Re: cisco ise
by Patrick O'Callaghan
On Tue, 2020-04-28 at 16:45 +0000, david richyad wrote:
> cisco ise helps safeguard your business. It lets you control access throughout your network, see the user and device details, and stop/contain any threats. You can also use it to enforce security policies throughout your network. As a result, it helps prevent any technical issues and strengthens your cybersecurity measures. In short, you can manage your network security with more ease. Everything can be handled in one place, as opposed to needing multiple different applications open at once.
>
> https://www.fieldengineer.com/blogs/cisco-ise-deployment-guide
Does this have anything to do with Fedora? Advertising is not
acceptable on this list.
poc
1 week, 3 days
SATA optical drives
by David Fletcher
I'm currently running FC5, will probably upgrade to F7 in a couple of months.
Unfortunately my CD/DVD rewriter appears to have died, before it's
even seen a dual layer disk :'(
SATA hard drives run without problems for me, but now that SATA
optical drives are starting to appear in the shops, would it be OK to
buy one of these and get rid of another wide ribbon cable?
Is anybody already running them with Fedora?
Thanks for any advice/experiences.
Dave F
1 week, 3 days
Shift+PrintScreen gone with F36?
by Frederic Muller
Hi!
Something I use almost daily and.. nothing happens now. Is there a
replacement shortcut or a way to enable it back?
Thank you.
Fred
3 months, 1 week
Apache and umask for document root
by Alex
Hi,
I've set up a virtual host for a joomla website and having some
permissions problems. I've seen numerous configurations online about
how to set umask for the apache user, but none have worked, including
creating a systemd file
(/etc/systemd/system/multi-user.target.wants/httpd.service) with the
following:
[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
[Service]
Type=notify
Environment=LANG=C
Umask=0006
ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
ExecReload=/usr/sbin/httpd $OPTIONS -k graceful
# Send SIGWINCH for graceful stop
KillSignal=SIGWINCH
KillMode=mixed
PrivateTmp=true
[Install]
WantedBy=multi-user.target
The problem is that the files are owned by the joomla user, but also
need to have access (both read and write) to be able to modify some
files within the document root.
Does anyone have any suggestions on how to set umask for the apache user?
I'm also interested in recommended permissions settings for the joomla
document root.
Thanks,
Alex
10 months
fully updated F36 Dell XPS 13 no longer comes back from hibernate
(post Thursday updates)
by Ranjan Maitra
Dear friends,
I have a fully updated F36 Dell XPS 13 that has been updated nightly (and upgraded when appropriate) using dnf on a cron job for the past few years. Sadly, after last Thursday's updates, the machine goes down fine (with the usual systemctl hibernate), but does not come back up. I am a little confused what changed last Thursday, but I was wondering if anyone had any suggestions as to how I may diagnose and fix this problem.
Many thanks and best wishes,
Ranjan
10 months
Wifi not Started at Boot and Networkmanager Wifi Last Used Stats
Wrong
by Stephen Morris
Hi,
I booted into Fedora this morning and had no network available
because wifi had not been started. Dmesg showed the following message:
iwlwifi: probe of 0000:05:00.0 failed with error -110
There is not an issue with the wifi router as my wife was using the
internet on her laptop at the time.
Also, when I looked at the wifi definition it said the wifi was
last used 3 hours ago, but it has been over 9 hours since I shutdown my
pc and that was from Windows, so where is networkmanager (assuming
Fedora is still using networkmanager) getting its information from? I am
using KDE for my desktop.
regards,
Steve
10 months, 2 weeks
F36: removing systemd-resolved breaks chrony
by Sam Varshavchik
It seems that uninstalling systemd-resolved and repointing /etc/resolv.conf
ends up breaking chrony:
type=AVC msg=audit(1653741361.179:318): avc: denied { getattr } for
pid=856 comm="chronyd" path="/run/NetworkManager/no-stub-resolv.conf"
dev="tmpfs" ino=1525 scontext=system_u:system_r:chronyd_t:s0
tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=file
permissive=0
This is spamming me every minute, now.
Bug 2091275
10 months, 2 weeks
System is locking up a lot
by Robert Moskowitz
Since updates Saturday night I have been having hard lock ups. It looks
like Firefox is the trigger.
Lenovo X140e notebook
F35 current with all updates as of Saturday night.
Xfce desktop
It was really bad at first. I finally managed to kill Firefox auto load
pages by in a non-graphics session, watching what top was reporting
going on in the graphics session and killing Firefox.
Then starting Firefox and closing all my windows as they open. Finally
got it to start up with nothing to open. That was this morning. Things
seemed to be working OK until now when I got to my Hilton hotel for the
night and going through their miserable portal that FIrefox would not
accept their cert, and then it locked again.
Just booted. Updated again and only got added:
Upgraded:
alsa-sof-firmware-2.1.1-1.fc35.noarch
mariadb-connector-c-3.2.7-1.fc35.x86_64
mariadb-connector-c-config-3.2.7-1.fc35.noarch
pipewire-0.3.52-4.fc35.x86_64
pipewire-alsa-0.3.52-4.fc35.x86_64
pipewire-gstreamer-0.3.52-4.fc35.x86_64
pipewire-jack-audio-connection-kit-0.3.52-4.fc35.x86_64
pipewire-libs-0.3.52-4.fc35.x86_64
pipewire-pulseaudio-0.3.52-4.fc35.x86_64
pipewire-utils-0.3.52-4.fc35.x86_64
Skipped:
python3-reportlab-3.6.10-1.fc35.x86_64
I can't tell where, in /var/log/messages the system locked and then I
rebooted. I did not note the times closely.
Anyone hear anything like this? So far can't find anything in bugs.
10 months, 3 weeks
[FC8] ssh and CAC card???
by Todd Denniston
From what I understood, the change to openssh listed in:
rpm -q --changelog openssh |less
as:
"* Wed Jun 20 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.5p1-7
- experimental NSS keys support
- correctly setup context when empty level requested (#234951)
"
was supposed to allow the Common Access Card (CAC) to work with the shipped
Fedora 8 ssh.
As per NSS usual, everything is undocumented, i.e., `ssh-add --help` does not
help at all, and `man ssh-add` points to `ssh-add -s reader`
# ssh-add -s 0
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 0
# ssh-add -s 1
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 1
So does anyone know how to use the possible functionality, or are we reduced
to reading the source?
--
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
10 months, 3 weeks
Fedora 36 XFCE
by c. marlow
Hi,
Fresh install of Fedora 36 XFCE SPIN.
I can walk away from my computer and come back after the screen blanks
off and move my mouse and the lock screen will say:
"YOUR CAPSLOCK IS ON" on the screen locker..... But I never use the CL
( Caps Lock)
What could be randomly activating the caps lock when I move the mouse?
Is it Fedora doing it?
The computer does not power down and go into standby. The tower is
always running.
Dell Optiplex980.
Logitech wireless keyboard K520
Thanks,
Chris
11 months