Thursday, January 19, 2012

Fedora 16 Linux D600 Clockspeed stuck at 600MHZ

Dell D600 laptop is reporting cpuMHz: 600MHz in /proc/cpuinfo. In order to set to appropriate speed(1600MHz) needed to:

- Install kernel-tools.
- nano /etc/sysconfig/cpupower and set both both options to performance.
- To set immediatly ran ' cpupower frequency-set -g performance'

Fan started spinning! 'cat /proc/cpuinfo' shows cpuMHz 1600!

Documentation and googling says something about 3rd Party power cords cause this and sometimes cpu gets stuck. System had been running slow at times when under load so not "ondemand" setting may have not been working.

Also,

Setting 'processor.ignore_ppc=1' as command line option on boot reduced fan spinup and allowed processor to set speed ondemand.

Notes/Acknowledgment:
"How Can I Disable CPUscaling In Fedora 16 - Post #3" - http://forums.fedoraforum.org/showthread.php?t=272109

"CPU Frequency Scaling In The Linux Kernel - CPU Throttled Down To 800 After 15-30 Mins" - http://comments.gmane.org/gmane.linux.kernel.cpufreq/6974

Wednesday, January 11, 2012

Resizing/Growing Encrypted BTRFS Root Partition

Installed Fedora 16 into 10GB KVM guest. Copied kvm img file to laptop with 110GB drive. Install created with 1MB BIOS boot partition, 500MB Grub boot (/boot) partition, 2GB encrypted swap partition and 10GB encrypted root (/) partition. Increased root partition with the following steps after install and 'yum update'.

- Booted livecd (Parted Magic, SystemRescueCD, etc).
- Used 'parted' to print partition table info. Noted Start location.
- Used 'parted' to delete partition. Ex. rm 4
- Used 'parted' to recreate partition. Set start to noted start location. Ex. 'mkpart 4 100%'
- Restarted system.
- Booted livecd again.
- Opened crypt with cryptsetup (cryptsetup luksOpen ). Crypt opened at /dev/mapper/ . Ex. 'cryptsetup luksOpen /dev/sda4 sda4'
- Resized crypt with cryptsetup (cryptsetup resize ). Crypt resized to 100% of partition space. Ex. 'cryptsetup resize sda4'
- Mounted BTRFS Filesystem (mount ). Ex.'mount /dev/mapper/sda4 /mnt/sda4'
- Resized BTRFS Filesystem (btrfs filesystem resize max ). Filesystem grew to size of crypt. Ex. 'btrfs filesystem resize max /mnt/sda4'
- Unmounted BTRFS Filesystem(umount ). Ex. 'umount /mnt/sda4'
- Closed crypt (cryptsetup luksClose ). Ex. 'cryptsetup luksClose sda4'
- Restarted system

The BTRFS partition resized to 100% of the free space.


Friday, April 08, 2011

Fedora 14 Adobe Reader 9.4.2

Adobe not launching due to SELinux denial policy.

open terminal
change user context to root
run chcon -t execmem_exec_t '/opt/Adobe/Reader9/Reader/intellinux/bin/acroread'

Adobe should run.

References:
- http://www.if-not-true-then-false.com/2010/install-adobe-acrobat-pdf-reader-on-fedora-centos-red-hat-rhel/
- https://bugzilla.redhat.com/show_bug.cgi?id=630217

Friday, December 17, 2010

Verifying Virtualization Extensions

- Enable virtualization extensions in BIOS
- Issue one of the following commands to check cpu flags:

grep -E 'svmvmx' /proc/cpuinfo
or
cat /proc/cpuinfo grep vmx svm

if the command outputs, the virtualization extensions are enabled. If there is no output your system may not have the virtualization extensions or the correct BIOS setting enabled.
References:

Thursday, February 12, 2009

Host-Host IPSec Fedora 10 & XP (PSK)

Setup Fedora using system-config-network
What is needed:
- Make sure system is up2date.
- Just follow wizard. Be sure to let racoon handle security associations.

Setup XP using secpol.msc
What is needed:
- outbound filter for xp machine out to Fedora box. Uncheck Mirrored option.
- outbound security rule for xp out to Fedora box using outbound filter.
- inbound filter for Fedora box into XP box. Uncheck Mirrored option.
- inbound security rule for Fedora box into XP box using inbound filter.
- Filter action with AH set to SHA1 and ESP Integrity set to SHA1 and Encryption set to 3DES. Use filter action for both rules, inbound and outbound. *** Important ***

Notes:
Fedora doesn't allow for configuration of AH or ESP only. XP IPsec configuration must be done with consideration the AH and ESP algorithims must be configured.

References:

Configuring IPsec on your XP Professional laptop
Cannot use IPsec tools with ESP or AH only

Thursday, April 10, 2008

Understanding Access Control Systems

Access control systems provide Identification, Authentication and Authorization for systems. Three of the most popular types are

Discretionary Access Control(DAC) - Think of NTFS permissions and ACL Lists.
Mandatory Access Control(MAC) - Think SELINUX. Subjects and objects are given security attributes that determine authorization.
Role Based Access Control(RBAC) - Think NT/2K/2K3 built-in groups. Built-in groups

Wednesday, May 10, 2006

Cisco Router & Switch Password/Reset procedures

Routers

The short and skinny on recovering Cisco router passwords can be summarized into 11 steps as follows:

1. Boot router
2. Send Break command
3. Set configuration register to bypass NVRAM
4. Reload/reboot router
5. Say no to initial setup dialog questions
6. Enter enable mode
7. Copy startup-config running-config
8. Set passwords from global configuration mode
9. Reset configuration register to load startup-config from NVRAM
10. Copy running-config startup-config
11. Reload/reboot router

In short, this process bypasses the startup-config on boot and therefore no passwords are set.

Note: You can also run show startup-config at step 6 to read the clear-text password.

Switches

The short and skinny on recovering Cisco switch password can be summarized into 12 steps as follows:

1. Boot switch
2. Send Break command or you may have to use Mode button on switch
3. Load flash initialization and helper
4. Rename flash:config.text flash:config.old
5. Reboot or use boot command
6. Say no to initial setup dialog
7. Enter enable mode
8. Rename flash:config.old flash:config.text
9. Copy flash:config.text system:running-config
10. Set passwords from global configuration mode
11. Copy running-config startup-config
12. Reload/reboot switch

In short, this process boots the switch without a configuration and therefore no passwords are set.

Note: You can also run show flash:config.text at step 4 to read the clear-text password.

The previous procedures do not detail the password recovery/reset procedure but are a summary of the steps performed.