-04-24 | 2023-03-24 | 2023-02-24 | 2023-01-24 | 2022-12-24 | 2022-11-24 | 2022-10-24 | 2022-09-24 | 2022-08-24 | 2022-07-24 | 2022-06-24 | 2022-05-24 | 2022-04-24 | 2022-03-24 | 2022-02-24 | 2022-01-24 | 2021-12-24 | 2021-11-24 | 2021-10-24 | 2021-09-24 | 2021-08-24 | 2021-07-24 | 2021-06-24 | 2021-05-24 | 2021-04-24 | 2021-03-24 | 2021-02-24 | 2021-01-24 | 2020-12-24 | 2020-11-24 | 2020-10-24 | 2020-09-24 | 2020-08-24 | 2020-07-24 | 2020-06-24 | 2020-05-24 | 2020-04-24 | 2020-03-24 | 2020-02-24 | 2020-01-24 | 2019-12-24 | 2019-11-24 | 2019-10-24 | 2019-09-24 | 2019-08-24 | 2019-07-24 | 2019-06-24 | 2019-05-24 | 2019-04-24 | 2019-03-24 | 2019-02-24 | 2019-01-24 | 2018-12-24 | 2018-11-24 | 2018-10-24 | 2018-09-24 | 2018-08-24 | 2018-07-24 | 2018-06-24 | 2018-05-24 | 2018-04-24 | 2018-03-24 | 2018-02-24 | 2018-01-24 | 2017-12-24 | 2017-11-24 | 2017-10-24 | 2017-09-24 | 2017-08-24 | 2017-07-24 | 2017-06-24 | 2017-05-24 | 2017-04-24 | 2017-03-24 | 2017-02-24 | 2017-01-24 | 2016-12-24 | 2016-11-24 | 2016-10-24 | 2016-09-24 | 2016-08-24 | 2016-07-24 | 2016-06-24 | 2016-05-24 | 2016-04-24 | 2016-03-24 | 2016-02-24 | 2016-01-24 | 2015-12-24 | 2015-11-24 | 2015-10-24 | 2015-09-24 | 2015-08-24 | 2015-07-24 | 2015-06-24 | 2015-05-24 | 2015-04-24 | 2015-03-24 | 2015-02-24 | 2015-01-24 | 2014-12-24 | 2014-11-24 | 2014-10-24 | 2014-09-24 | 2014-08-24 | 2014-07-24 | 2014-06-24 | 2014-05-24 | 2014-04-24 | 2014-03-24 | 2014-02-24 | 2014-01-24 | 2013-12-24 | 2013-11-24 | 2013-10-24 | 2013-09-24 | 2013-08-24 | 2013-07-24 | 2013-06-24 | 2013-05-24 | 2013-04-24 | 2013-03-24 | 2013-02-24 | 2013-01-24 | 2012-12-24 | 2012-11-24 | 2012-10-24 | 2012-09-24 | 2012-08-24 | 2012-07-24 | 2012-06-24 | 2012-05-24 | 2012-04-24 | 2012-03-24 | 2012-02-24 | 2012-01-24 | 2011-12-24 | 2011-11-24 | 2011-10-24 | 2011-09-24 | 2011-08-24 | 2011-07-24 | 2011-06-24 | 2011-05-24 | 2011-04-24 | 2011-03-24 | 2011-02-24 | 2011-01-24 | 2010-12-24 | 2010-11-24 | 2010-10-24 | 2010-09-24 | 2010-08-24 | 2010-07-24 | 2010-06-24 | 2010-05-24 | 2010-04-24 | 2010-03-24 | 2010-02-24 | 2010-01-24 | 2009-12-24 | 2009-11-24 | 2009-10-24 | 2009-09-24 | 2009-08-24 | 2009-07-24 | 2009-06-24 | 2009-05-24 | 2009-04-24 | 2009-03-24 | 2009-02-24 | 2009-01-24 | 2008-12-24 | 2008-11-24 | 2008-10-24 | 2008-09-24 | 2008-08-24 | 2008-07-24 | 2008-06-24 | 2008-05-24 | 2008-04-24 | 2008-03-24 | 2008-02-24 | 2008-01-24 | 2007-12-24 | 2007-11-24 | 2007-10-24 | 2007-09-24 | 2007-08-24 | 2007-07-24 | 2007-06-24 | 2007-05-24 | 2007-04-24 | 2007-03-24 | 2007-02-24 | 2007-01-24 | 2006-12-24 | 2006-11-24 | 2006-10-24 | 2006-09-24 | 2006-08-24 | 2006-07-24 | 2006-06-24 | 2006-05-24 | 2006-04-24 | 2006-03-24 | 2006-02-24 | 2006-01-24 | 2005-12-24 | 2005-11-24 | 2005-10-24 | 2005-09-24 | 2005-08-24 | 2005-07-24 | 2005-06-24 | 2005-05-24 | 2005-04-24 | 2005-03-24 | 2005-02-24 | 2005-01-24 | 2004-12-24 | 2004-11-24 | 2004-10-24 | 2004-09-24 | 2004-08-24 | 2004-07-24 | 2004-06-24 | 2004-05-24 | 2004-04-24 | 2004-03-24 | 2004-02-24 | 2004-01-24 | 2003-12-24 | 2003-11-24 | 2003-10-24 | 2003-09-24 | 2003-08-24 | 2003-07-24 | 2003-06-24 | 2003-05-24 | 2003-04-24 | 2003-03-24 | 2003-02-24 | 2003-01-24 | 2002-12-24 | 2002-11-24 | 2002-10-24 | 2002-09-24 | 2002-08-24 | 2002-07-24 | 2002-06-24 | 2002-05-24 | 2002-04-24 | 2002-03-24 | 2002-02-24 | 2002-01-24 | 2001-12-24 | 2001-11-24 | 2001-10-24 | 2001-09-24 | 2001-08-24 | 2001-07-24 | 2001-06-24 | 2001-05-24 | 2001-04-24 | 2001-03-24 | 2001-02-24 | 2001-01-24 | 2000-12-24 | 2000-11-24 | 2000-10-24 | 2000-09-24 | 2000-08-24 | 2000-07-24 | 2000-06-24 | 2000-05-24 | 2000-04-24 | 2000-03-24 | 2000-02-24 | 2000-01-24 | 1999-12-24

