Re: extrange passwd behaviour

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 00:58:59 +0900, Hideki Yamane wrote: Can't be NIS. NIS will transport any password style faithfully. Of course the master server must support MD5 passwords if you change your password and the passwd command sends an MD5 password to the yppasswordd. I've heard about

debianutils / coreutils

2003-12-07 Thread mi
Hello, I tried to upgrade debianutils from 1.16 to 1.16.2woody1 and retreived the following error: (Reading database ... 111696 files and directories currently installed.) Preparing to replace debianutils 1.16 (using .../debianutils_1.16.2woody1_i386.deb) ... Unpacking replacement

secure file permissions

2003-12-07 Thread mi
Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) --

Re: secure file permissions

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? You want to

Re: extrange passwd behaviour

2003-12-07 Thread Giacomo Mulas
On Sat, 6 Dec 2003, Hideki Yamane wrote: i was talking about i dont know why it is default to use unsecure crypt() instead of md5. But I can think of something like compatibility (to what?) :) to ...maybe NIS ? I use NIS with md5, no compatibility problems at all as long as all clients

Re: secure file permissions

2003-12-07 Thread Tim Nicholas
mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) $ ls -l /etc/passwd

Re: secure file permissions

2003-12-07 Thread Horst Pflugstaedt
On Sun, Dec 07, 2003 at 09:27:04AM +0100, mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? %--(6)--$ ls -l /etc/passwd -rw-r--r--1 root root 1276 17. Sep 22:57 /etc/passwd I restricted them to rw for root only, but some

Re: debianutils / coreutils

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: I tried to upgrade debianutils from 1.16 to 1.16.2woody1 and retreived the following error: (Reading database ... 111696 files and directories currently installed.) Preparing to replace debianutils 1.16 (using .../debianutils_1.16.2woody1_i386.deb) ...

Re: secure file permissions

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? They are both 644 by default. I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ?

Re: Upgrading Kernels...

2003-12-07 Thread Magnús Þór Torfason
As a member of the mass of slightly advanced skills trying to use Debian for their typical day-to-day server needs, I am put rather off-balance by the issues presented by the recent kernel compromise. I have an installation that has run quite well, and have been running regular upgrades on the

Re: Upgrading Kernels...

2003-12-07 Thread crozierm
I believe that this issue has caused serious doubts for many users about the possibility of running a typical secure linux server with medium sysadmin skills. As I gather, running apt-get upgrade is not sufficient to patch a vulnerable system for this exploit, meaning that the method

Re: Upgrading Kernels...

2003-12-07 Thread Paul E Condon
On Sun, Dec 07, 2003 at 06:11:52PM +, Magn?s ??r Torfason wrote: As a member of the mass of slightly advanced skills trying to use Debian for their typical day-to-day server needs, I am put rather off-balance by the issues presented by the recent kernel compromise. I have an

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-07 Thread Adam ENDRODI
On Thu, Dec 04, 2003 at 07:54:03AM -0800, Karsten M. Self wrote: on Wed, Dec 03, 2003 at 04:57:29PM +0100, Adam ENDRODI ([EMAIL PROTECTED]) wrote: I tend to disagree. The kernel is a versatile program, it can be patched, configured and compiled in too many ways. ...including many of

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-07 Thread Adam ENDRODI
On Fri, Dec 05, 2003 at 08:32:02PM +0100, Florian Weimer wrote: Keep in mind that there is no official security contact for the kernel, and no established bug handling procedure. What about http://bugzilla.kernel.org ? Time to fix is now measured in months, and official kernel release

Is there a FAM(file alteration monitor) exploit in the wild?

2003-12-07 Thread Me
Dec 6 16:08:07 plaguesplace fam[3044]: fd 5 message length 67181060 bytes exceeds max of 4136. Dec 6 16:08:07 plaguesplace fam[3044]: fd 6 message length 1129270862 bytes exceeds max of 4136. Dec 6 16:08:07 plaguesplace fam[3044]: fd 5 message length 83951621 bytes exceeds max of 4136. Dec 6

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-07 Thread Dale Amon
On Sun, Dec 07, 2003 at 11:27:45PM +0100, Adam ENDRODI wrote: Little details of a system are subject to change and my observation is that the more you customize the more likely you'll end up in trouble. Clearly, in my case with my little changes I diverge from the Debian (and likely other)

