Re: sysadmin in training

for every braindead installer. HTH, Lupe Christoph PS: BTW, just because something is GPLed does not mean it's trustworthy. -- | Never attribute to malice that which is adequately explained by stupidity. | | Hanlon's razor

Re: Some Debian package upgrades are corrupting rsync "quick check" backups

anybody know if Ubuntu is using the same , or are they doing the usual, i.e. not follow Debian? Thanks, Lupe Christoph -- | As everyone knows, it was predicted that the world would end last | | Wednesday at 10:00 PST. Since there appears to be a world in existence | | now, the enti

Re: Certificate errors with security.debian.org

t; this site have a trusted certificate. $ telnet -4 -z ssl -z debug security.debian.org 443 Trying 212.211.132.32... Trying 212.211.132.250... Trying 195.20.242.89... telnet: Unable to connect to remote host: Connection refused I have no IPv6 internet access, so I can't try that. HTH, Lupe C

Re: "Ian Murdock" Death

r. No wonder "The coroner and related PD have not responded'. Lupe Christoph -- | As everyone knows, it was predicted that the world would end last | | Wednesday at 10:00 PST. Since there appears to be a world in existence | | now, the entire universe must therefore have been recre

Re: [SECURITY] [DSA 3481-1] glibc security update

zilla ticket who did not provide example code. Gap between 2015-08-22 14:59:40 UTC and 2016-02-16 14:11:42 UTC. HTH, Lupe Christoph -- | As everyone knows, it was predicted that the world would end last | | Wednesday at 10:00 PST. Since there appears to be a world in existence | | now,

Re: Security support incomplete? (was: Re: [SECURITY] [DSA 3455-1] curl security update)

ion to leave oldstable unfixed "Too intrusive to backport". What?!? The link with that text points to a page that does nothing to explain the decision. Lupe Christoph -- | As everyone knows, it was predicted that the world would end last | | Wednesday at 10:00 PST. Since there ap

Re: [SECURITY] [DSA 3032-1] bash security update

s how it should look: lrwxrwxrwx 1 root root 4 Mar 1 2012 /bin/sh -> dash BTW, I wonder why this isn't done with the alternatives system. My guess is that /bin/sh is so crucial for system operation and especially update-alternatives that it can'

Re: [SECURITY] [DSA 2954-1] dovecot security update

alternately as a substitute in lieu in place of in preference on second thought Or, shorter, what he says ;-) Lupe Christoph PS: I love how this slides into set theory ;-) -- | The politician's syllogism:

Re: Debians security features in comparison to Ubuntu

bers don't mean a lot except that somebody was really busy building packages... Lupe Christoph -- | The politician's syllogism:| | We must do something | | This is something

Re: DSA 2896-2 openssl - Apache 2 not detected as service to restart by postinst?

mit that mapping the list of processes to services is hard, so the best way would probably be to filter the list by known executables and list the unknowns for the user to restart by hand. Lupe Christoph -- | The politician's syllogism:| |

Re: sendmail & localhost rDNS

On Tuesday, 2009-08-11 at 10:32:04 +0200, Bernhard R. Link wrote: > * Lupe Christoph [090810 21:13]: > > > Almost all security holes need to user to do something. (If only to > > > power up the machine, to install some packages, to connect to the > > > internet, t

Re: sendmail & localhost rDNS

RELAY". Since I have no sendmail installation to use for testing, I can't reproduce the second problem. The sendmail package maintainer will probably require the submitter to provide details which I can't. Thank you, Lupe Christoph -- | There is no substitute for bad design except

Re: sendmail & localhost rDNS

On Monday, 2009-08-10 at 14:35:06 +0200, Bernhard R. Link wrote: > * Lupe Christoph [090810 13:53]: > > On Monday, 2009-08-10 at 13:46:38 +0200, Thomas Liske wrote: > > > last week, there was an article on heise security about MTAs[1] which > > > relay mails

Re: sendmail & localhost rDNS

On Monday, 2009-08-10 at 14:03:44 +0200, Thomas Liske wrote: > #Lupe Christoph wrote: >> On Monday, 2009-08-10 at 13:46:38 +0200, Thomas Liske wrote: >>> last week, there was an article on heise security about MTAs[1] which >>> relay mails for hosts having a rever

Re: sendmail & localhost rDNS

t does not have that particular vulnerability, but allows a user to create it? "Doctor, it hurts when I do this!" "Don't do it, then." Lupe Christoph -- | There is no substitute for bad design except worse design. | | /me

Re: Exploit in Upgrade Chain?

