The default repos for Amazon’s Centos are lacking a lot. Add this repo to the default Amazon Centos setup. in /etc/yum.repos.d/ius.repo comment out: mirrorlist=http://dmirr.iuscommunity.org/mirrorlist?repo=ius-el5&arch=$basearch add: baseurl=http://dl.iuscommunity.org/pub/ius/stable/Redhat/5/$basearch
The best way to handle minor updates is to first back everything up (your web directory and your database) then download the new version of drupal to a directory (lets use ~/drupalupdate as the download directory and /var/www/html as the webdirectory) cd into the download directory and run the following command find * -type f -exec echo cp {} /var/www/html/{} \; This one just test everything and echos what it would really do. If everything looks good run find * […]
ls -l|awk ‘length($6)==3{x[$6″ “$7]+=$5};END{for(i in x)printf”%s:\t%d\n”,i,x[i]}’
Stop the mysql daemon Restart mysql using the command mysqld_safe –skip-grant-tables Now you should be able to connect as root Once connected run the following: update user set Password=PASSWORD(‘new-password’) where user=’root’; then flush privileges exit mysql restart mysql and you should be able to login with the new password
Edit wp-includes/functions.php and add the following add_action(‘after_setup_theme’, ‘remove_admin_bar’); function remove_admin_bar() { if (!current_user_can(‘administrator’) && !is_admin()) { show_admin_bar(false); } } Now the top navbar will only showup for admin users.
find /path -type f -exec ls -s {} \; | sort -n | tail -1
ls -s | awk NR!=1 | sort -n | awk ‘{print $2}’ | xargs bzip2 -9v
netstat -ntulp displays everything that is listening tcp and udp and the ip that it is listening on
To view web traffic (for example) use tcpdump -s 0 -w – port 80 | tcpdump -r – -A
cat list-1 list-2 list-3 | sort | uniq > final.list
Debugg bash scripts by runing with option -x example bash -x scriptname.sh
#! /bin/bash DIR=$1 for a in `ls $DIR` do fname=`echo $a | tr A-Z a-z` mv $DIR/$a $DIR/$fname done; exit 0
“Yes, I’m paranoid — but am I paranoid enough?” ― David Foster Wallace, Infinite Jest Hardening Public Servers Install system accounting On Debian based systems run ‘apt-get install acct’ then you can use commands lastcomm and sa to see who ran various comands. Also a log file will be writen to /var/log/account/pacct Remove compilers from production severs use the command ‘apt-get –purge remove gcc’ Setup remote logging See http://www.thegeekstuff.com/2012/01/rsyslog-remote-logging/ to find out how Install fail2ban Linux.com has a good intro to fail2ban http://www.linux.com/learn/tutorials/469597-weekend-project-keep-out-repeat-offenders-with-fail2ban-on-linux
# .bash_profile # Get the aliases and functions if [ -f ~/.bashrc ]; then . ~/.bashrc fi # User specific environment and startup programs PATH=$PATH:$HOME/bin:/sbin export JAVA_HOME=/usr/java/jdk1.6.0_05/bin/java export PATH=$PATH:/usr/java/jdk1.6.0_05/bin export HISTIGNORE=”&” export EDITOR=nano export PATH unset USERNAME alias rm=’rm -i’ alias cp=’cp -i’ alias ls=’ls –color’ alias zf=’zf.sh’ echo -e “\033[36m########################## \033[0m” echo -e “\033[36mServer $HOSTNAME \033[0m” echo -e “\033[36mWelcome back $USER \033[0m” echo -e “\033[36musers loggged in: \033[0m” echo -e “\033[36m `users ` \033[0m” echo -e “\033[36m`uptime` \033[0m” echo […]