Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Roger Oberholtzer

On Mon, 24 Jun 2002 13:18:10 -0400
Lee [EMAIL PROTECTED] wrote:

 Unfortunately, the current reigning religion in this part of the world
 has always been numbered with those who prefer not have the common man
 think. Don't think. Just believe what the shaman, priest, televanglist

Not just this part of the world. I was in Riyadh a while back and Saudi TV
has a segment where an Islamic scholar answers questions from letters. I
vividly recall one in which the viewer asked why they circled Mohammad's
'house' seven times (in Mecca - a very important thing to do). The person wanted to 
know because his non-islamic friends had asked and he had no answer. Instead of 
explaining why, the scholar strongly chastised the guy for attempting to answer 
questions. The, after all, was the job of scholars who are educated to know the 
reasons. It is not the job of an untrained believer. He went so far as to say that the 
person was getting involved in
things that the Koran specifically forbade - offering opinions about which wou know 
nothing. After finishing the tirade, he went to the next letter - never having 
answered the actual question! What I thought was most odd was that the letter writer 
did NOT offer an opinion to his non-islamic friends.
He consulted an islamic scholar for correct information. For which he wes
publicly chastised.

-- 
++===+
| Roger Oberholtzer  |   E-mail:[EMAIL PROTECTED] |
| OPQ Systems AB |  WWW:  http://www.opq.se/ |
| Erik Dahlbergsgatan 41-43  |Phone: Int + 46 8   314223 |
| 115 32 Stockholm   |   Mobile: Int + 46 733 621657 |
| Sweden |  Fax: Int + 46 8   302602 |
++===+

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Slackware 8.1 experiences

2002-06-25 Thread Kurt Wall

Also sprach Ken Moffat:

 Is there a printer config tool? (my HP840c won't work for some reason.
 I tried kde print tool but no luck) Command line 'lpr' works, but
 can't print from X.

/usr/share/apsfilter/SETUP

Kurt
-- 
Baker's First Law of Federal Geometry:
A block grant is a solid mass of money
surrounded on all sides by governors.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



pppd question

2002-06-25 Thread Brian Witowski

What script is used to pass modem strings to the modem (such as s0=0) when
using pppd?

Thanks,
Brian



BEGIN:VCARD
VERSION:2.1
N:Witowski;Brian
FN:Brian Witowski
ORG:Pyramid Computer Systems
TEL;WORK;VOICE:(231) 331-6090
TEL;CELL;VOICE:(231) 409-9541
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:20020324T171728Z
END:VCARD



Re: Slackware 8.1

2002-06-25 Thread stayler

As I swapped MB's I was able to skip this step but a close friend spent
the better part of 2 hours gathering up syslinux and nasm, plus a few
other things to create those same disks.  He insisted that dd would not
work as the files provided were not images.  

I'll DL a few of them a try it out to see..

Thanks Myles...

stayler

On Mon, 24 Jun 2002 23:42:04 -0600, Myles Green wrote:

huh? dd if=bare.i of=/dev/fd0 does the boot floppy and 
dd if=install.1 of=/dev/fd0 (repeated for each of five disks) does the 5 
'root' disks. Yes, it's slow, but it 'just works'. Don't fret about the 
bs= or count= flags for dd, just use GOOD floppies and the above 
incantations. It Worked For Me (tm)

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Andrew Mathews

Ronnie Gauthier wrote:
 you mean you dont attend 8am mass each morning?!?
 how ever do you expect to be saved?

Not all need it. g

 On Monday 24 June 2002 09:42 pm, Mike Chambers wrote:
 
Enough of the religious shit already, if I wanted to hear bout that stuff,
I'd go to church.

Mike

Ditto. I'd rather discuss Windows than religion.
-- 
Andrew Mathews
---
andy.linux-works.org  Tuesday Jun 25 2002 07:25:00 MDT
---
I can't decide whether to commit suicide or go bowling.
-- Florence Henderson

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



gnu make reference material

2002-06-25 Thread James McDonald

Umm I have just spent a frustrating few days trying to figure out why my dia 
compile wasn't working... It wasn't until I read a sams unix in 24hrs (yeah 
right) book that explained what a makefile was did I know where to start... 
It was a simple back slash that was the problem causing a comment to run on 
to the cpp define statements.