On Friday, 2009-02-13 at 11:55:54 +0200, Izak Burger wrote: > On Thu, Feb 12, 2009 at 10:37 PM, Lupe Christoph > wrote: > > Mode 600 will deny /etc to everybody except root while it will change > > nothing for root. If you have any services on your system that run under >

Re: Exploit in Upgrade Chain?

and that have config under /etc, you hose them with any mode that removes the eXecute bit for "others". So it's not an exploit, it's a Denial of Service. Which I believe *is* security related... Lupe Christoph -- | There is no substitute for bad design except

Re: Encrypt file while you are using it

ice. There is nothing you can do to prevent these kinds of attacks. So, storing your files in an encrypted filesystem with permissions set so that only your user (and the superuser) can read the files is no less secure than storing the files individually encrypted. HTH, Lupe Christoph -- | There

Re: security.debian.org: MD5Sum mismatch

On Friday, 2007-08-17 at 11:22:11 +0200, Lupe Christoph wrote: > Failed to fetch > http://security.debian.org/dists/testing/updates/main/binary-i386/Packages.bz2 > MD5Sum mismatch > (I have only checked one server for the Release file, so I'm only > assuming that the fil

Re: security.debian.org: MD5Sum mismatch

On Friday, 2007-08-17 at 10:46:32 +, [EMAIL PROTECTED] wrote: > On Fri, Aug 17, 2007 at 12:20:34PM +0200, Lupe Christoph wrote: > > I *wish* those updates > > were atomic, but they probably arent'. > why not though ? Because they involve a lot of files. You would hav

Re: security.debian.org: MD5Sum mismatch

On Friday, 2007-08-17 at 12:12:38 +0200, Jonas Andradas wrote: > how long have you noticed this mismatch? I mean, an update on the mirror > could be taking place, and the Packages.bz2 file not yet been updated... > On 8/17/07, Lupe Christoph <[EMAIL PROTECTED]> wrote: >

security.debian.org: MD5Sum mismatch

o I'm only assuming that the file is the same on all three servers.) Is anybody capable of correcting this situation reading this list? Thank you, Lupe Christoph -- | You know we're sitting on four million pounds of fuel, one nuclear | | weapon and a thing that has 270,000 moving par

Re: Secure rsync setup, bind-mount ro

On Tuesday, 2006-12-19 at 08:47:32 +0100, Dariush Pietrzak wrote: > On Mon, Dec 18, 2006 at 04:50:51PM +0100, Lupe Christoph wrote: > > when I mean bind mounts. No, they are just an aliasing mechanism. > Nope, they're not: Well, we are on a Debian mailing list, so I'd assum

Re: Secure rsync setup, bind-mount ro

ot 0 2006-12-18 16:44 /mnt/foo [EMAIL PROTECTED]::~$ touch /mnt/bar [EMAIL PROTECTED]::~$ ls -l /mnt/bar -rw-r--r-- 1 lupe lupe 0 2006-12-18 16:45 /mnt/bar No cigar... Lupe Christoph PS: Linux loopback mounts *can* be ro. PPS: It might be possible to mount the same device multiple times with dif

Re: Secure rsync setup

filesystems, writing the result into the chroot. You can use incremental dumps or use find | cpio for incrementals (which I did). Of course, you need enough space to keep an encrypted, compressed dump of all filesystems... HTH, Lupe Christoph -- | You know we're sitting on four milli

Re: This is an very serious bug

27;s good news! One of my servers was on his extortion list. In fact, all IP addresses of that provider were. They and I refused to pay. Regarding this bug, it's normal that RBLs are taken down and then blacklist the entire address space. I've had this happen with my RBL checker every few

Re: ProFTPD still vulnerable (Sarge)

000990.html > or at > http://bugs.proftpd.org/show_bug.cgi?id=2858 > The CommandBufferSize issue was fixed by DSA-1218-1. CommandBufferSize isn't used, so it couldn't be that in any case. Lupe Christoph -- | You know we're sitting on four million pounds of fuel,

Re: ProFTPD still vulnerable (Sarge)

OT: There seems to be something strange with your MUA. Look at this header: Cc: "Lupe Christoph"@murphy.debian.org, " <[EMAIL PROTECTED]>"@murphy.debian.org On Thursday, 2006-11-30 at 12:57:53 +0100, Stefan Fritsch wrote: > > The attacks ceased before

ProFTPD still vulnerable (Sarge)

not able to capture a TCP stream. I would just like to alert people that there is still some vulnerability in the ProFTPD code that was not fixed by DSA-1218-1. More if this happens again and I manage to run tcpdump in time. Lupe Christoph -- | You know we're sitting on four million po

Re: ClamAV is dead?!?

now. But if something does not honor the TTL, you may see the interim address longer. Lupe Christoph -- | You know we're sitting on four million pounds of fuel, one nuclear | | weapon and a thing that has 270,000 moving parts built by the lowest | | bid

Re: ClamAV is dead?!?