Key: Value:

Key: Value:

MESSAGE
DATE 2022-05-04
FROM From: "nixCraft: Linux Tips, Hacks, Tutorials,
SUBJECT Subject: [Hangout - NYLXS] nixCraft Linux / UNIX Newsletter
From hangout-bounces-at-nylxs.com Wed May 4 23:07:55 2022
Return-Path:
X-Original-To: archive-at-mrbrklyn.com
Delivered-To: archive-at-mrbrklyn.com
Received: from www2.mrbrklyn.com (www2.mrbrklyn.com [96.57.23.82])
by mrbrklyn.com (Postfix) with ESMTP id 53EE7164021;
Wed, 4 May 2022 23:07:49 -0400 (EDT)
X-Original-To: hangout-at-www2.mrbrklyn.com
Delivered-To: hangout-at-www2.mrbrklyn.com
Received: by mrbrklyn.com (Postfix, from userid 1000)
id 663BD16401B; Wed, 4 May 2022 23:07:42 -0400 (EDT)
Resent-From: Ruben Safir
Resent-Date: Wed, 4 May 2022 23:07:42 -0400
Resent-Message-ID: <20220505030742.GA24594-at-www2.mrbrklyn.com>
Resent-To: hangout-at-mrbrklyn.com
X-Original-To: ruben-at-mrbrklyn.com
Delivered-To: ruben-at-mrbrklyn.com
Received: from mail-io1-f72.google.com (mail-io1-f72.google.com
[209.85.166.72])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (not verified))
by mrbrklyn.com (Postfix) with ESMTPS id DF176164017
for ; Wed, 4 May 2022 17:05:28 -0400 (EDT)
Received: by mail-io1-f72.google.com with SMTP id
m205-20020a6b3fd6000000b006586ca958d2so1730133ioa.22
for ; Wed, 04 May 2022 14:05:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112;
h=mime-version:reply-to:sender:precedence:list-unsubscribe:message-id
:date:subject:from:to;
bh=+DiMuhBKu8kWQV9daT4cQnBkglwkqZqWLHNKwY/Onvg=;
b=jyH76bKW+GiETV0gFv+qg4b9nrJb8X16slzp5kUNmL/VYa9Crqn4fmqamrWS0Gc1JA
vwwUQCDYr3dPCnM4ej66rglUDlp3+siACgqztiPLVbnQEjrIbVSMgsp5BROkwd/r0KwC
Xxwt46U0q91c29hO5dcjxoQ9qkBag4S0vDxE6J2l9XuS2Whr3tjnl7AXRARi0dAB9BJw
jHA/P8CUSR79fvveKNmJgVmn+gnyTgLyQV+4lbrfvKRZmmmRfiCzKSCR75ngVH9xyz36
tYCS0TVhPNuZ8x+FIPJJtL1uWuygqenVWnMprBmgkf8BWYGMg513GvrUA+aq8nBxMrQ4
Hqvg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:sender:precedence
:list-unsubscribe:message-id:date:subject:from:to;
bh=+DiMuhBKu8kWQV9daT4cQnBkglwkqZqWLHNKwY/Onvg=;
b=hfbsNY+EaO/geSnORKcTqNf5PVPD/xkzCXQcVCya36qxRiZ+PaxDct9/K3juemVjDb
KGibzZHNhaq5LMCNIin4mViAIQfWPb+/9+cWH0oZcvdtK8llZRjCXQQ8TvYQL68YdOcF
GKcEcWKr2DB6onwYA+6wpYKT+VsoP5Mxq072LKViaB1QLvZnNfILKS9UPOhasK8qMYTy
qOUIUEjshvszh1kTEldYh7fzSPhGvs3TNTcaS+2HJc9+A7bAqhlSNRSOx42f0IJ9SBWS
xX0b2QnU2QJDxkcWZ6Y8ja5yyGyWpZjqT6EERuhrpvSSho1axSBanBrnFipAfe2AU0kE
sHnw==
X-Gm-Message-State: AOAM530q16mNQ6mvz/9qs/vO4ksr8q7o2LGPQXBtT3b5V8NomgfaY5P5
FboEZ4GWiXjauDX/J/1aKjraprwGPrGXOLGJu0KUcXg=
MIME-Version: 1.0
X-Received: by 2002:a92:b305:0:b0:2c8:267b:7e25 with SMTP id
p5-20020a92b305000000b002c8267b7e25mt9572813ilh.312.1651698327560; Wed, 04
May 2022 14:05:27 -0700 (PDT)
Precedence: bulk
Message-ID: <0000000000001724f705de35fc1b-at-google.com>
Date: Wed, 04 May 2022 21:05:27 +0000
From: "nixCraft: Linux Tips, Hacks, Tutorials,
And Ideas In Blog Format (RSS/FEED)"
To: ruben-at-mrbrklyn.com
X-UID: 92600
Subject: [Hangout - NYLXS] nixCraft Linux / UNIX Newsletter
X-BeenThere: hangout-at-nylxs.com
X-Mailman-Version: 2.1.30rc1
List-Id: NYLXS Tech Talk and Politics
List-Unsubscribe: ,

List-Archive:
List-Post:
List-Help:
List-Subscribe: ,

Reply-To: "nixCraft: Linux Tips, Hacks, Tutorials,
And Ideas In Blog Format \(RSS/FEED\)"
Content-Type: multipart/mixed; boundary="===============0381983169=="
Errors-To: hangout-bounces-at-nylxs.com
Sender: "Hangout"

--===============0381983169==
Content-Type: multipart/alternative; boundary="0000000000001bd4db05de35fc35"

--0000000000001bd4db05de35fc35
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED)

///////////////////////////////////////////
Understanding the /etc/shells file

Posted: 04 May 2022 01:31 PM PDT
https://bash.cyberciti.biz/guide//etc/shells


{Updated} Did you know? Many Linux system services and login under Linux or
Unix OS consult /etc/shells file. It contains a list of login shells on the
system. Applications use this file to determine whether a shell is valid.
Setting the wrong shell path will deny login.
The post Understanding the /etc/shells file appeared first on nixCraft.