Re: extrange passwd behaviour

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 00:58:59 +0900, Hideki Yamane wrote: Can't be NIS. NIS will transport any password style faithfully. Of course the master server must support MD5 passwords if you change your password and the passwd command sends an MD5 password to the yppasswordd. I've heard about

secure file permissions

2003-12-07 Thread mi
Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) --

debianutils / coreutils

2003-12-07 Thread mi
Hello, I tried to upgrade debianutils from 1.16 to 1.16.2woody1 and retreived the following error: (Reading database ... 111696 files and directories currently installed.) Preparing to replace debianutils 1.16 (using .../debianutils_1.16.2woody1_i386.deb) ... Unpacking replacement

Re: secure file permissions

2003-12-07 Thread Lupe Christoph
On Sunday, 2003-12-07 at 09:27:04 +0100, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? You want to

Re: secure file permissions

2003-12-07 Thread Horst Pflugstaedt
On Sun, Dec 07, 2003 at 09:27:04AM +0100, mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? %--(6)--$ ls -l /etc/passwd -rw-r--r--1 root root 1276 17. Sep 22:57 /etc/passwd I restricted them to rw for root only, but some

Re: extrange passwd behaviour

2003-12-07 Thread Giacomo Mulas
On Sat, 6 Dec 2003, Hideki Yamane wrote: i was talking about i dont know why it is default to use unsecure crypt() instead of md5. But I can think of something like compatibility (to what?) :) to ...maybe NIS ? I use NIS with md5, no compatibility problems at all as long as all clients

Re: secure file permissions

2003-12-07 Thread Tim Nicholas
mi wrote: Hello, Can you tell me what are the default permissions for /etc/group and /etc/passwd ? I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ? (Debian Woody 3.0 r1) $ ls -l /etc/passwd

Re: debianutils / coreutils

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: I tried to upgrade debianutils from 1.16 to 1.16.2woody1 and retreived the following error: (Reading database ... 111696 files and directories currently installed.) Preparing to replace debianutils 1.16 (using .../debianutils_1.16.2woody1_i386.deb) ...

Re: secure file permissions

2003-12-07 Thread Santiago Vila
On Sun, 7 Dec 2003, mi wrote: Can you tell me what are the default permissions for /etc/group and /etc/passwd ? They are both 644 by default. I restricted them to rw for root only, but some things like exim (and possibly dpkg ?) seem to need read access there too. What's recommendet ?

Re: Upgrading Kernels...

2003-12-07 Thread crozierm
I believe that this issue has caused serious doubts for many users about the possibility of running a typical secure linux server with medium sysadmin skills. As I gather, running apt-get upgrade is not sufficient to patch a vulnerable system for this exploit, meaning that the method

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-07 Thread Adam ENDRODI
On Thu, Dec 04, 2003 at 07:54:03AM -0800, Karsten M. Self wrote: on Wed, Dec 03, 2003 at 04:57:29PM +0100, Adam ENDRODI ([EMAIL PROTECTED]) wrote: I tend to disagree. The kernel is a versatile program, it can be patched, configured and compiled in too many ways. ...including many

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-07 Thread Adam ENDRODI
On Fri, Dec 05, 2003 at 08:32:02PM +0100, Florian Weimer wrote: Keep in mind that there is no official security contact for the kernel, and no established bug handling procedure. What about http://bugzilla.kernel.org ? Time to fix is now measured in months, and official kernel release

Is there a FAM(file alteration monitor) exploit in the wild?

2003-12-07 Thread Me
Dec 6 16:08:07 plaguesplace fam[3044]: fd 5 message length 67181060 bytes exceeds max of 4136. Dec 6 16:08:07 plaguesplace fam[3044]: fd 6 message length 1129270862 bytes exceeds max of 4136. Dec 6 16:08:07 plaguesplace fam[3044]: fd 5 message length 83951621 bytes exceeds max of 4136. Dec 6

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-07 Thread Dale Amon
On Sun, Dec 07, 2003 at 11:27:45PM +0100, Adam ENDRODI wrote: Little details of a system are subject to change and my observation is that the more you customize the more likely you'll end up in trouble. Clearly, in my case with my little changes I diverge from the Debian (and likely other)