Re: [gentoo-user] Ghost cyber threat

2015-01-31 Thread shawn wilson
On Jan 31, 2015 11:57 PM, Adam Carter adamcart...@gmail.com wrote: Do they need telnet or ssh access, Not telnet shell but this could be triggered with telnet/nc or even nmap, hping, or tcpreplay - all of which could send an arbitrary payload to tcp or udp ports. I don't understand this

Re: [gentoo-user] Ghost cyber threat

2015-01-30 Thread shawn wilson
On Jan 30, 2015 12:53 PM, Andrew Savchenko birc...@gentoo.org wrote: On Fri, 30 Jan 2015 12:19:01 -0500 symack wrote: or buy some freak of nature can exploit the vulnerability in other ways? Considering how old one's setup should be to be affected to this issue, it is likely that such

[gentoo-user] emerge default config

2015-01-23 Thread shawn wilson
Is there a way to have default config lines that emerge updates won't touch? For instance, my /etc/ssh/sshd_config differs from the default in some places. I know this and upstream shows me the same diffs in that file over and over again. But maybe upstream will add a new option - I'd like to see

Re: [gentoo-user] emerge default config

2015-01-23 Thread shawn wilson
On Fri, Jan 23, 2015 at 7:12 PM, cov...@ccs.covici.com wrote: Rich Freeman ri...@gentoo.org wrote: On Fri, Jan 23, 2015 at 5:45 PM, shawn wilson ag4ve...@gmail.com wrote: Is there a way to have default config lines that emerge updates won't touch? I'd be interested in hearing about

Re: [gentoo-user] Changing cpan repo in emerge

2014-07-07 Thread shawn wilson
On Mon, Jul 7, 2014 at 5:27 AM, Stroller strol...@stellar.eclipse.co.uk wrote: On Sun, 6 July 2014, at 11:47 pm, shawn wilson ag4ve...@gmail.com wrote: How do I change emerge/ebuild from using cpan to metacpan to a local repo? If you're just creating a local ebuild - i.e. bumping

[gentoo-user] Changing cpan repo in emerge

2014-07-06 Thread shawn wilson
How do I change emerge/ebuild from using cpan to metacpan to a local repo? I see mirror://cpan/foo and I figure SRC_URI gets scraped and changed (I'm guessing this happens somewhere in python since I don't see anything happening to SRC_URI in perl-module.eclass). I just want to use metacpan for

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-31 Thread shawn wilson
On Tue, Dec 31, 2013 at 9:08 AM, Pandu Poluan pa...@poluan.info wrote: On Dec 30, 2013 7:31 PM, shawn wilson ag4ve...@gmail.com wrote: Minor additions to what Pandu said... On Mon, Dec 30, 2013 at 7:02 AM, Pandu Poluan pa...@poluan.info wrote: On Mon, Dec 30, 2013 at 6:07 PM, Tanstaafl

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-30 Thread shawn wilson
Minor additions to what Pandu said... On Mon, Dec 30, 2013 at 7:02 AM, Pandu Poluan pa...@poluan.info wrote: On Mon, Dec 30, 2013 at 6:07 PM, Tanstaafl tansta...@libertytrek.org wrote: The numbers within [brackets] are statistics/countes. Just replace them with [0:0], unless you really really

Re: [gentoo-user] Re: IPTables question... simple as possible for starters

2013-12-30 Thread shawn wilson
On Mon, Dec 30, 2013 at 1:04 PM, James wirel...@tampabay.rr.com wrote: shawn wilson ag4ve.us at gmail.com writes: Also see nftables: http://netfilter.org/projects/nftables/ Interesting read. http://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg http

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-29 Thread shawn wilson
On Sun, Dec 29, 2013 at 1:07 PM, Tanstaafl tansta...@libertytrek.org wrote: Hi all, Ok, I'm setting up a new server, and I'd like to rethink my iptables rules. I'd like to start with something fairly simple: 1. Allow connections from anywhere ONLY to certain ports ie, for encrypted

Re: [gentoo-user] Where to put advanced routing configuration?

