Posts

Showing posts from 2015

VENOM Vulnerability

How to Patch and Protect Linux Server against the VENOM Vulnerability # CVE-2015-3456 A very serious security problem has been found in the virtual floppy drive QEMU's code used by many computer virtualization platforms including Xen, KVM, VirtualBox, and the native QEMU client. It is called VENOM vulnerability. How can I fix VENOM vulnerability and protect my Linux server against the attack? How do I verify that my server has been fixed against the VENOM vulnerability? This is tagged as high severity security bug and it was announced on 13th May 2015. The VENOM vulnerability has existed since 2004, when the virtual Floppy Disk Controller was first added to the QEMU codebase. Since the VENOM vulnerability exists in the hypervisor’s codebase, the vulnerability is agnostic of the host operating system (Linux, Windows, Mac OS, etc.). What is the VENOM security bug (CVE-2015-3456)? An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller (F...

Installation and configuration of Docker

In privious Blog I have mention Docker Introduction.  I have Installed Docker Ubuntu so below are the steps to installation        Docker is supported on the following versions of Ubuntu:        Ubuntu Trusty 14.04 (LTS) (64-bit)        Ubuntu Precise 12.04 (LTS) (64-bit)        Ubuntu Raring 13.04 and Saucy 13.10 (64 bit) Please read Docker and UFW, if you plan to use UFW (Uncomplicated Firewall) Ubuntu Trusty 14.04 (LTS) (64-bit) Ubuntu Trusty comes with a 3.13.0 Linux kernel, and a docker.io package which installs Docker 1.0.1 and all its prerequisites from Ubuntu's repository. Note: Ubuntu contain a much older KDE3/GNOME2 package called docker, so the Ubuntu-maintained package and executable are named docker.io. Ubuntu-maintained Package Installation To install the latest Ubuntu package (this is not the most recent Docker release): $...

Docker Introduction

About Docker: Develop, Ship and Run Any Application, Anywhere Docker is a platform for developers and sysadmins to develop, ship, and run applications. Docker lets you quickly assemble applications from components and eliminates the friction that can come when shipping code. Docker lets you get your code tested and deployed into production as fast as possible. Docker consists of:     The Docker Engine - lightweight and powerful open source container virtualization technology combined with a work flow for building and containerizing your applications.     Docker Hub - SaaS service for sharing and managing your application stacks. Deployment:     Docker containers run (almost) everywhere. You can deploy containers on desktops, physical servers, virtual machines, into data centers, and up to public and private clouds.     Since Docker runs on so many platforms, it's easy to move your applications around. You can e...

Patching Linux Server

In this blog we are going to Patch Linux Machine Using up2date and yum. We are going to take backup of important fine and necessary steps after patching, backout plan if system crashed Backup of your important files ·          Take the back-up of the following files/commands. ·          Common for all revisions: ·          uname -a ·          ifconfig – a ·          fdisk -l ·          uptime ·          cat /etc/hosts ·          cat /etc/fstab ·          df -h ·          cat /etc/grub.conf ·          cat /etc/sysctl.conf ...