Make a Better WORLD, If You Cannot to Do So, Make a Better YOU

Thursday, January 28, 2016

analyzing and storing logs

Analyzing and storing logs:::

logfiles are maintained by rsyslog service::
/var/log directories contain a variety of log files:::

all the log configuration are stored in the /etc/rsyslog.conf

Log file rotation::
by logrotate utility : when rotated logfiles are renamed by with an extension indicating the date on which it was rotated:
/var/log/messages file becomes /var/log/messages-20150126
rotated on January 26 2015
(logrotate man page)

analyze a syslog entry::
[root@localhost ~]# tail -f /var/log/secure
Jan 27 19:34:25 localhost gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0)
Jan 27 19:34:37 localhost polkitd[947]: Registered Authentication Agent for unix-session:c1 (system bus name :1.30 [gnome-shell --mod

send a syslog message with logger::(confusion))

Reviewing systemd journal entries:::
journalctl command shows the full system journal starting with the oldest log entry.

[root@localhost ~]# journalctl
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou

By default journalctl gives last 10 log entries
specifying we can get our desired: for example to get the last 5 entries:
[root@localhost ~]# journalctl -n 5
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Jan 27 20:20:01 localhost.localdomain systemd[1]: Starting Session 8 of
Jan 27 20:20:01 localhost.localdomain CROND[5166]: (root) CMD (/usr/lib
Jan 27 20:30:01 localhost.localdomain systemd[1]: Started Session 9 of
Jan 27 20:30:01 localhost.localdomain systemd[1]: Starting Session 9 of
Jan 27 20:30:01 localhost.localdomain CROND[5367]: (root) CMD (/usr/lib
lines 1-6/6 (END)

also to log entry only those who have priority as err or above::
[root@localhost ~]# journalctl -p err
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Jan 27 19:33:23 localhost.localdomain kernel: sd 2:0:0:0: [sda] Assumin
Jan 27 19:33:36 localhost.localdomain systemd-udevd[760]: unable to mov
Jan 27 19:33:37 localhost.localdomain kernel: piix4_smbus 0000:00:07.3:
Jan 27 19:34:23 localhost.localdomain dhclient[2084]: receive_packet fa
Jan 27 19:34:28 localhost.localdomain dhclient[2084]: send_packet: Netw
Jan 27 19:34:28 localhost.localdomain dhclient[2084]: dhclient.c:2407:
Jan 27 19:34:32 localhost.localdomain pulseaudio[2916]: [alsa-source-ES

journalctl -f itself can displsy last 10 lines of the journal and even can display updated one.(replacement of use of tail)
also we can use options like yesterday ,today tomorrow combined with either --since or --until

root@localhost ~]# journalctl --since yesterday
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou
Jan 27 19:33:21 localhost.localdomain kernel: Initializing

also we can use date in YYYY-MM-DD format and time in HH-MM-SS format
[root@localhost ~]# journalctl --since 2015-12-23
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou
Jan 27 19:33:21 localhost.localdomain systemd-journal[342]: Runtime jou
Jan 27 19:33:21 localhost.localdomain kernel: Initial

output the journal entries from 10 the february 2015 20:30:00 to 13th february 2015 12:00:00

[root@localhost ~]# journalctl --since "2015-02-10 20:30:00" --until "2015-02-13 12:00:00"

also we can view detail By::

[root@localhost ~]# journalctl -o verbose
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Wed 2016-01-27 20:
Wed 2016-01-27 19:33:21.697010 EST [s=d58dea757c3947e38eafaf5e1317364a;
PRIORITY=6
_TRANSPORT=driver
MESSAGE=Runtime journal is using 8.0M (max allowed 91.2M, trying to
MESSAGE_ID=ec387f577b844b8fa948f33cad9a75e6
_PID=342
_UID=0
_GID=0
_COMM=systemd-journal

Moreover we can access the particular process or event by using the options like::
_COMM the name of the command
_EXE the path to the execuatable for the process
_PID the PID of the process
_SYSTEM_UNIT the system unit that started the process.
can also be used combinely or individually such option::

[root@localhost ~]# journalctl _SYSTEM_UNIT=sshd.service _PID=112

journalctl with priority warning::
[root@localhost ~]# journalctl -p warning
-- Logs begin at Wed 2016-01-27 19:33:21 EST, end at Thu 2016-01-28 00:
Jan 27 19:33:21 localhost.localdomain kernel: ACPI: RSDP 00000000000f6a
Jan 27 19:33:21 localhost.localdomain kernel: ACPI: XSDT 000000007feea6
Jan 27 19:33:21 localhost.localdomain kernel: ACPI: FACP 000000007fefee
Jan 27 19:33:21 localhost.localdomain kernel: ACPI: DSDT 000000007feec0

Preserving the systemd journal::

store the journal permanently:

[root@localhost ~]# mkdir /var/log/journals
first of all a directory /var/log/journals is created.

