<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.sig
{mso-style-name:sig;}
span.sigsmall
{mso-style-name:sigsmall;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";
color:black;
mso-fareast-language:EN-US;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="FR" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hello all,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">I found that rudder creates a lot of I/O each 5 minutes.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">It seems normal that he works each 5 minutes due to the default configuration but I/O creation seems not normal .<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">We only have 4 rules applied on this node :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">Rudder system policy: basic setup (common) => default</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">Rudder system policy: daily inventory => default</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">00_Constante – myserver => variable definition</span></b><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">(with theses 3 first rules we have 270Ko/s each 5 mins)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">And when we add another rule we have 778Ko/s each 5 mins :
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">02_Init Système<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----repertoire fichiers</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
folder creation with enforced permissions<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----SSH
</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">=> edit ssh configuration<b>
</b></span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Profile Root & Repo</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
repository file creation with enforced content<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----User perso2</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
user creation with « Everytime » option checked (corresponding to « </span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;background:white">How often do you want to want to check the password »)</span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Appli Rsyslog Conf</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
modification of the rsyslog.conf (no enforced content)<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permissions /projet</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
set permission on two folder<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Sudoers
</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">=> modification on the sudoers file with « Enforce content of the file ONLY at creation » checked</span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Service Rsyslog</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">
=> start service on boot, restart service if number of process instances less than 0<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permission Sources</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
folder creation with permissions adjusted recursively<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----profile user exploit</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
2 files creation, with permission set<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Clés SSH</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
add two ssh key<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----Permission user</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"> =>
set permission on a file<b><o:p></o:p></b></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">-----User perso
</span></b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR">=> user creation with « Everytime » option checked (corresponding to « </span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;background:white">How
often do you want to want to check the password »)</span><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333;mso-fareast-language:FR"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Have you got one idea of what can be write each 5 mins ??? (because normally it will only write if values are changed)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">BR<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">CJARD <o:p></o:p></span></p>
</div>
</div>
-------------------------------------------------------------------------<br>
Les informations ou pieces jointes contenues dans ce message sont
confidentielles. Seul le destinataire expressement vise peut en prendre
connaissance. Toute autre personne qui en divulguera, diffusera ou prendra des copies sera passible de poursuites. La societe Ouest-France decline en outre, toute responsabilite de quelque nature que ce soit au titre de ce message s'il a ete altere, deforme ou falsifie.
</body>
</html>