Re: aide, apt-get and remote management...

2004-01-19 Thread Lupe Christoph
On Sunday, 2004-01-18 at 13:22:27 -0800, Johannes Graumann wrote: Hello, Where are the options below from? I run aide 0.10, which is according to the sourceforge site the current one and it doesn't like it. Also as someone else mentioned: http://www.cs.tut.fi/~rammer/aide.html says Future

Re: Release.gpg files gone?

2004-01-19 Thread Camillo Särs
Matt Zimmerman wrote: This may have been the case with apt-secure, but this functionality is now merged into apt 0.6 (currently in experimental) in a different way which does not prevent downloads of unauthenticated packages altogether. Instead, it requires confirmation. Matt, I'm sure I'm not

(php?) bug exploit report

2004-01-19 Thread Csan
Hello debian-security, One of my servers has been cracked into and I am looking for the weak spots of the system and also looking for ways to lock the secholes I might (also) have. The linux box is an up-to-date woody (incl. security updates). My first question is how come such a thing worked on

Re: (php?) bug exploit report

2004-01-19 Thread J.H.M. Dassen (Ray)
On Mon, Jan 19, 2004 at 14:40:12 +0100, Csan wrote: One of my servers has been cracked into and I am looking for the weak spots of the system and also looking for ways to lock the secholes I might (also) have. The linux box is an up-to-date woody (incl. security updates). My first question

Re: Release.gpg files gone?

2004-01-19 Thread Matt Zimmerman
On Mon, Jan 19, 2004 at 12:03:51PM +0200, Camillo S?rs wrote: Matt Zimmerman wrote: This may have been the case with apt-secure, but this functionality is now merged into apt 0.6 (currently in experimental) in a different way which does not prevent downloads of unauthenticated packages

Re: aide, apt-get and remote management...

2004-01-19 Thread Lupe Christoph
On Sunday, 2004-01-18 at 13:22:27 -0800, Johannes Graumann wrote: Hello, Where are the options below from? I run aide 0.10, which is according to the sourceforge site the current one and it doesn't like it. Also as someone else mentioned: http://www.cs.tut.fi/~rammer/aide.html says Future

Re: Release.gpg files gone?

2004-01-19 Thread Camillo Särs
Matt Zimmerman wrote: This may have been the case with apt-secure, but this functionality is now merged into apt 0.6 (currently in experimental) in a different way which does not prevent downloads of unauthenticated packages altogether. Instead, it requires confirmation. Matt, I'm sure I'm

(php?) bug exploit report

2004-01-19 Thread Csan
Hello debian-security, One of my servers has been cracked into and I am looking for the weak spots of the system and also looking for ways to lock the secholes I might (also) have. The linux box is an up-to-date woody (incl. security updates). My first question is how come such a thing worked on

Re: (php?) bug exploit report

2004-01-19 Thread J.H.M. Dassen (Ray)
On Mon, Jan 19, 2004 at 14:40:12 +0100, Csan wrote: One of my servers has been cracked into and I am looking for the weak spots of the system and also looking for ways to lock the secholes I might (also) have. The linux box is an up-to-date woody (incl. security updates). My first question

Re: Release.gpg files gone?

2004-01-19 Thread Matt Zimmerman
On Mon, Jan 19, 2004 at 12:03:51PM +0200, Camillo S?rs wrote: Matt Zimmerman wrote: This may have been the case with apt-secure, but this functionality is now merged into apt 0.6 (currently in experimental) in a different way which does not prevent downloads of unauthenticated packages