[root@localhost ~]# chown root:systemd-journal /var/log/journals
change the ownership to root user and systemd-journal group for the file .

[root@localhost ~]# chmod 2755 /var/log/journals
then set the sticky bit so that every one can read and access but cannot delete the content.

[root@localhost ~]# kilall -USR1 systemd-journald
finally send the special USR1 signal as user root.

maintaining accurate time:::
timdatectl command
[root@localhost ~]# timedatectl
Local time: Thu 2016-01-28 13:06:07 EST
Universal time: Thu 2016-01-28 18:06:07 UTC
RTC time: Thu 2016-01-28 18:06:07
Time zone: America/New_York (EST, -0500)
NTP enabled: yes
NTP synchronized: yes
RTC in local TZ: no
DST active: no
Last DST change: DST ended at
Sun 2015-11-01 01:59:59 EDT
Sun 2015-11-01 01:00:00 EST
Next DST change: DST begins (the clock jumps one hour forward) at
Sun 2016-03-13 01:59:59 EST
Sun 2016-03-13 03:00:00 EDT

[root@localhost ~]# timedatectl list-timezones
Africa/Abidjan
Africa/Accra
Africa/Addis_Ababa
Africa/Algiers
Africa/Asmara

tzselect command is useful for identifying various timezones on the basis of countries or continents.
[root@localhost ~]# tzselect
Please identify a location so that time zone rules can be set correctly.
Please select a continent or ocean.
1) Africa
2) Americas
3) Antarctica
4) Arctic Ocean
5) Asia
6) Atlantic Ocean
7) Australia
8) Europe
9) Indian Ocean
10) Pacific Ocean

[root@localhost ~]# timedatectl set-time 9:00:00
Failed to set time: Automatic time synchronization is enabled

to set the current date[root@localhost ~]# timedatectl set-ntp false
to disable the network provided time.
Now we can change the time settings
[root@localhost ~]# timedatectl set-time 9:00:00
[root@localhost ~]# timedatectl
Local time: Thu 2016-01-28 09:00:06 MST
Universal time: Thu 2016-01-28 16:00:06 UTC
RTC time: Thu 2016-01-28 16:00:07
Time zone: America/Phoenix (MST, -0700)
root@localhost ~]# timedatectl set-time 1:45:00
[root@localhost ~]# timedatectl
Local time: Thu 2016-01-28 01:45:03 MST
Universal time: Thu 2016-01-28 08:45:03 UTC
RTC time: Thu 2016-01-28 08:45:04
Time zone: America/Phoenix (MST, -0700)
NTP enabled: no
NTP synchronized: no
RTC in local TZ: no
DST active: n/a
[root@localhost ~]# timedatectl set-ntp True
[root@localhost ~]# timedatectl
Local time: Thu 2016-01-28 11:46:24 MST
Universal time: Thu 2016-01-28 18:46:24 UTC
RTC time: Thu 2016-01-28 08:45:34
Time zone: America/Phoenix (MST, -0700)
NTP enabled: yes
NTP synchronized: yes
RTC in local TZ: no

[root@localhost ~]# timedatectl set-ntp True
[root@localhost ~]# timedatectl
Local time: Thu 2016-01-28 11:46:24 MST
Universal time: Thu 2016-01-28 18:46:24 UTC
RTC time: Thu 2016-01-28 08:45:34
Time zone: America/Phoenix (MST, -0700)
NTP enabled: yes
NTP synchronized: yes
RTC in local TZ: no
DST active: n/a

NTP enabled: no
Now agai we can change the time and enable the NTP

NTP synchronized: no
RTC in local TZ: no
DST active: n/a

configuring and monitoring chronyd((confusion)) time source change garney esko kaam chaai.....

for that we need to vi the given file first
[root@localhost ~]# vi /etc/chrony.conf
then change all the servers entries with the ip address of ur Pc as follows:

#use public servers fromthe pool.ntp.org project:::
server 192.168.122.1 iburst

Then restart the chronyd using systemctl command:

[root@localhost ~]# systemctl restart chronyd
now finally we can verify if the modifications is done ::
[root@localhost ~]# chronyc sources -v
210 Number of sources = 2

.-- Source mode '^' = server, '=' = peer, '#' = local clock.
/ .- Source state '*' = current synced, '+' = combined , '-' = not combined,
| / '?' = unreachable, 'x' = time may be in error, '~' = time too variable.
|| .- xxxx [ yyyy ] +/- zzzz
|| Reachability register (octal) -. | xxxx = adjusted offset,
|| Log2(Polling interval) --. | | yyyy = measured offset,
|| \ | | zzzz = estimated error.
|| | | \
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^? 192.168.122.1 0 7 0 10y +0ns[ +0ns] +/- 0ns
^* ec2-52-0-56-137.compute-1 2 6 17 6 -1851us[-1279us] +/- 60ms

