Linux Journal | January 2016 | Issue
Total Page:16
File Type:pdf, Size:1020Kb
™ AUTOMATE Full Disk Encryption Since 1994: The Original Magazine of the Linux Community JANUARY 2016 | ISSUE 261 | www.linuxjournal.com IMPROVE + Enhance File Transfer Client-Side Performance Security for Users Making Sense of Profiles and RC Scripts ABINIT for Computational Chemistry Research Leveraging Ad Blocking WATCH: ISSUE Audit Serial OVERVIEW Console Access V LJ261-January2016.indd 1 12/17/15 8:35 PM Improve Finding Your Business Way: Mapping Processes with Your Network Practical books an Enterprise to Improve Job Scheduler Manageability for the most technical Author: Author: Mike Diehl Bill Childers Sponsor: Sponsor: people on the planet. Skybot InterMapper DIY Combating Commerce Site Infrastructure Sprawl Author: Reuven M. Lerner Author: GEEK GUIDES Sponsor: GeoTrust Bill Childers Sponsor: Puppet Labs Get in the Take Control Fast Lane of Growing with NVMe Redis NoSQL Author: Server Clusters Mike Diehl Author: Sponsor: Reuven M. Lerner Silicon Mechanics Sponsor: IBM & Intel Download books for free with a Linux in Apache Web simple one-time registration. the Time Servers and of Malware SSL Encryption Author: Author: http://geekguide.linuxjournal.com Federico Kereki Reuven M. Lerner Sponsor: Sponsor: GeoTrust Bit9 + Carbon Black LJ261-January2016.indd 2 12/17/15 8:35 PM Improve Finding Your Business Way: Mapping Processes with Your Network Practical books an Enterprise to Improve Job Scheduler Manageability for the most technical Author: Author: Mike Diehl Bill Childers Sponsor: Sponsor: people on the planet. Skybot InterMapper DIY Combating Commerce Site Infrastructure Sprawl Author: Reuven M. Lerner Author: GEEK GUIDES Sponsor: GeoTrust Bill Childers Sponsor: Puppet Labs Get in the Take Control Fast Lane of Growing with NVMe Redis NoSQL Author: Server Clusters Mike Diehl Author: Sponsor: Reuven M. Lerner Silicon Mechanics Sponsor: IBM & Intel Download books for free with a Linux in Apache Web simple one-time registration. the Time Servers and of Malware SSL Encryption Author: Author: http://geekguide.linuxjournal.com Federico Kereki Reuven M. Lerner Sponsor: Sponsor: GeoTrust Bit9 + Carbon Black LJ261-January2016.indd 3 12/17/15 8:35 PM JANUARY 2016 CONTENTS ISSUE 261 FEATURES 50 Secure File Transfer 72 Transferring Conserver Use RFC 1867, thttpd and Stunnel Logs to Elasticsearch to improve security. Auditing serial console access in Charles Fisher real time. Fabien Wernli 4 / JANUARY 2016 / WWW.LINUXJOURNAL.COM LJ261-January2016.indd 4 12/17/15 8:35 PM COLUMNS 26 Reuven M. Lerner’s At the Forge Client-Side Performance 32 Dave Taylor’s Work the Shell Planetary Age 36 Kyle Rankin’s Hack and / Full Disk Encryption 40 Shawn Powers’ 17 The Open-Source Classroom Profiles and RC Files 86 Doc Searls’ EOF What We Can Do with Ad Blocking’s Leverage IN EVERY ISSUE 8 Current_Issue.tar.gz 18 10 Letters 14 UPFRONT 24 Editors’ Choice 46 New Products ON THE COVER 0TWYV]L-PSL;YHUZMLY:LJ\YP[`W (\KP[:LYPHS*VUZVSL(JJLZZW (\[VTH[L-\SS+PZR,UJY`W[PVUW ,UOHUJL*SPLU[:PKL7LYMVYTHUJLMVY<ZLYZW 4HRPUN:LUZLVM7YVMPSLZHUK9*:JYPW[ZW ()050;MVY*VTW\[H[PVUHS*OLTPZ[Y`9LZLHYJOW 3L]LYHNPUN(K)SVJRPUNW 24 LINUX JOURNAL (ISSN 1075-3583) is published monthly by Belltown Media, Inc., PO Box 980985, Houston, TX 77098 USA. Subscription rate is $29.50/year. Subscriptions start with the next issue. WWW.LINUXJOURNAL.COM / JANUARY 2016 / 5 LJ261-January2016.indd 5 12/17/15 8:35 PM Executive Editor Jill Franklin [email protected] Senior Editor Doc Searls [email protected] Associate Editor Shawn Powers [email protected] Art Director Garrick Antikajian [email protected] Products Editor James Gray [email protected] Editor Emeritus Don Marti [email protected] Technical Editor Michael Baxter [email protected] Senior Columnist Reuven Lerner [email protected] Security Editor Mick Bauer [email protected] Hack Editor Kyle Rankin lj@greenfly.net Virtual Editor Bill Childers [email protected] Contributing Editors )BRAHIM (ADDAD s 2OBERT ,OVE s :ACK "ROWN s $AVE 0HILLIPS s -ARCO &IORETTI s ,UDOVIC -ARCOTTE 0AUL "ARRY s 0AUL -C+ENNEY s $AVE 4AYLOR s $IRK %LMENDORF s *USTIN 2YAN s !DAM -ONSEN President Carlie Fairchild [email protected] Publisher Mark Irgang [email protected] Associate Publisher John Grogan [email protected] Director of Digital Experience Katherine Druckman [email protected] Accountant Candy Beauchamp [email protected] Linux Journal is published by, and is a registered trade name of, Belltown Media, Inc. PO Box 980985, Houston, TX 77098 USA Editorial Advisory Panel Nick Baronian Kalyana Krishna Chadalavada "RIAN #ONNER s +EIR $AVIS -ICHAEL %AGER s 6ICTOR 'REGORIO $AVID ! ,ANE s 3TEVE -ARQUEZ $AVE -C!LLISTER s 4HOMAS 1UINLAN #HRIS $ 3TARK s 0ATRICK 3WARTZ Advertising E-MAIL: [email protected] URL: www.linuxjournal.com/advertising PHONE: +1 713-344-1956 ext. 2 Subscriptions E-MAIL: [email protected] URL: