security

Show the places you logged in from

I only use a few locations to log into the shell accounts I have, so looking at whether an unfamiliar host has used logged in can help heighten security. Only the time of the last login can help me detect whether somebody has been using one of the machines I've been using to access my account without my knowledge, so it's a good idea to also show the last login with the date and time.

Drupal HTTPS detection when running PHP-cgi (with lighttpd)

Drupal does not support lighttpd as a server for deployement. And appart form the problems you may have with .htaccess files not working, there is also another minor bug: https detection in drupal is done with the $_SERVER['HTTPS'] variable, which is not available when running PHP in CGI mode with lighttpd. The result is that you will be moved to http after logging in via https, which is not what you want. So a quick fix is in order.

Automated static blacklisting for tcp services

There are soooo many hacked computers on the word, looking trough the logs becomes a real problematic chore... The simplest way to solve this problem is blacklisting servers you don't want.

Communicate the permission for userspace mounting of portable storage

There is a problem with user permissions and portable disks. UIDs are number and not portable between Linux systems (the same number can be a completely different user) and the same holds for groups. This leads to a problem when you start using a filesystem which support permissions on something like an USB stick but this is where the problems start, because FAT32 seems to be the only solution. Let me break the problem down for you...

Syndicate content