###confusion related to adding directive through echo command and logger commadn
for example::[root@localhost ~]# echo "authpriv.alert /var/log/auth-errors" > /etc/rsylog.d/auth-errors.conf

Thursday, January 21, 2016

RHL7 Configuring and securing openssh service::

Configuring and securing openssh service::

to connect to a remotehost as the current user:::
ssh 192.168.122.1

[root@localhost ~]# ssh 192.168.122.1(here current user is root,so we are logging as root in the remote host as well)
The authenticity of host '192.168.122.1 (192.168.122.1)' can't be established.
ECDSA key fingerprint is a1:48:e8:2b:14:09:43:19:be:44:31:eb:0a:65:7e:c8.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.122.1' (ECDSA) to the list of known hosts.
root@192.168.122.1's password:
Last login: Thu Jan 21 11:02:35 2016

connect to a remote shell as a different user.. Now i am root here and i want to connect as ashok in the remotehsot, then:
ssh ashok@remotehost
[root@localhost ~]# ssh ashok@192.168.122.1
ashok@192.168.122.1's password:
Last login: Thu Jan 21 14:31:50 2016 from 192.168.122.1

displaying and changing the hostname of remotehost
::::

[ashok@localhost ~]$ ssh ashok@192.168.122.1 hostname
ashok@192.168.122.1's password:
localhost.localdomain
[ashok@localhost ~]$ hostname ashok
hostname: you must be root to change the host name
[ashok@localhost ~]$ su -
Password:
Last login: Thu Jan 21 14:28:01 EST 2016 from 192.168.122.1 on pts/4
[root@localhost ~]# hostname remoteuser
[root@localhost ~]# hostname
remoteuser
[root@localhost ~]# su ashok
[ashok@remoteuser root]$ cd
[ashok@remoteuser ~]$ exit
exit
[root@localhost ~]# ssh ashok@192.168.122.1
ashok@192.168.122.1's password:
Last login: Thu Jan 21 14:39:44 2016
[ashok@remoteuser ~]$

SSH hostkeys:::

first time a user uses ssh to connect to particuylar server, it stores a public key in the users ~/.ssh/known_hosts and durig each logging
it checks for that match of public key and only then allows the connection;

COnfiguring ssh key_based authentication::
to connect to the remotehost, as we discussed earlier we need to match the public key however there is the secured way but we dont need to type password to conect to the remotehost:
for that we need to use following commands::(this is called public key authentication)

first of all
[ashok@localhost ~]$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/ashok/.ssh/id_rsa):
/home/ashok/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/ashok/.ssh/id_rsa.
Your public key has been saved in /home/ashok/.ssh/id_rsa.pub.
The key fingerprint is:
12:8e:eb:23:bd:7c:26:18:58:d9:4e:db:35:19:d1:c6 ashok@remoteuser
The key's randomart image is:
+--[ RSA 2048]----+
| .+ |
| . E |
| o . + |
| o oo .+ |
| o o.oo.S. |
|. . o... |
| +. |
| oo+ o |
| .+* |
+-----------------+
[ashok@localhost ~]$ ssh-copy-id ashok@192.168.122.1
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
ashok@192.168.122.1's password:

Number of key(s) added: 1

Now try logging into the machine, with: "ssh 'ashok@192.168.122.1'"
and check to make sure that only the key(s) you wanted were added.

[ashok@localhost ~]$ ssh ashok@192.168.122.1
Last login: Thu Jan 21 16:10:14 2016( notice over here previously it used to ask for password but now it hasnot)
this is wha we can do with ssh key-gen to login to any remotehost that we have acces to

Costumizing ssh service configuration:::
resrticting ssh logins::
first of we have to generate ssh keys on remotehost;

[ashok@localhost ~]$ ssh key-gen
after completing the middle steps of this command we need
ssh-copy-id remotehost( this will copy id to the remotehost)

[ashok@localhost ~]$ ssh-copy-id 192.168.122.1

after some steps of the above command try logging into the remotehost

[ashok@localhost ~]$ ssh ashok@192.168.122.1
Last login: Thu Jan 21 16:40:17 2016 from 192.168.122.1
after logging in gain the root priviliges:;

[ashok@remoteuser ~]$ su -
Password:
Last login: Thu Jan 21 16:34:35 EST 2016 on pts/1
[root@remoteuser ~]#
now configure ssh on remoteuser to prevent root logins::

[root@remoteuser ~]# vi /etc/ssh/sshd_config
permitrootlogin no

[root@remoteuser ~]# systemctl restart sshd

again to prevent passwordauthentication

root@remoteuser ~]$ vi /etc/ssh/sshd_config
PasswordAuthentication no

[root@remoteuser ~
]# systemctl restart sshd
now again try connecting as root to remotehost, thi type it denied without asking for password
however last time it asked for password( now it didnt because we added passwordauthentication no) in /etc/ssh/sshd_config..