///////////////////////////////////////////
How to make disk image with dd on Linux or Unix

Posted: 04 May 2022 01:26 PM PDT
https://www.cyberciti.biz/faq/unix-linux-dd-create-make-disk-image-commands/


{Updated} How to make disk image with dd on a Linux or Unix for backup and
restore purposes
The post How to make disk image with dd on Linux or Unix appeared first on
nixCraft.

///////////////////////////////////////////
A cautionary tale about locking Linux & FreeBSD user accounts

Posted: 04 May 2022 12:52 PM PDT
https://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/




Like every other solo developer and sysadmin, I do stuff using ssh. Some
stuff is automated using scripts, and others require ssh login. For
example, one of my scripts logs into my Linux and FreeBSD server using
public ssh keys and does a particular type of work for me. I have a
dedicated user account for that purpose called autovivek on Raspberry PI 4
for Ansible and custom script automation. Here is how it works:

{rpi4:~}$ ssh autovivek-at-192.168.2.17 /path/to/taks1

In other cases, it sends scripts and then executes them on the remote
server named 192.168.2.17. Sounds good, right? So, when I need to make
backups and other tasks, I lock down the autovivek user account on the
server so that it will not modify data on disks. For example, here is how
to lock down a user account:

{linux-server:~}$ sudo usermod -L -e 1 autovivek

## OR ##

{freebsd-server:~}$ sudo pw lock -n autovivek
A cautionary tale about locking Linux and FreeBSD user accounts

However, I soon discovered that a user named autovivek can still log into
the server and make changes despite being locked down on both Linux and
FreeBSD servers.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post A cautionary tale about locking Linux & FreeBSD user accounts
appeared first on nixCraft.

--
You are subscribed to email updates from "nixCraft: Linux Tips, Hacks,
Tutorials, And Ideas In Blog Format (RSS/FEED)."
To stop receiving these emails, you may unsubscribe now:
https://feedburner.google.com/fb/a/mailunsubscribe?k=Mogcj77AGstNQKqpfoHRvb2hluE

Email delivery powered by Google.
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States


--0000000000001bd4db05de35fc35
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">


TF-8">
nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Fo=<BR>rmat (RSS/FEED)



=3D"margin:0 2em;font-family:Arial, Helvetica, sans-serif;line-height:140%;=
font-size:13px;color:#000000;">






ly:Arial, Helvetica, sans-serif;font-weight:normal;text-decoration:none;" h=
ref=3D"https://www.cyberciti.biz/atom/" title=3D"(https://www.cyberciti.biz=
/atom/)"> nixCraft Linux / UNIX Newsletter


biz/atom/">go-200pxh.jpg " alt=3D"Link to nixCraft: Linux Tips, Hacks, Tutorials, And =
Ideas In Blog Format (RSS/FEED)" id=3D"feedimage" style=3D"padding:0 0 10px=
3px;border:0;">
















tica, sans-serif;font-size:18px;" href=3D"https://bash.cyberciti.biz/guide/=
/etc/shells">Understanding the /etc/shells file


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 01:31 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">"0" src=3D"https://bash.cyberciti.biz/uploads/bashwiki/thumb/9/93/Understan=
ding_Linux_and_Unix_-etc-shells_file.png/800px-Understanding_Linux_and_Unix=
_-etc-shells_file.png">
{Updated} Did you know? M=
any Linux system services and login under Linux or Unix OS consult /etc/she=
lls file. It contains a list of login shells on the system. Applications us=
e this file to determine whether a shell is valid. Setting the wrong shell =
path will deny login.
The post de//etc/shells">Understanding the /etc/shells file appeared first on href=3D"https://www.cyberciti.biz/">nixCraft.