Wrong:
#   charconv.c \
#   charconv.h \
CPPFLAGS = $(LIBART_CFLAGS) \
-DLIBDIR=\$(libdir)\ \
-DDATADIR=\$(pkgdatadir)\

Right:
#   charconv.c \
#   charconv.h
CPPFLAGS = $(LIBART_CFLAGS) \
-DLIBDIR=\$(libdir)\ \
-DDATADIR=\$(pkgdatadir)\

My question is can anyone recommended a good book that discusses and explains 
gnu make automake autoconf libtool and the macro language and syntax of 
aclocal etc?...

I'm not a complete idiot so I need a book for people who aren't complete 
idiots not a for dummies or such.

-- 
  James McDonald
  MCSE (Windows 2000/NT4), CCNA, CCA, MCP + I
  Registered Linux User #209832
  http://jamesmcd.dns2go.com (home)
  Red Hat Linux release 7.2 (Enigma)
 11:50pm  up 16:22,  4 users,  load average: 0.65, 0.24, 0.20

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: gnu make reference material

2002-06-25 Thread Net Llama!

http://safari.oreilly.com/main.asp?bookname=1578701902

On Wed, 26 Jun 2002, James McDonald wrote:
 Umm I have just spent a frustrating few days trying to figure out why my dia
 compile wasn't working... It wasn't until I read a sams unix in 24hrs (yeah
 right) book that explained what a makefile was did I know where to start...
 It was a simple back slash that was the problem causing a comment to run on
 to the cpp define statements.

 Wrong:
 # charconv.c \
 # charconv.h \
 CPPFLAGS = $(LIBART_CFLAGS) \
 -DLIBDIR=\$(libdir)\ \
 -DDATADIR=\$(pkgdatadir)\

 Right:
 # charconv.c \
 # charconv.h
 CPPFLAGS = $(LIBART_CFLAGS) \
 -DLIBDIR=\$(libdir)\ \
 -DDATADIR=\$(pkgdatadir)\

 My question is can anyone recommended a good book that discusses and explains
 gnu make automake autoconf libtool and the macro language and syntax of
 aclocal etc?...

 I'm not a complete idiot so I need a book for people who aren't complete
 idiots not a for dummies or such.



-- 
~~
Lonni J Friedman[EMAIL PROTECTED]
Linux Step-by-step  TyGeMo  http://netllama.ipfox.com

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



OT Ransom Love interview

2002-06-25 Thread Harry G

Knowing a lot of Caldera users, both current and former are on this list, I 
thought you might be interested.

http://slashdot.org/article.pl?sid=02/06/24/1556244

Hope you don't mind.


Harry G

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: gnu make reference material

2002-06-25 Thread Richard R. Sivernell

James McDonald 

  GNU Autoconf, automake and libtool
gary v. Vaughan New Riders is publisher
isbn 1-57870-190-2$40.00 us

managing projects with Make
Andrew Oram  Steve Talbot   Oreilly
isbn 0-937175-90-0  $19.95

cheers
-- 
Rick Sivernell
Dallas, Texas  75287
972 306-2296
[EMAIL PROTECTED]
Caldera Open Linux eWorkStation 3.1.1
Registered Linux User

   .~.
  / v \
 /( _ )\
   ^ ^
In Linux we trust!
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



OT Linux movie?

2002-06-25 Thread Bob Hemus

Jeez, I thought Hollywood had finally gone and done a real educational
movie.  My Grandson had Grandma and me take him to see LILO and
STITCH.  I knew about LILO, but had never heard about an app or Stitch
program.  This movie was nothing about Linux!!  It was a cartoon about a
little space being!  Maybe some of you younger fellas/gals would enjoy
it, and the rest of you a little older take your kids?
Bob

-- 
A wise man can see more from the bottom of a well,
than a fool can see from a mountain top.
Unknown
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Exit codes in gs

2002-06-25 Thread Joel Hammer

A recurrent question for printing is to figure out when the print job is
done. I do not know of an easy way.  One approach is to capture exit
codes, I guess. Does anyone know if gs gives an exit code which can be
captured and used to send messages to users?

Thanks,
Joel

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Matthew Carpenter

Nicely put.  I can't believe the number of people willing to hang their
hat on chucking the Bible becuase of all sorts of inconsistencies without
being able to list any.

