Forum archive

Download Firefox Security Risk Warning

I have been using Turnkey for years Never had a problem. Today attempted to download the domain controller appliance and Firefox prevented the download due to a security risk. Is …

Forum archive

Seeking Security Information

Every time I start to tinker with the security settings on this thing, I break it. So I've rebuilt my appliance (again) and rebuilt my wiki.. and manually migrated the content …

Forum archive

Leantime vulnerability?

A while ago I installed Leantime on Proxmox using TKL's template. It worked fine. I also run a mailserver (mailcow) at home and recently got listed again on Spamhaus' exploit …

Forum archive

Remediation for Security Risk - Limesurvey

Hello Turnkey Team, We are currently having an Turnkey product which is Limesurvey from AWS Marketplace with below link: AWS Marketplace: LimeSurvey - Survey application powered …

Forum archive

How to secure RedMine??

How can I prevent my TurnKey instance being hacked? What measures should I take? I have received an email from AWS telling me that my instance has been used for DoS attacks, and …

Forum archive

Please Improve Security Of hub.turnkeylinux.org

Hi, Please Improve Security Of hub.turnkeylinux.org See security report @ https://www.ssllabs.com/ssltest/analyze.html?d=hub.turnkeylinux.org Ouch, A "C". SSL 3, are you serious!! …

Forum archive

Redmine Security Vulnerability

Since there is a critical Ruby on Rails vulnerability in Redmine 2.2.3, shouldn't the official Redmine app be updated to the current stable version of Redmine? …

Forum archive

Updates to OTRS Appliance

Hello, I have installed and configured the applience however I have noticed that it is several versions behind. What can I do to upgrade the applience? Is there a repo I can add …

Forum archive

Can ping anything but www.turnkeylinux.org ?

Hello Everyone, I found this problem when I was trying to do the security update cron by executing /usr/sbin/cron-apt. The log says it can't access the website. So, I then tried …

Forum archive

2 passwords in sencha-12.0

hi~ I've recently found 2 passwords in the source code of sencha-12.0. one is "I7aUlKKVtAUececg" in turnkey-sencha-12.0-squeeze-x86-xen\etc\mysql\debian.cnf the other is …

Forum archive

Redmine and rails 2.3.14 ?

Does anyone aware of an upgrade path for rails 2.3.14 on tkl/redmine 12.0 ? I ask because of the CVEs detailed here : …

Forum archive

Deny root login from Webshell?

Hi all, I'm trying to figure out how to deny root from logging in through the webshell. I love the fact that an SSH session is available right through a browser, but worry about …

Forum archive

Samba

I am having trouble with the "Limit to possible list" feature and I was wondering if I could get some guidance, I am fairly new to Samba configurations and I feel as though I've …

Forum archive

Security and Configuration

I want to throw out the line as to what folks are doing with Security and Optimization on MySQL and TKL sites in general. I have had a few sites get really hammered by spiders and …

Forum archive

Confirm Security Updates Install?

How can I confirm when security updates install? I launched a fresh VM of turnkey-lamp-11.2-lucid-x86, and I did not have a DHCP available, so I had to skip the security installs …

Forum archive

Restricting access to a site for a TKLPatch

I'm workng on a patch, presented here. I'd lile to limit who has access to the application via Apache2. The app resides at /var/www/virtualbox. I feel like I've done my due …

Forum archive

Turnkey LAMP hang at setting up udev

hi ppl, last nite, im install a new turnkey lamp and doing a full system-upgrade #apt-get dist-upgrade. after that.. while setting up udev, it take too long and no respond after …