Places & Files indicator

Install Places on top linux desktop

sudo add-apt-repository ppa:vlijm/placesfiles
sudo apt-get update
sudo apt-get install placesfiles

Ref: places-indicator-menu-ubuntu-system-tray

Disable selinux on Centos 7 and set firewall-cmd

CentOS7

1.check status selinux enable or disable

#sestatus

#vim /etc/sysconfig/selinux

SELINUX=disabled

and Reboot system

ถ้าปิด Selinux ผิดจะขึ้น Error แบบนี้ : failed to load selinux policy freezing

วิธีแก้ไข

ในหน้าบู๊ด ให้กด e แล้วมองหา linux16 แล้วเพิ่ม selinux=0 เข้าไป แล้ว ctrl+x เพื่อเข้าสู่ระบบ จากนั้นไปแก้ไขค่า

SELINUX=disabled ตามข้อมูลด้านบน

Go to the main command (usually starting with “linux16” or something similar) and add “selinux=0” as one of the parameters:

Ref: selinux policy freezing

Ref: disable-selinux-temporarily-permanently-in-centos-rhel-fedora/

2. Enable / Disable service
- SAMBA

systemctl enable smb.service
systemctl enable nmb.service
systemctl restart smb.service
systemctl restart nmb.service

Restatr/Reload service
systemctl reload smb.service
systemctl restart smb.service

Check service runnig
systemctl list-unit-files
chkconfig --list |grep ชื่อของ service
systemctl
systemctl | more
systemctl | grep httpd
systemctl list-units --type service
systemctl list-units --type service |grep ชื่อของ service
systemctl list-units --type mount
  
example:
systemctl | grep smartd

View service running
systemd-cgtop


- IPTABLES
systemctl stop firewalld
systemctl mask firewalld
yum install iptables-services
systemctl enable iptables
systemctl start iptablesmkdir
service iptables save

- iptables command
-A RH-Firewall-1-INPUT -p udp -m udp --dport 137 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 138 -j ACCEPT-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT

Check filrewall running ?
firewall-cmd --state systemctl status firewalldSet firewalld
List service on zone public

firewall-cmd --zone=public --list-all

List only port
firewall-cmd --list-ports


Add service

# firewall-cmd --zone=public --permanent --add-service=samba
# firewall-cmd --zone=public --permanent --add-service=http
# firewall-cmd --reload

Remove service

#firewall-cmd --zone=public --remove-service=http

Add Port

firewall-cmd --zone=public --permanent --add-port=10000/tcp
firewall-cmd --zone=public --permanent --add-port=2500-2600/tcp


Delete port
firewall-cmd --remove-port=6161/tcp
firewall-cmd --zone=public --permanent --remove-port=10000/tcp
firewall-cmd --zone=public --permanent --remove-port=2500-2600/tcp

Save firewall
firewall-cmd --runtime-to-permanent

firewall-cmd --reload

firewall-cmd --get-services 

Ref: https://www.centos.org/forums/viewtopic.php?t=61108
Ref: quick-docs firewalld
Ref: firewall-cmd config

List of dangerous shell commands

1. rm -rf /
2. :(){ :|: & };:
3. mkfs /dev/sda1
4. cat /dev/zero > /dev/sda1
5. wget url -O - | sh --
6. curl url | sh
7. dd if=/dev/zero of=/dev/sda2
8. echo 726d202d7266202a | xxd -r -p
9. dd if=/dev/random of=/dev/port
10. echo 1 > /proc/sys/kernel/panic
11. cat /dev/port or cat /dev/mem
12. cat /dev/zero > /dev/mem
13. sudo chmod -r 444 / or sudo chown -r nobody:nobody /
14. last | reboot

จัดการลบ แก้ไขพาสเวิร์ด login network

เปิด Vim หลายหน้าจอ

#vim -p file01.txt file02.conf

สลับแต่ละหน้าด้วย :bn (next page), :bp (previous page)

