Hardening SUSE LInux 11.1 - questions

You might want to run top in a console and see what is using CPU and memory. You will be surprised.

Also memory usage is a whole lot different in Linux then in Windows. Linux hates to see unused memory and tends to fill it up with cache. Cache can be converted to regular memory as needed.So available memory is free memory+cache.

@gogalthorp:

You might want to run top in a console and see what is using CPU and memory. You will be surprised.

Thanks for the “top” suggestion gogalthorp!.
I’d was already familiar with the general usage of top (e.g. killing hanging programs,tasks), but after a brief man top<enter> a fascinating new world opened up for me :slight_smile:

TOP_related_question
I have tested the Top “A” and the Top “G” window feature.
I still have a question that the op_man page could not answer for me:

(how) is it possible to show ALL TASK in a console window?

  • Do i have to reduce the console “fontsize” for that, so that all top_task_lines do fit in a console window (again)?
  • Is there another way?

Thanks for the tips :slight_smile:

i do not know the answer to your Q, but have a look at:

htop
atop
ntop
iotop

:wink:


palladium

If you simply want to list the processes

ps -A

will do it

After a reread of the question. You might want to look a t a GUI tool (if KDE check System Monitor). In general there are far too many tasks to list in a single screen.

@gogalthorp: That one I already discovered :slight_smile:
It gives me indeed a nice tree-shaped (mother ans child) process overview. After reading the man page of PS, this is a tool worth investigating.

@Palladium: Thanks

Regards, Ronald

Yes, from a security point of view, you can make a strong argument for ‘less is more’. All I was suggesting is that the speed aspect is likely to be negligible, and only detectable in extreme circumstances.

@markone:

All I was suggesting is that the speed aspect is likely to be negligible, and only detectable in extreme circumstances.

Suggestion noted markone! Can you tell me “How extreme is extreme” markone? I’m running OpenSuse on a “several years old (almost ancient) computer” from which i do not dare to mention the specs here :slight_smile:

I try “to squeeze the max outof” this old system, before my new computing_device arrives, but running an “ultra light Open Suse” variant with only the bare bones / elementary services.

Regards Ronald

There is nothing hidden in Linux. Look at top or top variant and see what is running It also shows memory used.

What you want to do by “trimming the fat” is not bad but without knowing the usage patterns it is very hard to advise what must stay and what might go. Pinpoint a process that appears not to be used and determine its function (Google is your friend) if it appears not needed in your operational situation shut it down. You may need to change the init 3 and 5 processes for some to keep from starting at boot. Now if nothing needed that process all is good if something did you will know about it eventually. So you are trading a small increase in efficiency for a large possible instability.
:X

@gogalthorp

There is nothing hidden in Linux.

That is so true gogalthorp! and i really like (the) Linux (Community) for that!

But…looking from my current perspective… i have just begon to walk around in the Linux landscape, and i do not know everything i would LIKE to know about the Linux OS… So for ME personally somethings are still “hidden” in the Linux documentation forest or man, info pages or other sources about Linux right?

without knowing the usage patterns it is very hard to advise what must stay and what might go

I fully agree to this point gogalthorp.
As long as i do not EXACTLY know what a service of daemon does in the complete linux OS picture, i leave it on my machine… until i have found the right level of documentation, that tells me EXACTLY

  • What its true purpose is
  • What services is provides to other daemons, task, os_parts
  • Which programs depend on it, for their survival

And when i have figured out all of the above answers, then i will decide wether the service, daemon, software stays on my computer or not :wink:
There is no way i am endangering the stability of my system, by removing stuff i am not 100% fully aware of it’s function and its place in the “the Bigger Linux architectural picture”

(Google is your friend)

To this i do not agree with you
In this (open suse) case NOVELL should be my best friend since they “own” “brand” and “sell” the Open Suse flavour of linux.
The website of a manifacturer is always the first source of info where i start looking for documentation. After all… they where the girls, guys who had the last hands on the product before it appeared at my computer.If that fails, then i use an internet search engine of community resources (like this forum, websites, newsgroups). I do not “google by default” :wink: since I am from the Altavista, Yahoo, Lycos, Excite, Hotbot generation

So you are trading a small increase in efficiency for a large possible instability.