On Monday, 2006-10-09 at 09:57:10 +0200, Evgeni Golov wrote: > On Mon, 9 Oct 2006 09:42:14 +0200 Lupe Christoph wrote: > > This morning I found a number of complaints from freshclam in my > > mailbox, culminating in the one below. Checking http://www.clamav.net/ > > reveal

ClamAV is dead?!?

1. http://www.transip.nl/ 2. http://www.transip.nl/ Anybody know what is happening to ClamAV? Lupe Christoph - Forwarded message from Cron Daemon <[EMAIL PROTECTED]> - From: Cron Daemon <[EMAIL PROTE

Re: Still problems with sendmail updates in Stable (libsasl2)

On Tuesday, 2006-08-29 at 09:06:46 +0200, Lupe Christoph wrote: > I still have dependency problems with the sendmail update on Stable. > I only get libsasl2 2.1.19-1.5sarge1 from security.debian.org while > the sendmail-bin package depends on libsasl2 (>= 2.1.19.dfsg1). > When ca

Still problems with sendmail updates in Stable (libsasl2)

Hi! I still have dependency problems with the sendmail update on Stable. I only get libsasl2 2.1.19-1.5sarge1 from security.debian.org while the sendmail-bin package depends on libsasl2 (>= 2.1.19.dfsg1). When can one expect to be able to install the sendmail update? Thank you, Lupe Christ

Re: [SECURITY] [DSA 926-1] New ketm packages fix privilege escalation

avid Ahlard Ja, Frohe Weihnachten auch von mir. Und ein erfolgreiches neues Jahr. You don't have to pay for reading this... Jingle, you bells! Lupe Christoph -- | You know we're sitting on four million pounds of fuel, one nuclear | | weapon and a thing that has 270,000 moving parts

Re: [SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution

On Monday, 2005-09-05 at 12:35:25 +0200, bernd wrote: > wie angekuendigt. die security-warnung von debian fuer webcalendar Ich glaube, Du wolltest die wo anders hinschicken... Lupe Christoph -- | You know we're sitting on four million pounds of fuel, one nuclear | | weapon and a th

Re: Debian Security Support in Place

On Saturday, 2005-07-09 at 10:37:27 +0200, martin f krafft wrote: > also sprach Lupe Christoph <[EMAIL PROTECTED]> [2005.07.09.1022 +0200]: > > > The security team will continue to support Debian GNU/Linux 3.0 > > > alias woody until May 2006, or if the security support

Re: Debian Security Support in Place

n they go with SLES rather than the regular SuSE releases. So in essence the announcement says "screw you, commercial customers". Please don't do that. It makes promoting Debian awkward. Thank you for your attention, Lupe Christoph -- | [EMAIL PROTECTED] | http://

Re: Log file IDS package?

the number of actions performed on a match, not perform an action if a count is exceeded. That would need to be done in the script called when a match is found. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | Ask not what your computer

Re: File System Integrity Checker for Sarge

of detail in these notifications configurable? - For which platforms is the tool supported/packaged? HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | Ask not what your computer can do for you | | ask what you can do for your

Re: murphy in sbl.spamhaus.org

s is the fourth RBL I had to remove because all those SFBs are too Stoopid(tm) to whitelist important mail servers. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourse

Re: [SECURITY] [DSA-594-1] New Apache packages fix arbitrary code execution

d I'm sure someone will correct me if I am. :) You are correct. The files are /usr/bin/htpasswd and /usr/lib/apache/1.3/mod_include.so. Both are indeed in apache-common. Otherwise, the apache-perl package might be affected too. Not only apache-ssl. HTH, Lupe Christoph -- | [EMAIL PROTE

Re: [SECURITY] [DSA 594-1] New Apache packages fix arbitrary code execution

Quoting [EMAIL PROTECTED]: > Nur zu Info - und um anzumerken dass uns das nicht betrifft. Ich moechte noch anmerken, dass uns die Mail auch nicht betrifft :-P Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the

