A new kernel update just went out yesterday or the day before (not
sure), but it fixes the vmsplice proof-of-concept exploit that was
released two days ago. The exploit would allow someone at a non-root
console to elevate themself to root without using sudo or su or knowing
any passwords at all.

Check out Mackenzie’s site: Ubuntu Linux Tips & Tricks

Technorati Tags: update, vulnerability

This guide assumes that you have an SSH server setup on your “server” and an SSH client set up on your client. (sudo apt-get install openssh-server & sudo apt-get install openssh-client respectively)

First from the client run the following command logged in as your normal user account:

ssh-keygen

(Leave the password blank if you do not want to supply it on login, but remember to guard the created cert with your life as it opens the door to anyone that finds it…)

This creates id_rsa and id_rsa.pub in the ~/.ssh directory.

Next we want to upload the pub file to the remote server/host that you want to connect to:

scp ~/.ssh/id_rsa.pub remoteuser@remotehost:~/

Now that it is uploaded we have to authorize it by connecting to the remote machine (ssh user@remotehost) and running the following on the remote host:

cat id_rsa.pub >> ~/.ssh/authorized_keys

and then:

rm id_rsa.pub

to delete the uploaded file.

If the remote host does not have key authentication enabled (should be by default), ssh the machine and edit the config file like such:

nano /etc/ssh/sshd_config

and add/change the following to options as such:

RSAAuthentication yes
PubkeyAuthentication yes

then reload the config:

At this point you can check to make sure that you are allowed to log in via your key and if that is the case you can disable password authentication.

Edit the config again:

nano /etc/ssh/sshd_config

and set the following:

ChallengeResponseAuthentication no
PasswordAuthentication no
UsePAM no

reload the config:

/etc/init.d/ssh reload

That it. You are now on your way to more secure/hassle free SSH authentication.

Technorati Tags: SSH, key, authentication

Technorati Tags: wallpapers

Well today you are in luck. VMware Server (free), allows you to connect graphically to administer a VMware  Server so there is no need to install a GUI on your VMware Server and waste precious RAM.

Let’s get started.

First off, I assume that you already have an install of Gutsy Gibbon server version installed and set to a static IP address. From here on out it is pretty easy.

All we have to do is run the following command to install a few prerequisites before we get started.

First jump to the root account:

sudo su

then:

apt-get install build-essential linux-headers-`uname -r` xinetd xorg-dev

After that is installed we grab the install tar file from VMware.com:

wget http://vmware.com/whatever-the-current-release-url-is

extract the tar:

tar xfz VMware-server-1.*

then move into the newly created directory:

cd vmware-server-distrib

Then run the install script:

./vmware-install.pl

Accept all the default options (unless you have reason not to) and you will return back to the command prompt after installation is complete.

At this point you can connect to the server via the VMware console by entering the IP address of your new VMware Server and the login credentials.

Technorati Tags: VMware, server, Gutsy, Gibbon, Ubuntu

• Run gconf-editor (by hitting Alt+F2 or from terminal).
• Browse to apps->nautilus->desktop in the left-hand folders window
• Uncheck the “volumes_visible” option

Careful, as this will also hide portable storage volumes also…

http://secunia.com/advisories/26885/

If you have it downloaded into the /usr/local/webmin directory, the following commands should get you upgraded (while logged in as root):

cd /usr/local/webmin
wget http://prdownloads.sourceforge.net/webadmin/webmin-1.370.tar.gz
tar xzvf webmin-1.370.tar.gz
cd webmin-1.370
sh setup.sh

then follow the prompts…

Technorati Tags: Linux, webmin, update, vulnerability, alert

Ubuntu is fully supported.

Get it here:

http://desktop.google.com/linux/

IEs 4 Linux offers a free solution to run IE 6 and releases before 6 with a simply install utilizing wine.

Their install instructions are for edgy but by changing the relevant code areas to feisty, it works just fine in the latest release of Ubuntu.

Head over to their site for detailed install instructions and happy surfing!

IEs for Linux

Technorati Tags: Internet Explorer, Linux, IE

Linux has come up with a great solution to an age old problem.

The alias command.

This command allows you to create an alias or shortcut if you will to calling a longer command.

Let’s say you vnc another machine a lot. That machine happens to not have a DNS host name associated with it. You are always trying to remember the IP of that machine so you can VNC it.

The command to VNC our imaginary machine goes something like this:

vncviewer admin@192.168.245.231

That is a lot of typing for a common task.

Let’s simplify that. Type the following:

alias vncmybox=’vncviewer admin@192.168.245.231′

Now you have created your first alias. Anytime during the session you type vncmybox it will run the command we assigned to that alias.

Here is the catch, as soon as you close the terminal all is lost.

Let’s make this change permanent.

Go to you home folder and create a file named:

.bash_aliases

(This can also be done via the terminal like so:

touch ~/.bash_aliases

Then add the alias we created earlier on the first line of this text file as so: (Remember to open this file from your home folder you will have to show hidden files by pressing ctrl + h when in your home directory)

alias vncmybox=’vncviewer admin@192.168.245.231′

Save the file and open the file named:

.bashrc

Find the section that is commented out (lines preceded with #’s) to looks like this:

if [ -f ~/.bash_aliases ]; then
    . ~/.bash_aliases
fi

Uncomment those lines. Save and close and then open a new terminal window.

Now type:

alias

It will list your aliases including the one we just added. Now you can go back and add other commonly used commands to your .bash_aliases file to ease your terminal tasks.

Technorati Tags: alias, Ubuntu, Linux, terminal

The code to do so from the terminal?

First browse to the directory containing all the zip files and then issue this command:

unzip \*.zip

Simple huh?

Technorati Tags: linux, unzip, commands