Xusontha@ls.buckodr.ink to Programmer Humor@lemmy.ml · edit-29 months agoIt's always "temporary troubleshooting"loot.buckodr.inkimagemessage-square25fedilinkarrow-up11.08Karrow-down116file-text
arrow-up11.07Karrow-down1imageIt's always "temporary troubleshooting"loot.buckodr.inkXusontha@ls.buckodr.ink to Programmer Humor@lemmy.ml · edit-29 months agomessage-square25fedilinkfile-text
minus-squareiluminae@lemmy.worldlinkfedilinkarrow-up33·9 months ago(after) …ah crap it’s actually selinux…
minus-squarelightnegative@lemmy.worldlinkfedilinkarrow-up1·9 months agoFirst thing to do if you need a functioning server Unless you’re a security guy and get off on people not being able to do their jobs due to Access Denied
minus-squareKnusper@feddit.delinkfedilinkarrow-up6·9 months agoRecently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
minus-squareuis@lemmy.worldlinkfedilinkarrow-up3·edit-29 months agoFunfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.
(after) …ah crap it’s actually selinux…
SELINUX=disabled
First thing to do if you need a functioning server
Unless you’re a security guy and get off on people not being able to do their jobs due to Access Denied
Recently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
Funfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.