SUSE Conversations


Tag Archives: Security

Resolve Cipher and SSL Threats in Security Scans



By: ndbreeding01

November 7, 2008 12:23 pm

Reads: 188

Resolve “The remote service supports the use of weak SSL ciphers” and “Deprecated SSL Protocol Usage” threat in security scans on SLES/OES2.

+read more

Tags: ,
Categories: SUSE Linux Enterprise Server, Technical Solutions

IPSEC: Implementing Server-to-Server Encryption of TCP/IP Connections



By: utlemming

September 12, 2008 1:40 pm

Reads: 1396

Under a variety of circumstances, it is desirable to encrypt data between multiple computers. One of the beauties of open source is that there is a multiplicity of answers. Unfortunately, with those answers comes some confusion. Often times, people overlook some solutions, and one of those solutions is the use of IPSEC transport mode for server to server communications.

+read more

Tags: , ,
Categories: Enterprise Linux, SUSE Linux Enterprise Server, Technical Solutions

How to clean SMT completely out of Apache DocumentRoot

ataschner

By: ataschner

September 5, 2008 5:47 pm

Reads: 647

Do your security policies prohibit even creating symbolic links to the SMT data within the DocumentRoot? If yes then read this article which explains how to make SMT comply.

+read more

Tags: , ,
Categories: SUSE Linux Enterprise, SUSE Linux Enterprise Server

stunnel: Securing the Insecure with SSL and Creating SSL Tunnels



By: utlemming

September 5, 2008 4:32 pm

Reads: 9626

Just about every system administrator comes across a time when there is a need to encrypt some service. Perhaps your mail program just can’t handle it. Or maybe you need to take a non-SSL aware VNC server and make it SSL-aware. Maybe you’re just paranoid. For such moments in system administrating there is “stunnel.”

+read more

Tags: ,
Categories: Enterprise Linux, SUSE Linux Enterprise Server, Technical Solutions

Securing Apache Web Server with mod_security 2.5.6



By: DamianMyerscough

August 29, 2008 9:41 am

Reads: 926

In this article we look at how to setup and configure mod_security 2.5.6 on SUSE Linux Enterprise Server 10 SP2.

+read more

Tags: ,
Categories: SUSE Linux Enterprise Server, Technical Solutions

Enabling Autokey Crypto in NTP on SLES10



By: Gracal

August 15, 2008 2:42 pm

Reads: 344

Trying to set up a secure NTPv4 environment? SLES10 doesn’t make it obvious, but a few short steps and you can get secure authentication between time-hosts up and running.

+read more

Tags: ,
Categories: SUSE Linux Enterprise Server, Technical Solutions

Detecting ARP Poisoning Attacks



By: DamianMyerscough

June 13, 2008 2:00 am

Reads: 455

Damian Myerscough explains how to detect ARP poisoning attacks using the ‘arpwatch’ utility.

+read more

Tags: ,
Categories: SUSE Linux Enterprise Server, Technical Solutions

Detecting rootkits



By: DamianMyerscough

May 30, 2008 11:10 am

Reads: 225

Damian Myerscough takes a look at two anti-rootkit tools you can use to help identify a wide range of rootkits that may be lurking on your workstation/server.

+read more

Tags: ,
Categories: Enterprise Linux, SUSE Linux Enterprise Server, Technical Solutions

GnuPG (GNU Privacy Guard)



By: DamianMyerscough

April 9, 2008 3:03 am

Reads: 329

Damian Myerscough explains how to install GnuPG on SUSE Linux Enterprise Desktop 10 SP1, and how to encrypt sensitive data.

+read more

Tags: , ,
Categories: Enterprise Linux, Technical Solutions

Chroot Apache



By: DamianMyerscough

March 28, 2008 5:55 am

Reads: 143

The process of chrooting the Apache web server is very tedious having to find all dependencies that Apache relies on. However, this process can be much simpler using the Apache module mod_security.

+read more

Tags: , ,
Categories: Enterprise Linux, Technical Solutions

RSS