No sir! This is for me a “journey through the Linux landscape” and everything i learn along the way is highly appreciated. The end result will be that i have learned “enough :-)” about Linux to fully master and tweak my own system, to be able “to see how stuff works under the hood”.
The “trimming the fat” of my current Linux installation is just a part of a larger journey through Linuxland, a means to an higher end.

Thank you all for guiding me on this journey everyone!

ronaldvermeij wrote:
>> (Google is your friend)
> To this i do not agree with you
> In this (open suse) case NOVELL should be my best friend since they
> “own” “brand” and “sell” the Open Suse flavour of linux.
> The website of a manifacturer is always the first source of info where
> i start looking for documentation.

google is still your friend…and there seems to be no end to the
universe of documentation available…just sharpen your google-fu…

for example you can use a site specifier in your search strings, like:

site:opensuse.org [search string]

returns hits from anywhere in openSUSE-land, while this

site:forum.opensuse.org [search string]

returns only from these fora, and this

site:en.forum.opensuse.org [search string]

only from the openSUSE wiki, and this

site:opensuse-community.org [search string]

from the openSUSE Community site (have you discovered that yet?)

and, don’t overlook the corporation digs at

site:novell.com [SUSE search string]

see, for example

http://www.google.com/search?q=site%3Anovell.com+SUSE+documentation

finally, if i’ve not mentioned it to you before:
http://tinyurl.com/ybklh48


palladium

Thanks for reminding this searchmaster Palladium :slight_smile:
Practicing my “Google Fu” i must,
Google manual reading is wise suggestion
May the search force be with you

on Google
Google is not the only “average” searchengine in this Google-verse :wink:
I often use META search engines (higherlevel_searchengines that question other (lowerlevel)searchengines like e.g. Google, MSN, Bing, Yahoo).
http://upload.wikimedia.org/wikipedia/commons/thumb/b/b8/Search-engine-diagram-en.svg/256px-Search-engine-diagram-en.svg.png

This way i brooaaddeen my search results. Google may be the biggest and most dominating search engine, but there were other and older searchengine on the block, long before Google appear at the search-engine horizon.

on search engines in general
It also helps to be aware how the backends of the "major (lowlevel) searchengines are interconnected.
http://www.searchengineoptimizationcompany.ca/img/search-engines.jpg

This helps you to evaluate the search result, returned by one (lowlevel) search engine vrs result for another (lowlevel) search engine.
This is the reason why i use (higher level) metasearch engines to first search in the w-i-d-t-h and later a lowlevel searchenige to search in the depth of information.

Your young search apprentice,
Ronald

List of META search engines can be found here:
<background>
Metasearch engine - Wikipedia, the free encyclopedia
Meta-Search Engines-The Library-University of California, Berkeley
<meta search websites>
MetaCrawlerWeb Search Home Page
Metacrawlers and Metasearch Engines - Search Engine Watch (SEW)
<meta search engine overview>
Meta Search Engine List

ronaldvermeij wrote:
> Google may be the biggest and
> most dominating search engine, but there were other and older
> searchengine on the block, long before Google appear at the
> search-engine horizon.

oh absolutely! i remember when the G first came out…at the time i was
using mosty Yahoo, but think i had these (and others) in my stable:

AltaVista
Northern Light
Magellan
Looksmart
All the Web
Locos Crawler lycos.cs.cmu.edu/
webcrawler webcrawler.com/
WWW - World-Wide Web Worm www.cs.colorado.edu/home/mcbryan/WWWW.html/
All-in-one Search www.albany.net/~wcross/all1srch.html/
Internet Exploration www.amdahl.com/internet/meta-index.html/
abiWeb www.cs.indiana.edu/aliweb/form.html/
EINet Galaxy galaxy.einet.net/
JumpStation js.stir.ac.uk/jsbin/jsii/
Savv ySearch www.cd.colostate.edu/%7Edreiling/smartform.html/

yep…back then finding stuff was pretty difficult.

especially if the candle went out because then you couldn’t see the
screen…


palladium

especially if the candle went out because then you couldn’t see the screen…

That certainly shines a different searchlight on this topic palladium :slight_smile:
How about a computer-mindwave-reading device for backup in the dark ages?

Thank for the other search engines! (Some of them i’d never heard of). This sure widens my search horizon again.

regards, Ronald