On Mon, 24 Jun 2002 11:53:25 -0500
Michael Hipp [EMAIL PROTECTED] wrote:

 It isn't open to interpretation. We just hamper it with our limited 
 understanding, lack of faith, injection of human agendas, and reliance
 on what others say it says rather than on what it really says. Just to
 name a few of the enemie's tricks.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Matthew Carpenter

On Mon, 24 Jun 2002 13:18:10 -0400
Lee [EMAIL PROTECTED] wrote:

 Unfortunately, the current reigning religion in this part of the world
 has always been numbered with those who prefer not have the common man
 think. Don't think. Just believe what the shaman, priest, televanglist
 says is in the book and paradise is yours. Never mind injustice. The bad
 guys will get theirs in the next world, so just go along with the
 political corruption, greed, environmental destruction and whatever is
 necessary to make the payments on the SUV.

Correction:  All those who would rather manipulate you to their own
benefit than show the Love only God can give you.  These fall into that
category.

 In the Middle Ages we had the Great Chain of Being. So what if the
 local noble had raped your daughter on her wedding night and driven off
 the village herd to pay for a celebration when his son became of age to
 join the family firm of Robber Baron and Son, Ltd. If you were a serf
 God had put you on the bottom of the chain just as he had placed the
 baron on the top. To question your place was to question God. To demand
 justice was presumption to take into man's hands that which was God's.

Again, isn't it grand when something started for good can fall to the sins
of greed for money and power?  There is a trite phrase used among us
believers:  I'm not perfect, just forgiven.  I'm not sure that applies
to many who were involved in the previous corruption.  This is why the
Protestants came into being.  Martin Luther (and to be fair, others before
and after him whose names I mostly forget) saw the difference between what
the Bible said and what the Holy Roman Catholic Church of the time was
saying.  While I believe that corruption and sin has stayed in the
Catholic Church through the centuries, I do believe that many areas of the
Catholic Church have done quite a good job recovering...  they've not had
an easy road to hoe.  To start seeking God instead of being misguided
sheep?  Again, back to the thinking discussion again.

 Later, we had John Calvin, who preached never mind what Christ said
 about the rich not getting into paradise. The real truth is that God
 already knows who will be saved and who will not. Therefore it is only
 logical to believe that God pours his blessings on those predestined few
 and the mark of God's favor was riches. A real double banger. No thought
 required and God's blessings on riches swindled from the undestined.

Now here's a slant I'm not quite sure I've heard before...  I know that
the church screwed up the Irish when the Potato-famine hit and they were
told that it was God's will for them to die... but I'm fairly certain John
Calvin wasn't ever quoted as saying that.  If he was, I'd be interested in
seeing it, since I'm quite sure (IIRC) that he said quite the opposite... 
 
 That mindless theology of greed  still survives today in the heresy of
 the Protestant Work Ethic. Along with Creationism, which is an attack on
 all sciences that dare to claim that the universe was created before
 4004 BC Aug. 4th at 10:04 am. Couple this with the current efforts by
 right wing non-christian fundamentalists to stifle stem cell research.
 So what if a cure for cancer can be found or new organ produced. The
 pain, suffering and death is acceptable as long as fundamentalist
 religious beliefs aren't questioned. Then there is the Church's
 objection to in vitro fertilization because somehow the soul can only be
 fused with the embryo in a womb not in glass ware.

Interesting opinion...  I agree that there is a lot of work ethic issues
in the world, though I'm not sure they are tied to protestants more than
other folk.  Creationism is a belief, as is Evolotion, The Big Bang, and
any other myth about how and why we came to be.  Truth is (if you do your
homework beyond those lying high-school textbooks which show the
evolutionary path from a museum, failing to include the wall-caption
which reads Many of these skelletons are artists' creations and are not
supported by the fossil record.) that there isn't much science supporting
the Scientific explanation of the world.  I'd like to allow the
inclusion of Carbon Dating to the discussion, but in reality, we only know
what Carbon-14 has done in the last what, couple decades?  To say nothing
of our complete lack of historical knowledge prior to 6000 years ago (too
bad Adam and Eve didn't write down how Carbon-14 broke down back then... 
At least 6000 years is better than 15 or 20).  You will also find several
books which disect the non-christian Scientific methods of coming up
with outright lies which support whatever the popular evolutionary
theory-of-the-month was.  These accounts are really quite fascinating. 
One of them details how a non-scientist Satanist (I'm not bashing him,
this was the fact) was lofted into a highly respected research
position... and happened to be the leader of the research which proved
that homosexuality is inborn...  The really 

Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Joel Hammer

I have a very simple way of keeping my inbox from getting a lot of mail I
don't want to see.  In my  .procmailrc file, I have a section like this up
at the top:

   :0:
   * TID  
{
  :0 c
  | echo Dumped a TID   $LOGFILE

  :0 
   /dev/null
   }
   
Now, I do accept all TID's, but others might like to avoid them.
To put multiple rejects on one line, something like this might work:
   * TID|OT|Joel Hammer|etc...