Controlling services and DAEMONS::

for the kernel representation of system CPUs

[root@localhost ~]# grep "model name" /proc/cpuinfo

model name : Pentium(R) Dual-Core CPU E5300 @ 2.60GHz

Controlling services and DAEMONS::

daemons are processes that wait or run in the background performing various tasks.

To view the status of a service::

systemctl status name.type

without type it will display the status of a service unit, if one exists

root@localhost ~]# systemctl status sshd.service

● sshd.service - OpenSSH server daemon

Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset: enabled)

Active: active (running) since Thu 2016-01-21 09:47:09 EST; 3h 22min ago

Docs: man:sshd(8)

man:sshd_config(5)

Main PID: 1535 (sshd)

CGroup: /system.slice/sshd.service

└─1535 /usr/sbin/sshd -D

Jan 21 09:47:09 localhost.localdomain systemd[1]: Started OpenSSH serve...

Jan 21 09:47:09 localhost.localdomain systemd[1]: Starting OpenSSH serv...

Jan 21 09:47:10 localhost.localdomain sshd[1535]: Server listening on 0...

Jan 21 09:47:10 localhost.localdomain sshd[1535]: Server listening on :...

Jan 21 09:59:42 localhost.localdomain sshd[4268]: Accepted password for...

Jan 21 11:01:34 localhost.localdomain sshd[6101]: Accepted password for...

Jan 21 12:22:57 localhost.localdomain sshd[8134]: Accepted password for...

Hint: Some lines were ellipsized, use -l to show in full.

to query the state of only service units::

systemctl --type=service

to view if there are any failed or maintainence state::

systemctl status rngd.service -l ( -l option will show the long listing)

alternate commands to check whether the particular command is active or not...

root@localhost ~]# systemctl is-active sshd( it shows whether its current state is active or not)

active

[root@localhost ~]# systemctl is-enabled sshd (it shows whether it was enabled at boot time or not)

enabled

to list all active state of all loaded units::

systemctl list-units --type=service

[root@localhost ~]# systemctl list-units --type=service

UNIT LOAD ACTIVE SUB DESCRIPTION

abrt-ccpp.service loaded active exited Install ABRT coredump ho

abrt-oops.service loaded active running ABRT kernel log watcher

abrt-xorg.service loaded active running ABRT Xorg log watcher

abrtd.service loaded active running ABRT Automated Bug Repor

accounts-daemon.service loaded active running Accounts Service

alsa-state.service loaded active running Manage Sound Card State

atd.service loaded active running Job spooling tools

auditd.service loaded active running Security Auditing Servic

avahi-daemon.service loaded active running Avahi mDNS/DNS-SD Stack

blk-availability.service loaded active exited Availability of block de

bluetooth.service loaded active running Bluetooth service

if -all option is used (systemctl list-units --type=service --all) it even displays inactive units

TO list all socket units active or inactive in the system::

systemctl list-units --type=socket --all

To display if sshd is active without displaying all other status information::

systemctl is-active sshd

[root@localhost ~]# systemctl is-enabled sshd

enabled

Now if we have to display even other status information::

systemctl status sshd

List the enabled and disabled states of all service units::

systemctl list-units --type=service --all

Unit dependcies::

services may have depencies on one another. For example if we have to stop printing services , we have to stop

all three units related to that very unit that may be from other units

masking services::

if there are conflicting services installed and we dont want to open up tha conflicted service accidently we have to mask that

service to /dev/null.

systemctl mask network

[root@localhost ~]# systemctl mask network

Created symlink from /etc/systemd/system/network.service to /dev/null.

Now the service cannot be opened manually as well as automatically

restarting a service will change its process id..

but reloading wont change any process id and no connections are interrupted

enabling any service will make it ready to start at system boot

Processes:::
parent process
child process
different process states::
R = task running
S = sleeping
D = sleeping (but interruptible)
K =task killable
T = task stopped
Z=exit zombie(a child process signals as its parents exits
.all resources except for the process identity (PID) are realeased
X= exit dead

listing processes:: ps -aux ( displays all processes with columns in which users will be
interested)

[ashok@localhost ~]$ ps -aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.3 0.3 126588 7384 ? Ss 09:46 0:04 /usr/lib/syste
root 2 0.0 0.0 0 0 ? S 09:46 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S 09:46 0:00 [ksoftirqd/0]
root 5 0.0 0.0 0 0 ? S< 09:46 0:00 [kworker/0:0H]
root 6 0.0 0.0 0 0 ? S 09:46 0:00 [kworker/u256:
root 7 0.0 0.0 0 0 ? S 09:46 0:00 [migration/0]
root 8 0.0 0.0 0 0 ? S 09:46 0:00 [rcu_bh]
root 9 0.0 0.0 0 0 ? S 09:46 0:00 [rcuob/0]
root 10 0.0 0.0 0 0 ? S 09:46 0:00 [rcuob/1]
root 11 0.0 0.0 0 0 ? S 09:46 0:00 [rcuob/2]
root 12 0.0 0.0 0 0 ? S 09:46 0:00 [rcuob/3]
root 13 0.0 0.0 0 0 ? S 09:46 0:00 [rcuob/4]

ps -lax gives more technical detail and more faster coz it doesnt
provide username( ps -ef is also a unix command to look all processes)