tica, sans-serif;font-size:18px;" href=3D"https://www.cyberciti.biz/faq/uni=
x-linux-dd-create-make-disk-image-commands/">How to make disk image with dd=
on Linux or Unix


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 01:26 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">"0" src=3D"https://www.cyberciti.biz/media/new/faq/2016/08/How-to-make-disk=
-image-with-dd-on-Linux-or-Unix-599x450.png">
{Updatedrong>} How to make disk image with dd on a Linux or Unix for backup and res=
tore purposes
The post ux-dd-create-make-disk-image-commands/">How to make disk image with dd on L=
inux or Unix
appeared first on n=
ixCraft
.



tica, sans-serif;font-size:18px;" href=3D"https://www.cyberciti.biz/network=
ing/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">A caution=
ary tale about locking Linux & FreeBSD user accounts


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 12:52 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">
http://www.w3.org/1999/xhtml">

/new/cms/2022/05/A-cautionary-tale-about-locking-Linux-and-FreeBSD-user-acc=
ounts-and-ssh-logins.png">3D"A and FreeBSD user accounts and ssh logins" class=3D"aligncenter size-medium=
wp-image-1962" height=3D"382" src=3D"https://www.cyberciti.biz/media/new/c=
ms/2022/05/A-cautionary-tale-about-locking-Linux-and-FreeBSD-user-accounts-=
and-ssh-logins-599x382.png" width=3D"599">


Like every other solo developer and sysadmi=
n, I do stuff using ssh. Some stuff is automated using scripts, and others =
require ssh login. For example, one of my scripts logs into my Linux and Fr=
eeBSD server using public ssh keys and does a particular type of work for m=
e. I have a dedicated user account for that purpose called autovivek on Ras=
pberry PI 4 for Ansible and custom script automation. Here is how it works:=


ds in a $ sign and is not part of the command for the nonprivileged user.">=
{rpi4:~}$
ssh autovivek-at-192.168.2.17 /path/to/taks1


In other cases, it sends scripts and then executes them on the remote serve=
r named 192.168.2.17. Sounds good, right? So, when I need to make backups a=
nd other tasks, I lock down the autovivek user account on the server so tha=
t it will not modify data on disks. For example, here is how to lock down a=
user account:

ds in a $ sign and is not part of the command for the nonprivileged user.">=
{linux-server:~}$
sudo usermod -L -e 1 autovivek

## OR ##

a $ sign and is not part of the command for the nonprivileged user.">{freeb=
sd-server:~}$
sudo pw lock -n autovivek


A cautionary tale about locking Linux and FreeBSD user accounts


However, I soon discovered that a user named autovivek can still log int=
o the server and make changes despite being locked down on both Linux and F=
reeBSD servers.


Love this? sudo share_on: tweet?url=3Dhttps://www.cyberciti.biz/networking/a-cautionary-tale-about-lo=
cking-linux-freebsd-user-accounts/&text=3DA cautionary tale about locki=
ng Linux & FreeBSD user accounts&via=3Dnixcraft">Twitter
g> - s://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-free=
bsd-user-accounts/">Facebook
- linkedin.com/sharing/share-offsite/?url=3Dhttps://www.cyberciti.biz/network=
ing/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">LinkedIn<=
/a>
- bout locking Linux & FreeBSD user accounts https://www.cyberciti.biz/ne=
tworking/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">What=
sapp
- s://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-free=
bsd-user-accounts/&title=3DA cautionary tale about locking Linux & =
FreeBSD user accounts">Reddit


The post le-about-locking-linux-freebsd-user-accounts/" rel=3D"nofollow">A cautionar=
y tale about locking Linux & FreeBSD user accounts
appeared first o=
n nixCraft.

<=
/div>


-top:4px;margin-top:1.5em;width:100%" xmlns=3D"http://www.w3.org/1999/xhtml=
">





l,Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;">You are subsc=
ribed to email updates from nix=
Craft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED)>.