This is also a great way to avoid getting your mailbox filled up when you
are on vacation and don't want to unsubscribe from your various email lists.
Just put the addresses of the email lists on that line. For example,
* TID|OT|Joel Hammer|[EMAIL PROTECTED]  

Joel

P.S. I am not sure if this script works properly regarding the echo
command, but it does dump the mail to dev/null.


On Tue, Jun 25, 2002 at 02:49:51PM -0400, Net Llama! wrote:
 Can we *PLEASE* kill this thread?  Hitler!  Hitler!  Hitler!
 
 Enough already.  I'm not the only one who isn't interested in getting
 their INBOX filled with a religious debate.  This has gone well beyond a
 simple off topic thread to the point where its pretty much the only
 thread.
 
 If anyone really wants to continue this, subscribe to the General list:
 http://linux-sxs.org/mailman/listinfo/
 
 and debate religion until Doug runs out of bandwidth.
 
 
 
 
 On Tue, 25 Jun 2002, Matthew Carpenter wrote:
 
  Nicely put.  I can't believe the number of people willing to hang their
  hat on chucking the Bible becuase of all sorts of inconsistencies without
  being able to list any.
 
  On Mon, 24 Jun 2002 11:53:25 -0500
  Michael Hipp [EMAIL PROTECTED] wrote:
 
   It isn't open to interpretation. We just hamper it with our limited
   understanding, lack of faith, injection of human agendas, and reliance
   on what others say it says rather than on what it really says. Just to
   name a few of the enemie's tricks.
  ___
  Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
  Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
 
 
 -- 
 ~~
 Lonni J Friedman  [EMAIL PROTECTED]
 Linux Step-by-step  TyGeMohttp://netllama.ipfox.com
 
 ___
 Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
 Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



warchalking

2002-06-25 Thread Ronnie Gauthier

hobo's with technology
http://www.blackbeltjones.com/warchalking/

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Matthew Carpenter

If you don't want to read it, note that the OT and TID tags have not
gone away and just delete the messages.

On Tue, 25 Jun 2002 07:33:03 -0600
Andrew Mathews [EMAIL PROTECTED] wrote:

 Enough of the religious shit already, if I wanted to hear bout that
 stuff,I'd go to church.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Matthew Carpenter

General List?  What's that?  Hasn't that been dead for a long time?  :)


On Tue, 25 Jun 2002 14:49:51 -0400 (EDT)
Net Llama! [EMAIL PROTECTED] wrote:

 If anyone really wants to continue this, subscribe to the General list:
 http://linux-sxs.org/mailman/listinfo/
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Upcoming OpenSSH vulnerability (fwd)

2002-06-25 Thread Philip J. Koenig

There has been a heated discussion on this over in the FreeBSD 
security list, suffice to say that Theo's obnoxious attitude doesn't 
help matters.  Nonetheless this is important info:


 --- Forwarded message 
 Date: Mon, 24 Jun 2002 15:00:10 -0600
 From: Theo de Raadt [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: Upcoming OpenSSH vulnerability
 
 There is an upcoming OpenSSH vulnerability that we're working on with
 ISS.
  Details will be published early next week.
 
 However, I can say that when OpenSSH's sshd(8) is running with priv
 seperation, the bug cannot be exploited.
 
 OpenSSH 3.3p was released a few days ago, with various improvements
 but in particular, it significantly improves the Linux and Solaris
 support for priv sep.  However, it is not yet perfect.  Compression is
 disabled on some systems, and the many varieties of PAM are causing
 major headaches.
 
 However, everyone should update to OpenSSH 3.3 immediately, and enable
 priv seperation in their ssh daemons, by setting this in your
 /etc/ssh/sshd_config file:
 
  UsePrivilegeSeparation yes
 
 Depending on what your system is, privsep may break some ssh
 functionality.  However, with privsep turned on, you are immune from
 at least one remote hole.  Understand?
 
 3.3 does not contain a fix for this upcoming bug.
 
 If priv seperation does not work on your operating system, you need to
 work with your vendor so that we get patches to make it work on your
 system.  Our developers are swamped enough without trying to support
 the myriad of PAM and other issues which exist in various systems. You
 must call on your vendors to help us.
 