[ashok@localhost ~]$ ps -lax
F UID PID PPID PRI NI VSZ RSS WCHAN STAT TTY TIME COMMAND
4 0 1 0 20 0 126588 7384 ep_pol Ss ? 0:04 /usr/lib/
1 0 2 0 20 0 0 0 kthrea S ? 0:00 [kthreadd
1 0 3 2 20 0 0 0 smpboo S ? 0:00 [ksoftirq
1 0 6 2 20 0 0 0 worker S ?

0:00 [kwo

Controlling jobs::
running jobs in the background::

[ashok@localhost ~]$ sleep 1000 &
[1] 4998
checking if jobs is running:
[ashok@localhost ~]$ jobs
[1]+ Running sleep 1000 &

bringing job in the foreground:;
[ashok@localhost ~]$ fg %1
sleep 1000

To again send the job to background and send the suspend request
press Ctrl-z
[ashok@localhost ~]$ fg %1
sleep 1000
^Z
[1]+ Stopped sleep 1000

ps with option j displays job information including the command shell of each session
ashok@localhost ~]$ ps j
PPID PID PGID SID TTY TPGID STAT UID TIME COMMAND
4146 4150 4150 4150 pts/0 4150 Ss+ 1000 0:00 /bin/bash
4272 4274 4274 4274 pts/1 5174 Ss 1000 0:00 -bash
4274 5165 5165 4274 pts/1 5174 T 1000 0:00 sleep 1000
4274 5174 5174 4274 pts/1 5174 R+ 1000 0:00ps j

Killing processes::
to list signals

[ashok@localhost ~]$ kill -l
1) SIGHUP 2) SIGINT 3) SIGQUIT 4) SIGILL 5) SIGTRAP
6) SIGABRT 7) SIGBUS 8) SIGFPE 9) SIGKILL 10) SIGUSR1
11) SIGSEGV 12) SIGUSR2 13) SIGPIPE 14) SIGALRM 15) SIGTERM
16) SIGSTKFLT 17) SIGCHLD 18) SIGCONT 19) SIGSTOP 20) SIGTSTP
21) SIGTTIN 22) SIGTTOU 23) SIGURG 24) SIGXCPU 25) SIGXFSZ
26) SIGVTALRM 27) SIGPROF 28) SIGWINCH 29) SIGIO 30) SIGPWR
31) SIGSYS 34) SIGRTMIN 35) SIGRTMIN+1 36) SIGRTMIN+2 37) SIGRTMIN+3
38) SIGRTMIN+4 39) SIGRTMIN+5 40) SIGRTMIN+6 41) SIGRTMIN+7 42) SIGRTMIN+8
43) SIGRTMIN+9 44) SIGRTMIN+10 45) SIGRTMIN+11 46) SIGRTMIN+12 47) SIGRTMIN+13
48) SIGRTMIN+14 49) SIGRTMIN+15 50) SIGRTMAX-14 51) SIGRTMAX-13 52) SIGRTMAX-12
53) SIGRTMAX-11 54) SIGRTMAX-10 55) SIGRTMAX-9 56) SIGRTMAX-8 57) SIGRTMAX-7
58) SIGRTMAX-6 59) SIGRTMAX-5 60) SIGRTMAX-4 61) SIGRTMAX-3 62) SIGRTMAX-2
63) SIGRTMAX-1 64) SIGRTMAX

we can use killall to send signal for more processes at once under
certain pattern.
even pkill is used to send signal to multiple processes at once
pkill command_pattern
pkill -signal command_pattern
pkill -G GID command_pattern
pkill -t terminal_name -U UID command_pattern

pgrep -l -u username searches for all the processes associated with that username

[root@localhost ~]# pgrep -l -u ashok
3280 gnome-keyring-d
3323 gnome-session
3330 dbus-launch
3331 dbus-daemon
3396 gvfsd
3400 gvfsd-fuse
3475 ssh-agent
3491 at-spi-bus-laun
3495 dbus-daemon
3500 at-spi2-registr
3511 gnome-settin

To see all the process tree for the system or single user, we use pstree command
[root@localhost ~]# pstree -p ashok

at-spi-bus-laun(3491)─┬─dbus-daemon(3495)───{dbus-daemon}(3497)
├─{at-spi-bus-laun}(3492)
├─{at-spi-bus-laun}(3494)
└─{at-spi-bus-laun}(3496)
pkill -p 3491 will kill all the children they have created because
here the PPID is 3491 and parent is at-spi-bus-laun(3491)