To stop receiving these emails, you may
https://feedburner.google.com/fb/a/mailunsubscribe?k=3DMogcj77AGstNQKqpfoHR=
vb2hluE">unsubscribe now
.
Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;text-align:right;=
vertical-align:top">Email delivery powered by Google
l,Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;" colspan=3D"2"=
>Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States<=
/td>





--0000000000001bd4db05de35fc35--

--===============0381983169==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout

--===============0381983169==--

--===============0381983169==
Content-Type: multipart/alternative; boundary="0000000000001bd4db05de35fc35"

--0000000000001bd4db05de35fc35
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED)

///////////////////////////////////////////
Understanding the /etc/shells file

Posted: 04 May 2022 01:31 PM PDT
https://bash.cyberciti.biz/guide//etc/shells


{Updated} Did you know? Many Linux system services and login under Linux or
Unix OS consult /etc/shells file. It contains a list of login shells on the
system. Applications use this file to determine whether a shell is valid.
Setting the wrong shell path will deny login.
The post Understanding the /etc/shells file appeared first on nixCraft.

///////////////////////////////////////////
How to make disk image with dd on Linux or Unix

Posted: 04 May 2022 01:26 PM PDT
https://www.cyberciti.biz/faq/unix-linux-dd-create-make-disk-image-commands/


{Updated} How to make disk image with dd on a Linux or Unix for backup and
restore purposes
The post How to make disk image with dd on Linux or Unix appeared first on
nixCraft.

///////////////////////////////////////////
A cautionary tale about locking Linux & FreeBSD user accounts

Posted: 04 May 2022 12:52 PM PDT
https://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/




Like every other solo developer and sysadmin, I do stuff using ssh. Some
stuff is automated using scripts, and others require ssh login. For
example, one of my scripts logs into my Linux and FreeBSD server using
public ssh keys and does a particular type of work for me. I have a
dedicated user account for that purpose called autovivek on Raspberry PI 4
for Ansible and custom script automation. Here is how it works:

{rpi4:~}$ ssh autovivek-at-192.168.2.17 /path/to/taks1

In other cases, it sends scripts and then executes them on the remote
server named 192.168.2.17. Sounds good, right? So, when I need to make
backups and other tasks, I lock down the autovivek user account on the
server so that it will not modify data on disks. For example, here is how
to lock down a user account:

{linux-server:~}$ sudo usermod -L -e 1 autovivek

## OR ##

{freebsd-server:~}$ sudo pw lock -n autovivek
A cautionary tale about locking Linux and FreeBSD user accounts

However, I soon discovered that a user named autovivek can still log into
the server and make changes despite being locked down on both Linux and
FreeBSD servers.

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit

The post A cautionary tale about locking Linux & FreeBSD user accounts
appeared first on nixCraft.

--
You are subscribed to email updates from "nixCraft: Linux Tips, Hacks,
Tutorials, And Ideas In Blog Format (RSS/FEED)."
To stop receiving these emails, you may unsubscribe now:
https://feedburner.google.com/fb/a/mailunsubscribe?k=Mogcj77AGstNQKqpfoHRvb2hluE

Email delivery powered by Google.
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States


--0000000000001bd4db05de35fc35
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">


TF-8">
nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Fo=<BR>rmat (RSS/FEED)



=3D"margin:0 2em;font-family:Arial, Helvetica, sans-serif;line-height:140%;=
font-size:13px;color:#000000;">






ly:Arial, Helvetica, sans-serif;font-weight:normal;text-decoration:none;" h=
ref=3D"https://www.cyberciti.biz/atom/" title=3D"(https://www.cyberciti.biz=
/atom/)"> nixCraft Linux / UNIX Newsletter


biz/atom/">go-200pxh.jpg " alt=3D"Link to nixCraft: Linux Tips, Hacks, Tutorials, And =
Ideas In Blog Format (RSS/FEED)" id=3D"feedimage" style=3D"padding:0 0 10px=
3px;border:0;">
















tica, sans-serif;font-size:18px;" href=3D"https://bash.cyberciti.biz/guide/=
/etc/shells">Understanding the /etc/shells file