 Basically, OpenSSH sshd(8) is something like 27000 lines of code.  A
 lot of that runs as root.  But when UsePrivilegeSeparation is enabled,
 the daemon splits into two parts.  A part containing about 2500 lines
 of code remains as root, and the rest of the code is shoved into a
 chroot-jail without any privs.  This makes the daemon less vulnerable
 to attack.
 
 We've been trying to warn vendors about 3.3 and the need for privsep,
 but they really have not heeded our call for assistance.  They have
 basically ignored us.  Some, like Alan Cox, even went further stating
 that privsep was not being worked on because Nobody provided any info
 which proves the problem, and many people dont trust you theo and
 suggested I might be feeding everyone a trojan (I think I'll publish
 that letter -- it is just so funny).  HP's representative was
 downright rude, but that is OK because Compaq is retiring him.  Except
 for Solar Designer, I think none of them has helped the OpenSSH
 portable developers make privsep work better on their systems.
 Apparently Solar Designer is the only person who understands the need
 for this stuff.
 
 So, if vendors would JUMP and get it working better, and send us
 patches IMMEDIATELY, we can perhaps make a 3.3.1p release on Friday
 which supports these systems better.  So send patches by Thursday
 night please.  Then on Tuesday or Wednesday the complete bug report
 with patches (and exploits soon after I am sure) will hit BUGTRAQ.
 
 Let me repeat: even if the bug exists in a privsep'd sshd, it is not
 exploitable.  Clearly we cannot yet publish what the bug is, or
 provide anyone with the real patch, but we can try to get maximum
 deployement of privsep, and therefore make it hurt less when the
 problem is published.
 
 So please push your vendor to get us maximally working privsep patches
 as soon as possible!
 
 We've given most vendors since Friday last week until Thursday to get
 privsep working well for you so that when the announcement comes out
 next week their customers are immunized.  That is nearly a full week
 (but they have already wasted a weekend and a Monday).  Really I think
 this is the best we can hope to do (this thing will eventually leak,
 at which point the details will be published).
 
 Customers can judge their vendors by how they respond to this issue.
 
 OpenBSD and NetBSD users should also update to OpenSSH 3.3 right away.
 On OpenBSD privsep works flawlessly, and I have reports that is also
 true on NetBSD.  All other systems appear to have minor or major
 weaknesses when this code is running.
 
 (securityfocus postmaster; please post this through immediately, since
 i have bcc'd over 30 other places..)



--
Philip J. Koenig   [EMAIL PROTECTED]
Electric Kahuna Systems -- Computers  Communications for the New Millenium

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Upcoming OpenSSH vulnerability (fwd)

2002-06-25 Thread Ronnie Gauthier

Read this yesterday. an upgrade seems in order.

On Tuesday 25 June 2002 02:50 pm, Philip J. Koenig wrote:
 There has been a heated discussion on this over in the FreeBSD
 security list, suffice to say that Theo's obnoxious attitude doesn't

 help matters.  Nonetheless this is important info:
  --- Forwarded message 
  Date: Mon, 24 Jun 2002 15:00:10 -0600
  From: Theo de Raadt [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
  Subject: Upcoming OpenSSH vulnerability
 
  There is an upcoming OpenSSH vulnerability that we're working on with
  ISS.
   Details will be published early next week.
 
  However, I can say that when OpenSSH's sshd(8) is running with priv
  seperation, the bug cannot be exploited.
 
  OpenSSH 3.3p was released a few days ago, with various improvements
  but in particular, it significantly improves the Linux and Solaris
  support for priv sep.  However, it is not yet perfect.  Compression is
  disabled on some systems, and the many varieties of PAM are causing
  major headaches.
 
  However, everyone should update to OpenSSH 3.3 immediately, and enable
  priv seperation in their ssh daemons, by setting this in your
  /etc/ssh/sshd_config file:
 
   UsePrivilegeSeparation yes
 
  Depending on what your system is, privsep may break some ssh
  functionality.  However, with privsep turned on, you are immune from
  at least one remote hole.  Understand?
 
  3.3 does not contain a fix for this upcoming bug.
 
  If priv seperation does not work on your operating system, you need to
  work with your vendor so that we get patches to make it work on your
  system.  Our developers are swamped enough without trying to support
  the myriad of PAM and other issues which exist in various systems. You
  must call on your vendors to help us.
 
  Basically, OpenSSH sshd(8) is something like 27000 lines of code.  A
  lot of that runs as root.  But when UsePrivilegeSeparation is enabled,
  the daemon splits into two parts.  A part containing about 2500 lines
  of code remains as root, and the rest of the code is shoved into a
  chroot-jail without any privs.  This makes the daemon less vulnerable
  to attack.
 