Thursday, January 14, 2016

groupmod,usermod ,passwords(Red Hat 7)

groupmod uses:::
groupmod -n newmane oldname

to modify existing groupids
groupmod -g 2000 ateam( suppose previously roup a ateam has agroup id of 1005 now it will be 2000)

usermod even helps change a group of auser::
usermod -g newgroup username
(now it will assign the username to newgroup

adding a supplemental group to a user

usermod -aG newgroup username
(this will append a newgroup that is supplemental one for the username)

differences between groupmod and groupadd ??
groupmod just changes the name and group id of a existing group whereas usermod can change the group of a existing group, append a supplemental group to any existing user..the examples can be seen above..

managing user passwords::
passwords stored in /etc/shadow file

three parts in amodern password
$1$gCj La2/Z$6 Pu0EK0AzfCj xj v2ho LOB/

1.. 1: The hashing algorithm .The number 1 indicates an MD5 hash. the number 6 appears when $HA-512 hash is used
2. gCjLa2/Z: The salt used to encrypt the hash.
3:6Pu0 EK0AzfCj x j v2ho LOB/: the encrypted hash

authconfig - - passalgo ::: a command that determines which is the appropriate setting for password protection in /etc/shadow file

Password aging::;
The several options are as follows::
chage -d 0 username ::: will force a user to update on next login..
chage -l username :: will list a username current settings

chage -E yyyy-mmmm-DD will expire an account on specific day
#nologin sheel (confusion)

Sunday, January 10, 2016

RHL7 adding users as sudoers

how to grant sudo privilege to new user names as 'mynewuser'

for that we need to carry out the following steps;

become root: su -
then type the command: visudo
search for the following #allow root to run any command anywhere
add the following by inserting:

mynewuser ALL=(ALL) ALL
save and quit:wq

installing vmware

how to install vmware on linux
first of download vmare bundle on ur pc inside Downloads and follow the following steps;;

ashok@ashok:~$ sudo apt-get install build-essential linux-headers-`uname -r`
Reading package lists... Done
Building dependency tree
Reading state information... Done
build-essential is already the newest version.
linux-headers-3.16.0-44-generic is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.

