Posts

Posted on

AWS – Tag

$ aws ec2 create-tags \
    --prof My_AWS_PROF \
    --resources 'i-ID_MY_EC2_INSTANCE' \
    --tags '[{"Key":"Cost Center","Value":"-"},{"Key":"Compliance","Value":"-"},{"Key":"Project","Value":"MY PROJECT"}]'
$ aws rds add-tags-to-resource \
     --resource-name arn:aws:rds:REGION:MY_ACCOUNT:db:MY_DB \
     --tags '[{"Key":"Cost Center","Value":"-"},{"Key":"Compliance","Value":"-"},{"Key":"Project","Value":"MY PROJECT"}]'
Posted on

PCI – DSS – AWS Network

Posted on

AWS – Cost Management

Posted on

PCI – DSS – Hardening

CIS Apache HTTP Server Benchmarks
https://www.cisecurity.org/benchmark/apache_http_server/

CIS Apache HTTP Server 2.4 Benchmark 2.0.0 Checklist Details
https://nvd.nist.gov/ncp/checklist/521

CIS Apache HTTP Server 2.4 Benchmark
https://security.uri.edu/files/CIS_Apache_HTTP_Server_2.4_Benchmark_v1.2.11.pdf

SANS – The most trusted source for cyber security training, certification, and research.
https://www.sans.org/

  • Center for Internet Security (CIS)
  • International Organization for Standardization (ISO)
  • SysAdmin, Audit, Network, and Security (SANS) Institute
  • National Institute of Standards and Technology (NIST)
Posted on

PulseAudio – modules

pactl load-module module-loopback latency_msec=1
pactl unload-module module-loopback
pactl load-module module-echo-cancel aec_method=webrtc source_name=echocancel sink_name=echocancel1
pactl unload-module module-echo-cancel
Posted on

Android and amd64

/lib/systemd/system/anbox-container-manager.service

#ExecStartPre=/sbin/modprobe ashmem_linux
#ExecStartPre=/sbin/modprobe binder_linux
# mount -t binder binder /dev/binderfs
# mknod /dev/binder c 250 1
# mount -t cpuset none /dev/cpuset
# mkdir /dev/cpuset/camera-daemon
# chmod 777 /dev/cpuset/camera-daemon
# touch /dev/cpuset/camera-daemon/tasks
# chmod 777 /dev/cpuset/camera-daemon/tasks

config

CONFIG_ASHMEM=y 
CONFIG_ANDROID=y
CONFIG_ANDROID_BINDER_IPC=y
CONFIG_ANDROID_BINDERFS=y
CONFIG_ANDROID_BINDER_DEVICES="binder,hwbinder,vndbinder"
# systemctl restart anbox-container-manager.service
$ systemctl --user start anbox-session-manager.service
$ /usr/bin/anbox session-manager
Posted on

Rocket.chat + NewRelic

class Script {
    process_incoming_request({ request }) {
      var webhookPayload = request.content;
      var webhookIncidentId = webhookPayload.incident_id;
      var webhookSeverity = webhookPayload.severity;
      var webhookCurrentState = webhookPayload.current_state;
      var webhookPolicyName = webhookPayload.policy_name;
      var webhookConditionName = webhookPayload.condition_name;
      var alertColor = "warning";
      var channels = ["#cloud-team"];
  
      if(webhookCurrentState === "open") { alertColor = "danger";}
      
      if(webhookPolicyName === "Project A") { channels.push("#ProjectA"); }
      else if(webhookPolicyName === "Project B") { channels.push("#ProjectB"); }
      
      //console.log(request.content);
      //console.log("Channels: " + channels.join(", "));
            
      return {
          content:{
            channel: channels,
            attachments: [{

              title: webhookSeverity + ' - ' + webhookPolicyName,
              text: "Condition: " + webhookConditionName + "\nIncident Id: " + webhookIncidentId,
              color: alertColor,
              fields: [
                {
                  title: "Status",
                  value: webhookCurrentState
                }
              ]
            }]
           }
        };
      };
  };