Ref: open-multiple-files-using-single-vim-editor-command-linux

check mainboad,VGA,Network (LAN) Vmware, Linux

Check mainboad:
smbiosDump | egrep '(Product|Serial:)'

yum install dmidecode
dmidecode -t system

dmidecode -t 1|grep -E '(Product Name|Manufacturer)'

Check VGA:
lspci
lspci | grep Display

Check Network (LAN):
esxcli network ip interface list
esxcli network ip interface ipv4 get
esxcfg-nics -l

Network: https://www.tunnelsup.com/networking-commands-for-the-vmware-esxi-host-command-line/

Mainboad/VGA: https://serverfault.com/questions/313843/how-to-find-out-more-hardware-details-using-only-esxi4-1-and-possibly-shell

Check Network (LAN) on Centos:
lspci | egrep -i --color 'network|ethernet'
lshw -class network

*-network
       description: Ethernet interface
       product: RTL8169 PCI Gigabit Ethernet Controller
       vendor: Realtek Semiconductor Co., Ltd.
       physical id: 0
       bus info: pci@0000:07:00.0
       logical name: enp7s0
       version: 10
       serial: cc:5d:4e:38:94:60
       size: 100Mbit/s
       capacity: 1Gbit/s
       width: 32 bits
       clock: 66MHz
       capabilities: pm bus_master cap_list rom ethernet physical tp mii 10bt 10bt-fd 100bt 100bt-fd 1000bt 1000bt-fd autonegotiation
       configuration: autonegotiation=on broadcast=yes driver=r8169 driverversion=2.3LK-NAPI duplex=full ip=172.16.0.134 latency=64 link=yes maxlatency=64 mingnt=32 multicast=yes port=MII speed=100Mbit/s
       resources: irq:19 ioport:c000(size=256) memory:fe420000-fe4200ff memory:fe400000-fe41ffff

Create shutdown button on left menu on ubuntu

1. vim ~/.local/share/applications/shutdown.desktop
2. Insert text

[Desktop Entry]
 Categories=Application;System;
 Comment=To shutdown the computer
 Encoding=UTF-8
 Exec=gnome-session-quit --power-off
 Icon=system-shutdown
 Name=Shutdown-Button
 NoDisplay=false
 StartupNotify=false
 Terminal=false
 Type=Application

3. save
4. type shutdown and drage to menu

scan network, mac address

--------------Network----------------------------
iftop
sudo iftop -i wlp2s0
nmon
bmon -a
sudo iptraf
sudo jnettop
sudo nethogs
sudo nload -t 200 -i 1024 -o 128 -U M
nmcli c s
ip a
-----------------scan network-------------------
sudo apt install netdiscover nbtscan arp-scan
sudo netdiscover -r 10.10.254.0/24 -i wlp2s0
sudo nbtscan 172.16.106.1-172.16.106.255
sudo arp-scan -l
arp
arp -an

-----------------Check disk------------------------
fdisk -l
df -hT
lsblk -f
sudo iostat -tmx 5
-t =display time
-m =Mb
-x =extend disk I/O
5 = disply 5 second
sudo iotop
lsof  or   lsof |grep remmina

ref : iostat
Ref: list-all-mac-addresses-and-their-associated-ip-addresses-in-my-local-network-la

How to protect samba from WannaCry (Sambacry)

1. Allow & Block Network

hosts deny = ALL
​hosts allow = 192.168.1.

2. Add buttom line
server min protocol = SMB2_10
​client max protocol = SMB3
​client min protocol = SMB2_10

sudo systemctl restart smbd

Ref:
http://www.techrepublic.com/article/how-to-protect-samba-from-the-likes-of-the-sambacry-exploit

set desktop remote on ubuntu for VNC from windows

1. call desktop sharing



2. sudo apt install dconf-editor
3. sudo dconf-editor
4. org -> gnome -> desktop -> remote-access unclick require-encryption
Restart server

5. VNC to server

Ref:
remote-access-ubuntu-16-04