change your current directory to downloads and list all available over there

ashok@ashok:~$ cd /home/ashok/Downloads

ashok@ashok:~/Downloads$ ls -l
total 1642660
-rw-r----- 1 ashok ashok 241754 Oct 4 14:11 11696607_1596467153963786_4550855425001071167_o.jpg
-rw-r----- 1 ashok ashok 414803 Oct 4 14:10 11907155_1616732095270625_3006793256146796048_o.jpg
-rw-r----- 1 ashok ashok 59291 Nov 29 20:17 12311397_909014092528437_123997452_o.jpg
-rw-r----- 1 ashok ashok 57180 Oct 7 22:47 18373101441-459318804-registration.pdf
-rw-rw-r-- 1 ashok ashok 4852 Nov 5 10:42 1920330_1081231035228105_976989325251166712_n.jpg
-rw-rw-r-- 1 ashok ashok 8639 Nov 22 19:47 2(1).py
-rw-r----- 1 ashok ashok 55929 Sep 22 17:25 267549_108259742603880_7115829_n.jpg
-rw-rw-r-- 1 ashok ashok 8639 Nov 22 19:15 2.py
-rw-r----- 1 ashok ashok 38579 Sep 22 17:28 483511_357713057658546_777917237_n.jpg
-rw-r----- 1 ashok ashok 46951 Sep 22 17:26 560583_341516452611540_36203639_n.jpg
-rw------- 1 ashok ashok 136287 Sep 23 10:28 ACFrOgCca7kki9pxYYoWEC9tt4wb3yBsCYWQxgdvlWhfmRS9tVp9IwabFONpoziLEUK3blkFohOE2AlkyGpB2S8rrB-srsZj2K5AQLTnr3BdQj8YYRxh9M_KdHOmgpU=_print=true&nonce=pn31j11aabh4k&user=12749395014731097935&hash=hflelu3ego4dl7jak1n25q2p74p41113.pdf
-rw-r----- 1 ashok ashok 4368 Oct 25 10:15 adobe-release-i386-1.0-1.noarch.rpm
-rw-r----- 1 ashok ashok 155342 Jan 9 23:31 A Freshman's Guide to Tech Internships.pdf
-rw-r----- 1 ashok ashok 8029 Oct 13 22:28 AfricanStudiesSecondExamDefinition.docx
-rw-r----- 1 ashok ashok 135603 Oct 13 20:56 African-Studies-_-Second-Exam-Definition.pdf.docx
-rw-rw-r-- 1 ashok ashok 28820 Nov 17 10:37 article_clippings.zip
-rw-r----- 1 ashok ashok 13395 Sep 18 21:37 ashok essay.docx
-rw-rw-r-- 1 ashok ashok 6244 Dec 13 20:01 Ashok_hangman2(1).py
-rw-rw-r-- 1 ashok ashok 6244 Dec 13 20:02 Ashok_hangman2(2).py
-rw-rw-r-- 1 ashok ashok 6244 Dec 13 20:03 Ashok_hangman2(3).py
-rw-rw-r-- 1 ashok ashok 6244 Dec 13 19:58 Ashok_hangman2.py
-rw-rw-r-- 1 ashok ashok 1514 Nov 22 19:17 ashok.py
-rw-r----- 1 ashok ashok 18270 Nov 29 19:19 Ashok submission.docx
-rw-r----- 1 ashok ashok 666894336 Sep 24 20:46 CentOS-7-x86_64-Minimal-1503-01.iso
-rw-r----- 1 ashok ashok 0 Oct 21 21:52 computer science homework
-rw-r----- 1 ashok ashok 9409 Sep 23 22:07 CopyofDay10PracticeExamforSept29thTest.docx
-rw-r----- 1 ashok ashok 20565248 Jan 9 23:34 Day 01 lecture- What is CS-.pptx
-rw-r----- 1 ashok ashok 687650 Jan 9 23:34 Day 02 lecture- Programs, programming, and Python Slides.pptx
-rw-r----- 1 ashok ashok 37874 Oct 7 20:04 doc.pdf
-rw-r----- 1 ashok ashok 14814 Oct 5 21:52 EGPP CareerAssignment.docx
-rw-r----- 1 ashok ashok 86528 Sep 30 07:33 ENGW 104 Syllabus (Fall 2015) Section 7 (1).doc
-rw-r----- 1 ashok ashok 86528 Oct 6 22:45 ENGW 104 Syllabus (Fall 2015) Section 7 (2).doc
-rw-r----- 1 ashok ashok 86528 Oct 6 22:46 ENGW 104 Syllabus (Fall 2015) Section 7 (3).doc
-rw-r----- 1 ashok ashok 86528 Oct 6 22:51 ENGW 104 Syllabus (Fall 2015) Section 7 (4).doc
-rw-r----- 1 ashok ashok 86528 Oct 7 21:38 ENGW 104 Syllabus (Fall 2015) Section 7 (5).doc
-rw-r----- 1 ashok ashok 86528 Oct 7 21:47 ENGW 104 Syllabus (Fall 2015) Section 7 (6).doc
-rw-r----- 1 ashok ashok 86528 Oct 11 20:22 ENGW 104 Syllabus (Fall 2015) Section 7 (7).doc
-rw-r----- 1 ashok ashok 86528 Oct 25 12:12 ENGW 104 Syllabus (Fall 2015) Section 7 (8).doc
-rw-r----- 1 ashok ashok 86528 Oct 25 14:06 ENGW 104 Syllabus (Fall 2015) Section 7 (9).doc
-rw-r----- 1 ashok ashok 86528 Sep 30 07:33 ENGW 104 Syllabus (Fall 2015) Section 7.doc
-rw-r----- 1 ashok ashok 14615 Oct 12 14:28 Essay-10.docx
-rw-r----- 1 ashok ashok 14631 Oct 13 09:20 Essay-11 (1).docx
-rw-r----- 1 ashok ashok 14631 Oct 12 14:28 Essay-11.docx
-rw-r----- 1 ashok ashok 14207 Oct 13 09:20 Essay-12 (1).docx
-rw-r----- 1 ashok ashok 14207 Oct 12 14:28 Essay-12.docx