www.linuxjournal.com/subscribe MAIL: PO Box 980985, Houston, TX 77098 USA LINUX is a registered trademark of Linus Torvalds. LJ261-January2016.indd 6 12/17/15 8:35 PM Where every interaction matters. break down your innovation barriers power your business to its full potential When you’re presented with new opportunities, you want to focus on turning them into successes, not whether your IT solution can support them. Peer 1 Hosting powers your business with our wholly owned FastFiber NetworkTM, solutions that are secure, scalable, and customized for your business. Unsurpassed performance and reliability help build your business foundation to be rock-solid, ready for high growth, and deliver the fast user experience your customers expect. Want more on cloud? Call: 844.855.6655 | go.peer1.com/linux | Vew Cloud Webinar: Public and Private Cloud | Managed Hosting | Dedicated Hosting | Colocation LJ261-January2016.indd 7 12/17/15 8:35 PM Current_Issue.tar.gz 2016: a SHAWN POWERS Long Year know you’re expecting a sarcastic calculations this issue and explains how comment about an election year in to determine your age on other planets I the US making it seem longer than programmatically. There’s more to it than normal, but no, 2016 is literally a longer that, but whether you plan to stay on Earth year than most. (Although that bit about or migrate to Mars, learning to calculate it seeming even longer has some merit.) with the date command will be a useful What better way to start this bonus-sized skill no matter where you live. Speaking of year than with an issue of Linux Journal? time, Kyle Rankin gives a lesson in how he I’m not a fan of resolutions, but I do have spent many hours saving a few minutes. a challenge for you: learn something new More specifically, he teaches how to use this year. Personally, I plan to learn more the Debian preseed procedure to automate about development. I dabbled in 2015, disk encryption and partition creation. It and it’s given me the urge to learn more. sounds like something that wouldn’t be Reuven M. Lerner is the perfect author too complicated to automate, but Kyle to join on a journey like that, and this found it was a messy rabbit hole. His month, he teaches how to help improve column should at least provide a flashlight client-side performance on your Web if you decide to delve into a similar hole. applications. Sure, we could buy everyone I took a note from my own challenge faster computers, but Reuven shows that this month and learned the exact way Linux there are better (and cheaper) ways to systems deal with profile and RC files. It accomplish client-side improvements. seems like a trivial thing to learn about, but Dave Taylor does some really cool it turns out that the procedures for loading profiles and such are fairly complicated. I V VIDEO: was tired of just copy/pasting information Shawn Powers runs into files without knowing exactly why through the latest issue. some information goes into profiles and 8 / JANUARY 2016 / WWW.LINUXJOURNAL.COM LJ261-January2016.indd 8 12/17/15 8:35 PM CURRENT_ISSUE.TAR.GZ some into RC files, so I decided to get to then goes on to describe the process for the bottom of how those preference files consolidating log files into searchable are loaded. This month, I share the fruit of archives and even shows how to integrate my labor and hope to demystify the shell- console logs into a real-time monitoring based config files for everyone reading. solution. If you manage a large number of Encrypting filesystems and salting servers via console or serial (even over the hashes are common ways to protect LAN), you’ll want to read his article. DATA ON A SERVER 1UITE HONESTLY WERE Doc Searls finishes the issue by discussing beginning to see the value in encrypting the ramifications of ad blocking on the local data, and it’s becoming common modern Internet. If you browse the Web, for servers to be secured more than ever chances are pretty good that you use an before. Unfortunately, most security ad blocker to make your experience more breaches aren’t happening on the local pleasant. Blocking ads means blocking machines; rather, they’re happening over revenue for content creators, and rather the network. It doesn’t matter how secure than pretending it’s not an issue, we need your local filesystem might be, if you’re not to figure out how to respond in a way that transmitting and receiving data in a secure is useful both to consumers and content way, no amount of local encryption will creators. As usual, Doc has incredible protect your data. Charles Fisher not only insight, and you’ll want to check it out. exposes the weaknesses with traditional file This first issue of Linux Journal in 2016 transfer methods, but he also explains how may be brand new, but it still has all the to shore up network transfers when sending tech tips, product reviews and helpful and receiving data.