Re: OT, spam tips.

hat would have saved the world. If the sending IP address is ranked in SBL/XBL this is a good indication that the mail is Spam. But there are lots of other better criteria. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server o

Re: Machine-readable form for debian security advisories

even if it > means extending the DTD. Thanks for pointing it out! That's something I *can* comment on: Glad you found it useful. So I hope to see VuXML being used for Debian as well in the future. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/

Re: Machine-readable form for debian security advisories

ither format if you can avoid it. You don't mention VuXML (http://www.vuxml.org/), so I suppose you did not know it. Please have a look there. Thank you, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Inter

Re: Ihre Anfrage: Support-JOB 14077 -- WG: [EMAIL PROTECTED]: [SECURITY] [DSA 531-1] New php4 packages fix multiple vulnerabilities]

um! Danke, Lupe Christoph On Thursday, 2004-07-22 at 12:28:59 +0200, ET Support wrote: > Guten Tag, > wir haben Ihre Anfrage erhalten und bearbeiten diese schnellstmoeglich. > Folgende Informationen wurden erfasst: > Bearbeitungs-Nr:14077 > Subject:

Re: [bulletproof.net.au #29025] [Comment] [SECURITY] [DSA 525-1] New apache packages fix buffer overflow in mod_proxy

lar in any attachment as well as for any error or > incompleteness in the contents of this e-mail. Especially given this Stoopid(tm) footer, you should keep your RT mails off debian-security and any other lists you feed into RT. Thank you, Lupe Christoph -- | [EMAIL PROTECTED] |

Re: apt-get update

belongs to them, too. So you may want to send mail to [EMAIL PROTECTED] to inquire. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauc

Re: apt-get update

belongs to them, too. So you may want to send mail to [EMAIL PROTECTED] to inquire. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauc

Re: Q: server monitoring

(was LRRD) for performance monitoring. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauce and breaking into the Charity| | Home for

Re: Q: server monitoring

(was LRRD) for performance monitoring. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauce and breaking into the Charity| | Home for

Re: Woody Backport of tripwire

rce. If you do that, you will need to use CXX=g++-3.0 GCC=gcc-3.0 dpkg-buildpackage -rfakeroot -us -uc (Or similar) g++ 2.95 will not do. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without f

Re: Woody Backport of tripwire

rce. If you do that, you will need to use CXX=g++-3.0 GCC=gcc-3.0 dpkg-buildpackage -rfakeroot -us -uc (Or similar) g++ 2.95 will not do. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without f

Re: Slightly OT: Setting the primary NIC

On Sunday, 2004-03-21 at 03:17:45 -0800, Brandon High wrote: > On Sun, Mar 21, 2004 at 11:58:00AM +0100, Lupe Christoph wrote: > > > Can anyone tell me how I can tell the machine which NIC is the primary? > > There is no such thing as a primary NIC. Unless a daemon explicitly >

Re: Slightly OT: Setting the primary NIC

daemon explicitly binds a socket to a specific IP address and send a packet through that socket, the source IP address is set to that of the interface the packet is sent on. So you have a weird configuration for sure. Lupe Christoph -- | [EMAIL PROTECTED] | http:

Re: Slightly OT: Setting the primary NIC

On Sunday, 2004-03-21 at 03:17:45 -0800, Brandon High wrote: > On Sun, Mar 21, 2004 at 11:58:00AM +0100, Lupe Christoph wrote: > > > Can anyone tell me how I can tell the machine which NIC is the primary? > > There is no such thing as a primary NIC. Unless a daemon explicitly >

Re: Slightly OT: Setting the primary NIC

daemon explicitly binds a socket to a specific IP address and send a packet through that socket, the source IP address is set to that of the interface the packet is sent on. So you have a weird configuration for sure. Lupe Christoph -- | [EMAIL PROTECTED] | http:

Re: Tripwire (clone) which would you prefer?

ols, but not as flexible and versatile as AIDE and Tripwire. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett |

Re: Tripwire (clone) which would you prefer?

ols, but not as flexible and versatile as AIDE and Tripwire. HTH, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett

Re: Help! File permissions keep changing...

sily get accsess to > /root directory. That's why GNU find and xargs have the options -print0 and -0, respectively. Names in Unixish filesystems can't have NULs in them. Stoopid(tm) example: find "foo bar" -print0 | xargs -0 ls -ld There, I made the thread even more offto