-rw-r----- 1 ashok ashok 14574 Oct 13 09:21 Essay-13 (1).docx
-rw-r----- 1 ashok ashok 14574 Oct 12 14:28 Essay-13.docx
-rw-r----- 1 ashok ashok 8736 Oct 13 00:40 Essay-14.docx
-rw-r----- 1 ashok ashok 13073 Sep 18 21:21 Essay #1.docx
-rw-r----- 1 ashok ashok 14990 Oct 12 09:37 Essay-1.docx
-rw-r----- 1 ashok ashok 14588 Oct 12 14:28 Essay-2 (1).docx
-rw-r----- 1 ashok ashok 14588 Oct 13 09:21 Essay-2 (2).docx
-rw-r----- 1 ashok ashok 14588 Oct 12 11:31 Essay-2.docx
-rw-r----- 1 ashok ashok 17545 Oct 12 14:28 Essay-3.docx
-rw-rw-r-- 1 ashok ashok 230126 Nov 16 10:04 essay 3 draft.docx
-rw-r----- 1 ashok ashok 15116 Oct 12 14:28 Essay-4.docx
-rw-r----- 1 ashok ashok 15026 Oct 12 14:28 Essay-5.docx
-rw-r----- 1 ashok ashok 15731 Oct 12 14:28 Essay-6.docx
-rw-r----- 1 ashok ashok 16403 Oct 12 14:28 Essay-7 (1).docx
-rw-r----- 1 ashok ashok 16403 Oct 12 14:28 Essay-7.docx
-rw-r----- 1 ashok ashok 14075 Oct 12 14:28 Essay-9.docx
-rw-rw-r-- 1 ashok ashok 9531 Nov 10 23:00 final resume.docx
-rw-rw-r-- 1 ashok ashok 6533 Nov 10 22:52 google essay.docx
-rw-rw-r-- 1 ashok ashok 13189 Dec 7 00:06 hangman2final.py
-rw-rw-r-- 1 ashok ashok 3004 Dec 6 21:42 hangman4.py
-rw-rw-r-- 1 ashok ashok 58003 Dec 5 19:52 hangman_english_words.txt
-rw-rw-r-- 1 ashok ashok 58003 Dec 5 19:52 hangman_english_words.txt~
drwxrwxr-x 4 ashok ashok 4096 Sep 5 19:41 install_flash_player_11_linux.x86_64
-rw-rw-r-- 1 ashok ashok 7266504 Sep 5 19:41 install_flash_player_11_linux.x86_64.tar.gz
-rw-r----- 1 ashok ashok 9911233 Oct 20 09:49 Learning_Python_-_Mark_Lutz (1).pdf
-rw-r----- 1 ashok ashok 5035772 Oct 20 08:44 Learning_Python_-_Mark_Lutz.epub
-rw-r----- 1 ashok ashok 9911233 Oct 20 08:44 Learning_Python_-_Mark_Lutz.pdf
drwxrwxr-x 3 ashok ashok 12288 Sep 12 13:07 mobile
-rw-rw-r-- 1 ashok ashok 6098 Dec 6 19:58 my project 2(1).py
-rw-rw-r-- 1 ashok ashok 5467 Dec 6 21:09 My project 2 of python.py
-rw-rw-r-- 1 ashok ashok 5468 Dec 6 21:09 My project 2 of python.py~
-rw-rw-r-- 1 ashok ashok 6098 Dec 6 19:46 my project 2.py
-rw-r----- 1 ashok ashok 70144 Sep 6 12:08 occ_15-1122.xls
-rw-r----- 1 ashok ashok 49366 Oct 7 20:28 out.pdf
-rw-r----- 1 ashok ashok 8924 Sep 17 10:18 paperratergffdhyh.docx
-rw-rw-r-- 1 ashok ashok 3132 Dec 6 23:05 part2.py
-rw-rw-r-- 1 ashok ashok 3187 Dec 5 15:39 project 1 cs(1).py
-rw-rw-r-- 1 ashok ashok 3187 Dec 13 19:59 project 1 cs(2).py
-rw-rw-r-- 1 ashok ashok 3187 Nov 22 22:12 project 1 cs.py
-rw-r----- 1 ashok ashok 1948323 Jan 9 19:50 putty-0.66 (1).tar.gz
-rw-r----- 1 ashok ashok 1948323 Jan 9 19:50 putty-0.66.tar.gz
-rw-r----- 1 ashok ashok 524288 Jan 9 22:22 putty.exe
-rw-r----- 1 ashok ashok 16168 Oct 6 08:55 Resume.docx
-rw-r----- 1 ashok ashok 7865872 Jan 9 22:35 RH134-RHEL7(1) (1).pdf
-rw-r----- 1 ashok ashok 7865872 Jan 9 19:20 RH134-RHEL7(1).pdf
-rw-r----- 1 ashok ashok 5438245 Sep 5 17:27 Shell Programming in 24 Hours.pdf
-rw-r----- 1 ashok ashok 178159 Sep 21 08:35 Solutions to 156 sample Test 1 Fall 2015 Correct File.pdf
-rw-rw-r-- 1 ashok ashok 32164 Sep 5 19:47 Supp Syll 2015.docx
-rw-r----- 1 ashok ashok 221594545 Sep 5 20:54 The Seagull Handbook, 2nd Edition.pdf
-rw-r----- 1 ashok ashok 1193988 Sep 5 20:51 The Word_ Black Writers Talk Ab - Marita Golden.pdf
-rw-rw-r-- 1 ashok ashok 5481 Sep 6 16:01 Untitled 1.docx
-rw-r----- 1 ashok ashok 63279710 Sep 24 20:18 virtualbox-5.0_5.0.4-102546-Ubuntu-trusty_amd64.deb
-rw-r----- 1 ashok ashok 138848126 Jan 10 11:41 VMware-Player-12.1.0-3272444.x86_64 (1).bundle
-rw-r----- 1 ashok ashok 138848126 Jan 10 00:43 VMware-Player-12.1.0-3272444.x86_64.bundle

select the one which we have to install and follow the following command:;

ashok@ashok:~/Downloads$ gksudo bash ./VMware-Player-12.1.0-3272444.x86_64.bundle

this helps you to get the graphical interface and one can follow their step to carry out the installation process;