Linux

The mitigation is pretty safe, it involves disabling IPSec VPN protocols. source https://www.tomshardware.com/tech-industry/cyber-security/dirty-frag-exploit-gets-root-on-most-linux-machines-since-2017-no-patches-available-no-warning-given-copy-fail-like-vulnerability-had-its-embargo-broken

Ran into a strange issue don’t name DNS zone ending in .local as that is reserved for mDNS and some strict resolvers won’t look this up on a DNS server….

Livepatch is available free for up to 5 machines, for personal use, or evaluation purposes. (Ubuntu you forgot free for Education, c’mon work with me) Otherwise for Production, it is…

Step 1: In VmWare, make the partition larger. i did this while the VM was running with no ill effects. sudo su[sudo] password for hex:root@uwazuh:/home/hex# lsblkNAME MAJ:MIN RM SIZE RO…

TimeZone:timedatectltimedatectl list-timezonessudo timedatectl set-timezone your_time_zonesudo timedatectl set-timezone America/Toronto Assign all free space to the logical volume: https://packetpushers.net/ubuntu-extend-your-default-lvm-space/ IPv6 Disable:sudo nano /etc/sysctl.confadd following lines:net.ipv6.conf.all.disable_ipv6=1net.ipv6.conf.default.disable_ipv6=1net.ipv6.conf.lo.disable_ipv6=1reboot OR sudo sysctl -p Hostname change: no…

the Tailscale webpage has included ALMOST all the info after installing according to the tailscale website sudo systemctl start tailscaled tailscale up to authenticate visit https://login.tailscale.com/a/somerandomchars don’t forget to use…

Couple notes on setting this up Does work on a Raspberry Pi 3 1GB Make sure you use the 64bit OS, as the docker image for armhf doesn’t exist I…

Ubuntu 18+ and a number of other modern distros using Polkit have a vuln that allows privilege escalation to root.a video by the bug’s discoverer shows it’s not that hard…

Mostly for my own benefit Make Add-Apt-repository available: apt-get install software-properties-common 1 2 3 Change Hostname:sudo nano /etc/hostnamesudo nano /etc/hosts Turn off IPv6sudo nano /etc/sysctl.confAdd: net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 =…