systemd Security Flaw Can Allow Remote Code Execution Attacks
This systemd security flaw, which was accidentally introduced in 2015, creates a DNS security flaw on affected systems. It works by allowing an attacker to perform a buffer overflow attack against an affected Linux system, which in turn would either crash the machine, or allow the attacker to perform a remote code execution attack. The referenced article indicates that the flaw is present on Ubuntu 16.10 and Ubuntu 17.04, but it would also be present on other Linux distros that use the affected versions of systemd. If you're a Linux administrator, you need to get these affected systems patched as soon as possible. Linux security after all, is very important.
Red Hat has announced changes to their free-of-charge Red Hat Developers subscription to kind-of appease users of CentOS Linux. For Linux administrators who currently use CentOS in production, plans are still in the works. Will the new plans take Red Hat from a $1 billion company to a $10 billion company? I'll share my thoughts in this BeginLinux Guru video.
Article referenced in video:
https://www.zdnet.com/article/red-hat-introduces-free-rhel-for-small-production-workloads-development-teams/
Purchase links for my book, "Mastering Linux Security and Hardening, Second Edition":
Directly from Packet Publishing-- https://www.packtpub.com/product/mastering-linux-security-and-hardening-second-edition/9781838981778
From Amazon-- https://www.amazon.com/gp/product/1838981772?pf_rd_r=PAXG7Y3FDTKB6QCZ2VJF&pf_rd_p=edaba0ee-c2fe-4124-9f5d-b31d6b1bfbee
...
https://www.youtube.com/watch?v=WRn8fXZhDK0
Linux malware isn't as widespread as malware for Windows, but it is getting more sophisticated. Here's an article about a new Linux trojan malware that can make your computer do Monero mining, steal passwords, replicate itself via Secure Shell, and install a Linux rootkit. But, is it as serious as the tech press makes it sound? What if you practice good Linux security and hardening?
Link to article:
https://www.zdnet.com/article/new-linux-crypto-miner-steals-your-root-password-and-disables-your-antivirus/
Purchase link for my "Mastering Linux Security and Hardening" book:
https://www.packtpub.com/networking-and-servers/mastering-linux-security-and-hardening
Purchase link for my "Mastering Linux Security and Hardening" video course:
https://www.packtpub.com/networking-and-servers/mastering-linux-security-and-hardening-video
...
https://www.youtube.com/watch?v=AsJQzQpnRGs
In this Linux tutorial for beginners, we look at how to keep Linux processes running after exiting from the machine. This is great for when you have to run Linux processes remotely, or when you need to run Linux in headless mode.
Thank you for watching the BeginLinux Guru channel. Stay tuned for more Linux administration tutorial videos.
...
https://www.youtube.com/watch?v=58R36VCKbio
On Linux, Unix, and BSD systems, it's important to control what your systems administrators can and can't do. The best way you can do this is by using the sudo utility. This can greatly enhance IT security on your enterprise network. Knowing about basic Linux security or Unix security can help you out in a big way.
A linux administrator tutorial from beginlinux guru, the linux tutorial specialist.
Also, be sure to check out the book, "Sudo Mastery", which is an excellent full-length reference book about sudo.
https://www.amazon.com/gp/product/B00GA2W47O/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=B00GA2W47O&linkCode=as2&tag=civicsandpolitic&linkId=2381d9fc14cd95e5b815cd8215e81ca9
...
https://www.youtube.com/watch?v=Q5qMY1elbyE
This time, we'll look at upgrading OpenSUSE Leap 42.1 to OpenSUSE Tumbleweed Rolling Release. As it turns out, upgrading OpenSUSE Linux to a rolling release model is quite easy. Other than a couple of minor glitches, it works well. In fact, the upgrade worked better than it does on certain other Linux distros.
Procedure:
http://www.techrepublic.com/article/how-to-upgrade-opensuse-leap-to-opensuse-tumbleweed/
Installing nVidia Drivers:
https://en.opensuse.org/SDB:NVIDIA_the_hard_way
Installing Packman repository:
https://en.opensuse.org/Additional_package_repositories
...
https://www.youtube.com/watch?v=VZZDMHCZ08k
In this Linux tutorial, we'll look at how to use timedatectl to set the timezone on Linux computers. This is one of the linux basic commands that you would expect to see on a Linux computer that runs systemd.
To purchase my "Mastering Linux Security and Hardening" book directly from the publisher, click here:
https://www.packtpub.com/networking-and-servers/mastering-linux-security-and-hardening
To purchase my "Mastering Linux Security and Hardening" book from Amazon, click here:
https://amzn.to/2LuXDkN
...
https://www.youtube.com/watch?v=l_Q-PK_2cVQ
In "systemd Basics Part 1", we'll cover the "systemctl poweroff" and "systemctl reboot" commands. We'll also see how you can still use the old "shutdown" commands for more flexibility with administering your Linux servers. For both present and aspiring Linux systems administrators, learning systemd is an absolute must.
A linux administrator tutorial from beginlinux guru.
...
https://www.youtube.com/watch?v=AEvyaObN2g8
Through 30 April 2019, you can now buy my "Mastering Linux Security and Hardening" ebook or its companion video course for only $10.00 U.S. There's a lot of useful information here for both a Linux systems administrators, and for students who are studying for a Linux certification exam. So, check what the BeginLinux Guru is saying, and buy it now before the price goes up.
Purchase link for the "Mastering Linux Security and Hardening" ebook:
https://www.packtpub.com/networking-and-servers/mastering-linux-security-and-hardening
Purchase link for the "Mastering Linux Security and Hardening" video course:
https://www.packtpub.com/networking-and-servers/mastering-linux-security-and-hardening-video
https://www.youtube.com/watch?v=NdNfygkd0vw
You've likely heard that Microsoft, who previously declared that Linux is a cancer, now is a platinum member of the Linux foundation, proclaiming that Microsoft loves Linux. But, in light of Microsoft's aggressive software patent actions against Android, and in light of their past ethically-questionable business tactics, should we trust Microsoft in the Linux Foundation?
Devil graphic from:
http://www.deviantart.com/
Software patent articles from:
http://techrights.org/home/
...
https://www.youtube.com/watch?v=oCwXUKnWS-E