no remote syslog when hibernating
by Eyal Lebedinsky
I remotely log workstation messages to a server. I also have a serial console going.
The first line showing (on serial) when I hibernate is this
r8169 0000:04:00.0 eth0: Link is Down
and no log messages are forwarded to the server. Also, no messages on the screen.
Boot messages are visible though.
I am rather sure this was not the case, I used to see the progress of a shutdown/hibernation.
BTW, my rc.local has
echo "N" >/sys/module/printk/parameters/console_suspend
--
Eyal at Home (fedora(a)eyal.emu.id.au)
4 years, 2 months
Tracking down SSH access
by Michael Eager
When I look at /var/log/secure or run journalctl on my workstation, I
see failed SSH login attempts from a variety of IP addresses. The
attempts are every 3-12 minutes.
/etc/ssh/sshd_config contains:
PasswordAuthentication no
The workstation is on a LAN behind an EdgeRouter firewall. No Internet-
accessible ports are forwarded to the workstation. The LAN has a
variety of servers, NAS boxes, WiFi access points, WiFi-connected
laptops, etc.
A typical /var/log/secure entry looks like this:
Jan 30 12:43:50 redwood sshd[21228]: Invalid user jackiehulu from
124.204.36.138 port 37394
Jan 30 12:43:51 redwood sshd[21228]: Received disconnect from
124.204.36.138 port 37394:11: Bye Bye [preauth]
Jan 30 12:43:51 redwood sshd[21228]: Disconnected from invalid user
jackiehulu 124.204.36.138 port 37394 [preauth]
The corresponding journalctl is:
Jan 30 12:43:51 redwood.eagercon.com audit[21228]: USER_ERR pid=21228
uid=0 auid=4294967295 ses=4294967295
subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident
grantors=? acct="?" exe="/usr/sbin/sshd" hostname=124.204.36.138
addr=124.204.36.138 terminal=ssh res=failed'
I'm assuming that something on the network has been compromised,
allowing SSH login attempts on the LAN. Other than turning off
each server/AP/laptop/etc, one at a time, to find when the accesses
stop, is there any way to find out where the SSH attempt is coming from?
-- Mike Eager
4 years, 2 months
VM doesn't boot off a USB thumb drive
by Sam Varshavchik
I do this once or twice a year after updating my Win 10 VMs to the next
feature release: I prepare a bootable rescue image, and try to test it by
having my VM boot off it.
In F31, I cannot get the VM boot off the USB thumb drive. I add the USB
thumb drive in virt manager. It's now listed in "Boot Options". I enable it,
and set it to to be first in the boot order.
The VM still ends up booting the OS off the virtual hard drive.
The OS itself sees the USB thumb drive without any issues.
If, in libvirt-manager the boot menu option is enabled, the USB thumb drive
does not appear as an option.
I tried another bootable thumb drive that I prepared a year ago. The VM
refuses to boot off it, too.
Is anyone able to add and boot off a USB storage device, in F31's qemu VM?
4 years, 2 months
Formatting second disk on computer
by Paul Smith
Dear All,
My new computer has got 2 disks: a SSD and a HDD one.
The SSD disk is large enough to have Fedora and my entire home
directory on that.
Now, I am intending to use the HDD disk for backuping. And my question
is: How should I format the HDD disk?
Thanks in advance,
Paul
4 years, 2 months