Re: Help! File permissions keep changing...

sily get accsess to > /root directory. That's why GNU find and xargs have the options -print0 and -0, respectively. Names in Unixish filesystems can't have NULs in them. Stoopid(tm) example: find "foo bar" -print0 | xargs -0 ls -ld There, I made the thread even more offto

Re: security.debian.org

as probably not security.d.o being down, but some router. the packets are taking a quite different path. Maybe U Twente switched providers? > Also see http://www.debian.org/News/2004/20040202 That's old news. The machine has been reactivated. Lupe Christoph -- | [EMAIL PROTECTED]

Re: security.debian.org

y not security.d.o being down, but some router. the packets are taking a quite different path. Maybe U Twente switched providers? > Also see http://www.debian.org/News/2004/20040202 That's old news. The machine has been reactivated. Lupe Christoph -- | [EMAIL PROTECTED] | htt

Re: chrootkit and false LKM positive

mail. I'm running 2.4.23. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett |

Re: LKM

pd] root 0 1 0 Jan19 ?00:00:00 [bdflush] root 0 1 0 Jan19 ?00:00:06 [kupdated] So ps does not give chkrootkit a PID, but /proc has those processes. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-chri

Re: chrootkit and false LKM positive

mail. I'm running 2.4.23. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett | -- To UNSU

Re: LKM

pd] root 0 1 0 Jan19 ?00:00:00 [bdflush] root 0 1 0 Jan19 ?00:00:06 [kupdated] So ps does not give chkrootkit a PID, but /proc has those processes. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-chri

Re: aide, apt-get and remote management...

ammer/aide.html says "Future plans: ... > Encrypted and signed database". They are in the Debian source package. I haven't gotten around to investigating how they work, though. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Vi

Re: aide, apt-get and remote management...

ammer/aide.html says "Future plans: ... > Encrypted and signed database". They are in the Debian source package. I haven't gotten around to investigating how they work, though. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Vi

Re: tripwire .deb for Woody

On Tuesday, 2004-01-13 at 13:34:18 +0100, Lupe Christoph wrote: > Has anybody on this list managed to backport the tripwire package to > Woody? I'm running into a strange problem where configure tries to > locate an include file named "locale". Yes, without an suffix. I do

Re: tripwire .deb for Woody

On Tuesday, 2004-01-13 at 13:34:18 +0100, Lupe Christoph wrote: > Has anybody on this list managed to backport the tripwire package to > Woody? I'm running into a strange problem where configure tries to > locate an include file named "locale". Yes, without an suffix. I do

tripwire .deb for Woody

I try to backport to Sarge, configure does not contain this test. The backport to Sarge fails in a different way, BTW. I could not find a tripwire*.deb with Google. Please help! Thanks, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

tripwire .deb for Woody

I try to backport to Sarge, configure does not contain this test. The backport to Sarge fails in a different way, BTW. I could not find a tripwire*.deb with Google. Please help! Thanks, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

Re: Content-Type in DSAs

On Tuesday, 2004-01-06 at 18:00:13 +0100, Adrian 'Dagurashibanipal' von Bidder wrote: > Clinging to sanity, Alexander Neumann mumbled in his beard: > > * Lupe Christoph <[EMAIL PROTECTED]> wrote: > >> Comparing the DSAs and reading how mutt recognizes a PGP sign

Re: Content-Type in DSAs

On Tuesday, 2004-01-06 at 18:00:13 +0100, Adrian 'Dagurashibanipal' von Bidder wrote: > Clinging to sanity, Alexander Neumann mumbled in his beard: > > * Lupe Christoph <[EMAIL PROTECTED]> wrote: > >> Comparing the DSAs and reading how mutt recognizes a PGP sign

Content-Type in DSAs

cmail hack. And I will set it up now. But for the sake of people like me before I started to investigate this, I still wanted to ask this question. Thank you for your patience, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of

Content-Type in DSAs

cmail hack. And I will set it up now. But for the sake of people like me before I started to investigate this, I still wanted to ask this question. Thank you for your patience, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of

Re: aide, apt-get and remote management...

On Friday, 2003-12-12 at 12:39:49 +0100, Adam ENDRODI wrote: > On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: > > We don't use AIDE exclusively at a client site, but in combination > > with Tripwire. We think tripwire is a little more secure becuse it >

Re: aide, apt-get and remote management...