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 01:31 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">"0" src=3D"https://bash.cyberciti.biz/uploads/bashwiki/thumb/9/93/Understan=
ding_Linux_and_Unix_-etc-shells_file.png/800px-Understanding_Linux_and_Unix=
_-etc-shells_file.png">
{Updated} Did you know? M=
any Linux system services and login under Linux or Unix OS consult /etc/she=
lls file. It contains a list of login shells on the system. Applications us=
e this file to determine whether a shell is valid. Setting the wrong shell =
path will deny login.
The post de//etc/shells">Understanding the /etc/shells file appeared first on href=3D"https://www.cyberciti.biz/">nixCraft.



tica, sans-serif;font-size:18px;" href=3D"https://www.cyberciti.biz/faq/uni=
x-linux-dd-create-make-disk-image-commands/">How to make disk image with dd=
on Linux or Unix


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 01:26 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">"0" src=3D"https://www.cyberciti.biz/media/new/faq/2016/08/How-to-make-disk=
-image-with-dd-on-Linux-or-Unix-599x450.png">
{Updatedrong>} How to make disk image with dd on a Linux or Unix for backup and res=
tore purposes
The post ux-dd-create-make-disk-image-commands/">How to make disk image with dd on L=
inux or Unix
appeared first on n=
ixCraft
.



tica, sans-serif;font-size:18px;" href=3D"https://www.cyberciti.biz/network=
ing/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">A caution=
ary tale about locking Linux & FreeBSD user accounts


3px 0;font-family:Arial, Helvetica, sans-serif;line-height:140%;font-size:1=
3px;">
Posted: 04 May 2022 12:52 PM PDT


, sans-serif;line-height:140%;font-size:13px;color:#000000;">
http://www.w3.org/1999/xhtml">

/new/cms/2022/05/A-cautionary-tale-about-locking-Linux-and-FreeBSD-user-acc=
ounts-and-ssh-logins.png">3D"A and FreeBSD user accounts and ssh logins" class=3D"aligncenter size-medium=
wp-image-1962" height=3D"382" src=3D"https://www.cyberciti.biz/media/new/c=
ms/2022/05/A-cautionary-tale-about-locking-Linux-and-FreeBSD-user-accounts-=
and-ssh-logins-599x382.png" width=3D"599">


Like every other solo developer and sysadmi=
n, I do stuff using ssh. Some stuff is automated using scripts, and others =
require ssh login. For example, one of my scripts logs into my Linux and Fr=
eeBSD server using public ssh keys and does a particular type of work for m=
e. I have a dedicated user account for that purpose called autovivek on Ras=
pberry PI 4 for Ansible and custom script automation. Here is how it works:=


ds in a $ sign and is not part of the command for the nonprivileged user.">=
{rpi4:~}$
ssh autovivek-at-192.168.2.17 /path/to/taks1


In other cases, it sends scripts and then executes them on the remote serve=
r named 192.168.2.17. Sounds good, right? So, when I need to make backups a=
nd other tasks, I lock down the autovivek user account on the server so tha=
t it will not modify data on disks. For example, here is how to lock down a=
user account:

ds in a $ sign and is not part of the command for the nonprivileged user.">=
{linux-server:~}$
sudo usermod -L -e 1 autovivek

## OR ##

a $ sign and is not part of the command for the nonprivileged user.">{freeb=
sd-server:~}$
sudo pw lock -n autovivek


A cautionary tale about locking Linux and FreeBSD user accounts


However, I soon discovered that a user named autovivek can still log int=
o the server and make changes despite being locked down on both Linux and F=
reeBSD servers.


Love this? sudo share_on: tweet?url=3Dhttps://www.cyberciti.biz/networking/a-cautionary-tale-about-lo=
cking-linux-freebsd-user-accounts/&text=3DA cautionary tale about locki=
ng Linux & FreeBSD user accounts&via=3Dnixcraft">Twitter
g> - s://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-free=
bsd-user-accounts/">Facebook
- linkedin.com/sharing/share-offsite/?url=3Dhttps://www.cyberciti.biz/network=
ing/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">LinkedIn<=
/a>
- bout locking Linux & FreeBSD user accounts https://www.cyberciti.biz/ne=
tworking/a-cautionary-tale-about-locking-linux-freebsd-user-accounts/">What=
sapp
- s://www.cyberciti.biz/networking/a-cautionary-tale-about-locking-linux-free=
bsd-user-accounts/&title=3DA cautionary tale about locking Linux & =
FreeBSD user accounts">Reddit


The post le-about-locking-linux-freebsd-user-accounts/" rel=3D"nofollow">A cautionar=
y tale about locking Linux & FreeBSD user accounts
appeared first o=
n nixCraft.