2013-10-13 Thread shawn wilson
On Fri, Oct 4, 2013 at 5:58 PM, Michael Orlitzky mich...@orlitzky.com wrote: 1. The iptables-restore syntax is uglier and harder to read. I don't get this - the syntax is *chain and then :tables (with optional counters) instead of -N, and then a bunch of rules, and then a COMMIT command (the

Re: [gentoo-user] SystemD + Gnome 3.8 I can log in as root but not as normal user

2013-10-01 Thread Shawn Wilson
rm ~/.Xauthority Walter Dnes waltd...@waltdnes.org wrote: On Tue, Oct 01, 2013 at 12:30:51AM -0600, Carlos Sura wrote Hello Mates, I finally thought that I got this working, so now I am dealing this issue: I choose the latest kernel with systemd and GDM starts good, but I cannot log in to

Re: [gentoo-user] re: alternating between wired and wireless interfaces

2013-09-21 Thread Shawn Wilson
Just thought I'd give the other popular alternative of the Redhat backed NetworkManager. Also, if you don't wait for the interface to come up I don't think the service can bind to the interface (and it obviously can't bind to an IP). Probably not an issue for ssh but possibly one for MySQL or

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread Shawn Wilson
Since the downgrade fixed your issue idk... but, what does your authorized_keys look like? Also, move or chmod 0 your config to make sure nothing funny is happening there. Stefan G. Weichinger li...@xunil.at wrote: Am 18.09.2013 19:47, schrieb Joe Nyland: Not sure why a downgraded openssh

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread Shawn Wilson
I was saying to chmod 000 it so that you're not picking up (possibly strange?) options. Stefan G. Weichinger li...@xunil.at wrote: Am 18.09.2013 20:03, schrieb Shawn Wilson: Since the downgrade fixed your issue idk... but, what does your authorized_keys look like? Also, move or chmod 0 your

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread shawn wilson
knew if I left out the sticky bit, it would be unset but always thought: user, group, everyone else. So, 'chmod 0 config' doesn't look as cluttered and conveys the same meaning :) On Wed, Sep 18, 2013 at 4:48 PM, Stefan G. Weichinger li...@xunil.atwrote: Am 18.09.2013 21:01, schrieb Shawn Wilson

Re: [gentoo-user] Linux viruses

2013-07-12 Thread shawn wilson
On Jul 12, 2013 4:32 PM, Volker Armin Hemmann volkerar...@googlemail.com wrote: Am 12.07.2013 18:36, schrieb Timur Aydin: On 7/5/2013 11:12 PM, Dale wrote: I since did some googling and it seems I am right and he just thought I was some know nothing guy he could sell some service too.

Re: [gentoo-user] Linux viruses

2013-07-06 Thread shawn wilson
I was present for a discussion about which is the most secure OS. I don't remember the forum but the consensus was that the most secure OS is the one you know. Anyone can wreck a system but not everyone has the ability to maintain a system. I'm not arguing that you can run Windows as tight as

[gentoo-user] git log kernel

2013-03-27 Thread shawn wilson
Is there a way I can get git to only show commits for lines that are evaluated after #ifdef, #ifndef, etc? Maybe I can preparse (strip out code) with gcc and then have some git magic to show me what I want? If I do: git log v3.8..v3.8.4 I get about a fourth of the stuff that I don't care about.

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
I still haven't found a solution On Tue, Feb 26, 2013 at 5:57 PM, Neil Bothwick n...@digimed.co.uk wrote: On Tue, 26 Feb 2013 17:24:29 -0500, shawn wilson wrote: The wiki page says to use / to search for each option in make menuconfig. That shows the option and its dependencies, for example

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
On Wed, Feb 27, 2013 at 5:52 AM, shawn wilson ag4ve...@gmail.com wrote: So, I searched for UIDGID_CONVERTED in menuconfig and only see it as a bool and no dependency. However, if I: echo CONFIG_UIDGID_CONVERTED=y .config and then make menuconfig, this goes away as well - so I'm guessing

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
Yes On Wed, Feb 27, 2013 at 11:11 AM, Alan McKinnon alan.mckin...@gmail.com wrote: On 27/02/2013 12:52, shawn wilson wrote: I still haven't found a solution On Tue, Feb 26, 2013 at 5:57 PM, Neil Bothwick n...@digimed.co.uk wrote: On Tue, 26 Feb 2013 17:24:29 -0500, shawn wilson wrote

[gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-26 Thread shawn wilson
I'm trying to follow the doc to setup LXC (http://wiki.gentoo.org/wiki/LXC) and am unable to find this option. I manually insert it ane make menuconfig again and it gets removed. I see the other options the doc references: [*] UTS namespace [*] IPC namespace [*] User namespace