One thing I like to do is put /var/log on its own volume. That keeps the root volume from overflowing and also gets the log files out of the way. However, in CentOS5 (and probably RHEL5), SELinux is probably going to complain unless we tell it to "fixup" the new filesystem.

1. Create the filesystem (I use ext3, so # /sbin/mke2fs -j /dev/mdX)
   
2. Mount it at a temporary location: # mkdir /mnt/log ; mount /dev/mdX /mnt/log
   
3. Copy the contents: # cp -a /var/log/* /mnt/log/
   
4. It may be necessary to "fixup" the new volume: # cd /mnt/log ; /sbin/restorecon -R *
   
5. Edit the /etc/fstab file to mount the new volume at /var/log
   
6. Reboot
   

AFAIK, that's the extent of what's needed. Looking at the directory listings using "ls -lZ" seems to show the correct SELinux flags on the files between the two different directories.

Labels: CentOS5, SELinux, ServerAdministration

Installing UltraVNC (see also "UltraVNC Installation")

1. Download UltraVNC for MS Windows
   
2. Run the setup program (currently this is: UltraVNC-100-RC203-Setup.exe)
   
3. Accept the license agreement and read the Information screen
   
4. Use the default install destination location
   
5. Choose "Complete Install"
   
6. Use the default Start Menu Folder
   
7. Turn ON "Register Ultr@VNC Server as system service"
   
8. Turn ON "Start or restart Ultr@VNC service"
   
9. Turn OFF the (3) options that create desktop icons
   
10. Turn ON "Associated .vnc files with Ultr@VNC Viewer"
    
11. Click "Install" to start the installation.
    

WinVNC: Default Local System Properties (see "configuration for details)

1. Turn OFF "Enable JavaViewer"
   
2. Turn ON "Display Query Window", Set the timeout to 60 seconds, with "Accept" as the default action.
   
3. Under "Multi viewer connections", CHANGE to "Keep existing connections"
   
4. Under "Authentication", set a secure default password
   
5. Under "Authentication", turn ON "Require MS Logon", turn ON "New MS Logon"
   
6. Click on "Configure MS Logon Groups", Add, enter "Administrators" (note the plural) and click "OK". Grant that group full control and click "OK" to close the UltraVNC Security Editor window.
   
7. Most other options can be left "as is"
   

AES Encryption plugin (a.k.a. DSM)

1. Download the AESV2 Plugin (currently: AESV2Plugin100.zip)
   
2. Extract the .DSM file to the program folder where you installed UltraVNC (usually: C:\Program Files\UltraVNC), see "DSM quick start" for more information.
   
3. Re-open the "Default Local System Properties" window for the UltraVNC server (Start -> UltraVNC -> UltraVNC Server -> Show Default Settings). Alternately, start up the service helper systray app (Run Service Helper) and go to "Admin Properties")
   
4. Under "DSM Plugin", turn ON the "Use:" checkbox and select "AESV2Plugin.dsm" from the list.
   
5. Click "OK"
   

Labels: ServerAdministration, UltraVNC, VNC

Various links about VNC

Virtual Network Computing (VNC) - Wikipedia entry about VNC.

Taking your desktop virtual with VNC by Tim Waugh

VNC FAQ-o-Matic

Making VNC more secure using SSH

Free and Easy Remote Access with VNC Reverse Connections

Geek to Live: Secure VNC with Hamachi

Secure VNC with two-factor authentication

Labels: ServerAdministration, VNC