<=
/div>


-top:4px;margin-top:1.5em;width:100%" xmlns=3D"http://www.w3.org/1999/xhtml=
">





l,Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;">You are subsc=
ribed to email updates from nix=
Craft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED)>.


To stop receiving these emails, you may
https://feedburner.google.com/fb/a/mailunsubscribe?k=3DMogcj77AGstNQKqpfoHR=
vb2hluE">unsubscribe now
.
Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;text-align:right;=
vertical-align:top">Email delivery powered by Google
l,Sans-Serif;font-size:11px;margin:0 6px 1.2em 0;color:#333;" colspan=3D"2"=
>Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States<=
/td>





--0000000000001bd4db05de35fc35--

--===============0381983169==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout

--===============0381983169==--

  1. 2022-05-03 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Colorado Springs
  2. 2022-05-03 From: "Free Software Foundation" <info-at-fsf.org> Subject: [Hangout - NYLXS] Free Software Supporter -- Issue 169, May 2022
  3. 2022-05-04 From: "nixCraft: Linux Tips, Hacks, Tutorials, Subject: [Hangout - NYLXS] nixCraft Linux / UNIX Newsletter
  4. 2022-05-03 Gavin McDonald <gmcdonald-tac-at-apache.org> Subject: [Hangout - NYLXS] [users-at-httpd] REMINDER - Travel Assistance
  5. 2022-05-05 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] bitcoin government overeach
  6. 2022-05-05 From: "Paul Taylor Dance Company [Masked]" <FWD.1h2bjil3ocug-at-opayq.com> Subject: [Hangout - NYLXS] =?utf-8?q?Audition_announcement_for_Paul_Taylo?=
  7. 2022-05-06 Yusif Suleiman <yusifsuleiman-at-hotmail.com> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  8. 2022-05-06 Armand MPASSY-NZOUMBA via Health <health-at-gnu.org> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  9. 2022-05-07 Yusif Suleiman <yusifsuleiman-at-hotmail.com> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  10. 2022-05-07 Gerald Wiese <wiese-at-gnuhealth.org> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  11. 2022-05-06 Yusif Suleiman <yusifsuleiman-at-hotmail.com> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  12. 2022-05-06 Yusif Suleiman <yusifsuleiman-at-hotmail.com> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  13. 2022-05-06 Axel Braun <axel.braun-at-gnuhealth.org> Re: [Hangout - NYLXS] [Health] Restore data to new installation
  14. 2022-05-13 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Amazing chrome extension with OCR built in --
  15. 2022-05-13 From: "Free Software Foundation" <info-at-fsf.org> Subject: [Hangout - NYLXS] FSF board shares next steps in board nomination
  16. 2022-05-14 From: "nixCraft: Linux Tips, Hacks, Tutorials, Subject: [Hangout - NYLXS] nixCraft Linux / UNIX Newsletter
  17. 2022-05-24 NYOUG <execdir-at-nyoug.org> Subject: [Hangout - NYLXS] Upcoming Events for Oracle Professionals
  18. 2022-05-29 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: We Are Live!!
  19. 2022-05-30 From: "Professional Career Services" <nj-at-nj.pcsjobs.org> Subject: [Hangout - NYLXS] Important request from Agudah: Education petition
  20. 2022-05-12 Makoto Nozaki <makoto.nozaki-at-gmail.com> Subject: [Hangout - NYLXS] Perl Conference back in person

NYLXS are Do'ers and the first step of Doing is Joining! Join NYLXS and make a difference in your community today!