Tags
#security
SELinux "avc: denied": read the denial, then fix the label, the boolean or the port
Fix SELinux "avc: denied" on RHEL, Rocky and AlmaLinux: read the AVC line, then fix file labels with restorecon and semanage, booleans with setsebool, or ports.
Intermediate · 4 min read
Nginx for WordPress with PHP-FPM: a complete, safe config
Run WordPress on Nginx and PHP-FPM: a complete HTTPS config, pretty permalinks, blocking PHP in uploads, upload limits, caching and the common errors, step by step.
Intermediate · 3 min read
RDP "An authentication error has occurred": CredSSP encryption oracle and other causes
Fix Remote Desktop "An authentication error has occurred" and "CredSSP encryption oracle remediation": update both machines, check NLA, passwords, time and port 3389.
Intermediate · 4 min read
Kubernetes "container has runAsNonRoot and image will run as root": fix the image or the pod
CreateContainerConfigError with runAsNonRoot: the image runs as root or has a non-numeric USER. Fix the Dockerfile, set runAsUser, and keep restricted security.
Intermediate · 4 min read
Git "fatal: detected dubious ownership in repository": fix it without turning the check off
Fix Git "detected dubious ownership in repository": run Git as the owner, fix the ownership, or trust one path with safe.directory, on servers, Docker and CI.
Beginner · 3 min read
Redis "MISCONF Redis is configured to save RDB snapshots": why writes stopped
Fix Redis MISCONF "unable to persist to disk": read the log, then fix disk space, folder permissions or fork memory — and check the instance was not attacked.
Intermediate · 4 min read
SSH "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!": check it, then fix known_hosts
Fix the SSH host key warning safely: find out why the key changed, verify the new fingerprint on the server, then remove the old key with ssh-keygen -R.
Beginner · 3 min read