  We've been trying to warn vendors about 3.3 and the need for privsep,
  but they really have not heeded our call for assistance.  They have
  basically ignored us.  Some, like Alan Cox, even went further stating
  that privsep was not being worked on because Nobody provided any info
  which proves the problem, and many people dont trust you theo and
  suggested I might be feeding everyone a trojan (I think I'll publish
  that letter -- it is just so funny).  HP's representative was
  downright rude, but that is OK because Compaq is retiring him.  Except
  for Solar Designer, I think none of them has helped the OpenSSH
  portable developers make privsep work better on their systems.
  Apparently Solar Designer is the only person who understands the need
  for this stuff.
 
  So, if vendors would JUMP and get it working better, and send us
  patches IMMEDIATELY, we can perhaps make a 3.3.1p release on Friday
  which supports these systems better.  So send patches by Thursday
  night please.  Then on Tuesday or Wednesday the complete bug report
  with patches (and exploits soon after I am sure) will hit BUGTRAQ.
 
  Let me repeat: even if the bug exists in a privsep'd sshd, it is not
  exploitable.  Clearly we cannot yet publish what the bug is, or
  provide anyone with the real patch, but we can try to get maximum
  deployement of privsep, and therefore make it hurt less when the
  problem is published.
 
  So please push your vendor to get us maximally working privsep patches
  as soon as possible!
 
  We've given most vendors since Friday last week until Thursday to get
  privsep working well for you so that when the announcement comes out
  next week their customers are immunized.  That is nearly a full week
  (but they have already wasted a weekend and a Monday).  Really I think
  this is the best we can hope to do (this thing will eventually leak,
  at which point the details will be published).
 
  Customers can judge their vendors by how they respond to this issue.
 
  OpenBSD and NetBSD users should also update to OpenSSH 3.3 right away.
  On OpenBSD privsep works flawlessly, and I have reports that is also
  true on NetBSD.  All other systems appear to have minor or major
  weaknesses when this code is running.
 
  (securityfocus postmaster; please post this through immediately, since
  i have bcc'd over 30 other places..)


___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT TID Re: Noteworthy News Item

2002-06-25 Thread Net Llama!

On Tue, 25 Jun 2002, Matthew Carpenter wrote:
 General List?  What's that?  Hasn't that been dead for a long time?  :)

No more so than this list, when all that appears is alot of religious
rambling.

As someone else said, if i want to listen to people preach, i'll go to a
house of worship.  The name of this list is not, and never has been,
religious-users.



 On Tue, 25 Jun 2002 14:49:51 -0400 (EDT)
 Net Llama! [EMAIL PROTECTED] wrote:

  If anyone really wants to continue this, subscribe to the General list:
  http://linux-sxs.org/mailman/listinfo/
 ___
 Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
 Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.


-- 
~~
Lonni J Friedman[EMAIL PROTECTED]
Linux Step-by-step  TyGeMo  http://netllama.ipfox.com

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Upcoming OpenSSH vulnerability (fwd)

2002-06-25 Thread Net Llama!

On Tue, 25 Jun 2002, Philip J. Koenig wrote:

 There has been a heated discussion on this over in the FreeBSD
 security list, suffice to say that Theo's obnoxious attitude doesn't
 help matters.  Nonetheless this is important info:

The way i see it, if you write a heaping hunk of code that thousands, if
not millions of people use on a daily basis, you can be as obnoxious as
you like.

-- 
~~
Lonni J Friedman[EMAIL PROTECTED]
Linux Step-by-step  TyGeMo  http://netllama.ipfox.com

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Upcoming OpenSSH vulnerability (fwd)

2002-06-25 Thread Michael Hipp

I don't believe there is anywhere written in the social contract that 
producing a certain quantity of code entitles you to utterly ignore the 
common ideas of civility and inter-personal relationships.

But, unfortunately, a great deal of the OSS developers seem to see it the 
way you stated.

Michael

On Tuesday 25 June 2002 03:38 pm, Net Llama! wrote:
 On Tue, 25 Jun 2002, Philip J. Koenig wrote:
  There has been a heated discussion on this over in the FreeBSD
  security list, suffice to say that Theo's obnoxious attitude doesn't
  help matters.  Nonetheless this is important info:

 The way i see it, if you write a heaping hunk of code that thousands, if
 not millions of people use on a daily basis, you can be as obnoxious as
 you like.


___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.