On Friday, 2003-12-12 at 12:39:49 +0100, Adam ENDRODI wrote: > On Fri, Dec 12, 2003 at 07:46:38AM +0100, Lupe Christoph wrote: > > We don't use AIDE exclusively at a client site, but in combination > > with Tripwire. We think tripwire is a little more secure becuse it >

Re: aide, apt-get and remote management...

Hello! We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases. So we protect aide.db with Tripwire. AIDE is used for the parts tripwire can't do because of it's limited configurability. Here is a

Re: aide, apt-get and remote management...

Hello! We don't use AIDE exclusively at a client site, but in combination with Tripwire. We think tripwire is a little more secure becuse it uses signed databases. So we protect aide.db with Tripwire. AIDE is used for the parts tripwire can't do because of it's limited configurability. Here is a

Re: secure file permissions

s recommendet ? You want to change them, so I guess you should know why. BTW, try running ls as a user when /etc/group and /etc/passwd are 600. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

Re: secure file permissions

s recommendet ? You want to change them, so I guess you should know why. BTW, try running ls as a user when /etc/group and /etc/passwd are 600. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

Re: extrange passwd behaviour

DES passwords. I believe I read that Solaris 10 will add support for MD5. FreeBSD supports MD5 passwords. So it's not non-Linux. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett |

Re: extrange passwd behaviour

DES passwords. I believe I read that Solaris 10 will add support for MD5. FreeBSD supports MD5 passwords. So it's not non-Linux. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu T

Re: extrange passwd behaviour

passwords if you change your password and the passwd command sends an MD5 password to the yppasswordd. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time", Terry Pratchett |

Re: extrange passwd behaviour

r addess bounce. :-P > But I can think of something like "compatibility" (to what?) :) Ever heard about X/Open and their Unix standards? I'd bet they specify this in exceeding detail. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | &q

Re: extrange passwd behaviour

passwords if you change your password and the passwd command sends an MD5 password to the yppasswordd. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze | | "Thief of Time&quo

Re: extrange passwd behaviour

e. :-P > But I can think of something like "compatibility" (to what?) :) Ever heard about X/Open and their Unix standards? I'd bet they specify this in exceeding detail. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Viole

Re: extrange passwd behaviour

try this at home tonight with Debian and FreeBSD. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

Re: extrange passwd behaviour

try this at home tonight with Debian and FreeBSD. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

Re: When will kernel-image-2.4.23 be available ?

Quoting Thomas Sjögren <[EMAIL PROTECTED]>: > On Fri, Dec 05, 2003 at 08:08:46AM +0100, Lupe Christoph wrote: > > BUT! Does anybody have a patch for the do_brk vuln on any kernel-source > > package >= 2.4.20 as they are currently in the archives? I would like to > &g

Re: When will kernel-image-2.4.23 be available ?

Quoting Thomas Sjögren <[EMAIL PROTECTED]>: > On Fri, Dec 05, 2003 at 08:08:46AM +0100, Lupe Christoph wrote: > > BUT! Does anybody have a patch for the do_brk vuln on any kernel-source > > package >= 2.4.20 as they are currently in the archives? I would like to > &g

Re: When will kernel-image-2.4.23 be available ?

kage >= 2.4.20 as they are currently in the archives? I would like to build a new kernel with the vuln patched ASAP, rather than wait for the upload to reopen. Thanks, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

Re: When will kernel-image-2.4.23 be available ?

ware you barely know is always a challenge, so a Life CD Debian is very handy. I carry a Knoppix with me at almost any time... And a Debian Stable CD 1. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

Re: When will kernel-image-2.4.23 be available ?

kage >= 2.4.20 as they are currently in the archives? I would like to build a new kernel with the vuln patched ASAP, rather than wait for the upload to reopen. Thanks, Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

Re: When will kernel-image-2.4.23 be available ?

ware you barely know is always a challenge, so a Life CD Debian is very handy. I carry a Knoppix with me at almost any time... And a Debian Stable CD 1. Lupe Christoph -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the resort of the violent" Lu Tze

3.0r2 or hacked packages?

Please enlighten me. ;-) Thanks! Lupe Christoph PS: I'd like to compare these packages to the installed versions. How can I do that with the least amount of hassle? -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

3.0r2 or hacked packages?

Please enlighten me. ;-) Thanks! Lupe Christoph PS: I'd like to compare these packages to the installed versions. How can I do that with the least amount of hassle? -- | [EMAIL PROTECTED] | http://www.lupe-christoph.de/ | | "Violence is the

  1   2   >