<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Unix Administration and Security</title>
	<atom:link href="http://www.jasonbrown.us/index.php/feed" rel="self" type="application/rss+xml" />
	<link>http://www.jasonbrown.us</link>
	<description></description>
	<lastBuildDate>Tue, 23 Feb 2010 22:44:45 +0000</lastBuildDate>
	
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Calculate Free Space Using Python</title>
		<link>http://www.jasonbrown.us/index.php/2010/calculate-free-space-using-python</link>
		<comments>http://www.jasonbrown.us/index.php/2010/calculate-free-space-using-python#comments</comments>
		<pubDate>Tue, 23 Feb 2010 22:44:45 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Python]]></category>
		<category><![CDATA[Scripts]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=126</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





Here is an easy way of finding the total amount of free disk space using Python:
import os
diskSpace = os.statvfs(&#8216;/&#8217;)
(diskSpace.f_bavail * diskSpace.f_frsize) / (1024 * 1024)
]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2010/calculate-free-space-using-python/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Editing SELinux Policies</title>
		<link>http://www.jasonbrown.us/index.php/2010/editing-selinux-policies</link>
		<comments>http://www.jasonbrown.us/index.php/2010/editing-selinux-policies#comments</comments>
		<pubDate>Tue, 16 Feb 2010 00:16:10 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[SELinux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[ClamAV]]></category>
		<category><![CDATA[Postfix]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=119</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





There are times where SELinux just does not want to play nice.  For instance, after installing ClamAV I began running into problems where if I did not turn off SELinux while ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2010/editing-selinux-policies/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Disable Weak Ciphers in Dovecot</title>
		<link>http://www.jasonbrown.us/index.php/2010/disable-weak-ciphers-in-dovecot</link>
		<comments>http://www.jasonbrown.us/index.php/2010/disable-weak-ciphers-in-dovecot#comments</comments>
		<pubDate>Mon, 15 Feb 2010 22:47:39 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Dovecot]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Postfix]]></category>
		<category><![CDATA[SSL]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=114</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





In running my periodic Nessus scans, it picked up a few medium severity vulnerabilities against Dovecot.  One was &#8220;SSL Anonymous Cipher Suites Supported&#8221; and the other, &#8220;SSL Weak Cipher Suites Supported.&#8221;
Look ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2010/disable-weak-ciphers-in-dovecot/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>RHEL/CentOS 5 server security</title>
		<link>http://www.jasonbrown.us/index.php/2010/rhelcentos-5-server-security</link>
		<comments>http://www.jasonbrown.us/index.php/2010/rhelcentos-5-server-security#comments</comments>
		<pubDate>Sun, 17 Jan 2010 17:20:50 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[CentOS]]></category>
		<category><![CDATA[Kernel]]></category>
		<category><![CDATA[NSA]]></category>
		<category><![CDATA[Red Hat]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=91</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





As a part of the sys admin&#8217;s job, it is important to take a few extra minutes to go through and properly secure a newly installed Linux server.  These steps include ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2010/rhelcentos-5-server-security/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Install mod_security for RHEL/CentOS</title>
		<link>http://www.jasonbrown.us/index.php/2009/install-mod_security-for-rhelcentos</link>
		<comments>http://www.jasonbrown.us/index.php/2009/install-mod_security-for-rhelcentos#comments</comments>
		<pubDate>Sun, 27 Dec 2009 22:55:14 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Apache]]></category>
		<category><![CDATA[CentOS]]></category>
		<category><![CDATA[Red Hat]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[mod_security]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=39</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





You will need to install the Extra Packages for Enterprise Linux (EPEL) rpm which can be found at:
'rpm -ivh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-3.noarch.rpm' for i386
or: 'rpm -ivh http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/epel-release.html' for 64bit.
Once the EPEL rpm has been ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/install-mod_security-for-rhelcentos/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Postfix and SSL</title>
		<link>http://www.jasonbrown.us/index.php/2009/postfix-and-ssl</link>
		<comments>http://www.jasonbrown.us/index.php/2009/postfix-and-ssl#comments</comments>
		<pubDate>Sun, 15 Nov 2009 11:15:07 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Postfix]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SSL]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=33</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





First we need to create our certificates. To create a certificate authority download the openssl-perl package through Yum:
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
yum install openssl-perl
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
Then issue the following command to create the CA certificate.
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
./CA.pl -newca
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
After this process ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/postfix-and-ssl/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Postfix and ClamAV with RHEL/CentOS</title>
		<link>http://www.jasonbrown.us/index.php/2009/postfix-and-clamav-with-rhelcentos</link>
		<comments>http://www.jasonbrown.us/index.php/2009/postfix-and-clamav-with-rhelcentos#comments</comments>
		<pubDate>Mon, 02 Nov 2009 17:30:40 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[CentOS]]></category>
		<category><![CDATA[ClamAV]]></category>
		<category><![CDATA[Postfix]]></category>
		<category><![CDATA[Red Hat]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=29</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





Postfix Install
To create a functional SMTP server, first you need to install Postfix by running
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
yum install postfix
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
Check to make sure that your hostname also has your fully qualified domain name.
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
echo $HOSTNAME
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
If it ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/postfix-and-clamav-with-rhelcentos/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>USB encryption with Luks</title>
		<link>http://www.jasonbrown.us/index.php/2009/usb-encryption-with-luks</link>
		<comments>http://www.jasonbrown.us/index.php/2009/usb-encryption-with-luks#comments</comments>
		<pubDate>Fri, 30 Oct 2009 21:43:44 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Luks]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=26</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





Here is an easy way of encrypting USB thumb drives with Luks. Examples below assume your thumb drive is/dev/sdb
First, check the device for bad blocks:
~]# badblocks -c 10240 -s -w -t random ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/usb-encryption-with-luks/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GPG Keys</title>
		<link>http://www.jasonbrown.us/index.php/2009/gpg-keys</link>
		<comments>http://www.jasonbrown.us/index.php/2009/gpg-keys#comments</comments>
		<pubDate>Tue, 20 Oct 2009 19:09:17 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[GnuPG]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=22</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





GnuPG is used to encrypt and sign email messages and files. First you need to create the GPG key:
Generating Keys
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
$ gpg --gen-key
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
Select option 5 for RSA and then type the encryption level.
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;
Please ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/gpg-keys/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Random password generation with Perl</title>
		<link>http://www.jasonbrown.us/index.php/2009/random-password-generation-with-perl</link>
		<comments>http://www.jasonbrown.us/index.php/2009/random-password-generation-with-perl#comments</comments>
		<pubDate>Fri, 16 Oct 2009 10:59:17 +0000</pubDate>
		<dc:creator>Jason</dc:creator>
				<category><![CDATA[Perl]]></category>
		<category><![CDATA[Scripts]]></category>
		<category><![CDATA[Password]]></category>

		<guid isPermaLink="false">http://www.jasonbrown.us/?p=15</guid>
		<description><![CDATA[




		
			Share this on Facebook
		
		
			Digg this!
		
		
			Share this on Reddit
		
		
			Post this to MySpace
		
		
			Tweet This!
		
		
			Subscribe to the comments for this post?
		
		
			Share this on Linkedin
		
		
			Submit this to SlashDot
		





This script will generate new passwords for servers. This will take a list of servers from one file, generate a new password, then output the name of the server along with the ]]></description>
		<wfw:commentRss>http://www.jasonbrown.us/index.php/2009/random-password-generation-with-perl/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
