Re: woody kernel image

2005-01-29 Thread Harald Krammer
Hi ! You are right, but why is the kernel image from woody not up-to date ? A simple 'apt-get update apt-get upgrade' will not help. Is is not better to remove the kernel image from woody and take the kernel image 2.4.27 ( I know , it is a version update). A lot of people use only the kernel

Re: possible samba security problem

2005-01-29 Thread Ruben van der Leij
+++ Nick Boyce [29/01/05 02:56 +]: I think it should be okay to simply change the permissions on /var/run/samba/locking.tdb so only root can access it. There's no real need for ordinary users to use smbstatus anyway. IMHO. Have you actually *tried* that 'solution'? Perhaps smbstatus

[Fwd: security]

2005-01-29 Thread michael
On debian-user it was suggested I also post this here, thanks, Michael Forwarded Message From: michael [EMAIL PROTECTED] To: debian user debian-user@lists.debian.org Subject: security Date: Fri, 28 Jan 2005 09:46:31 + I notice that frequently many machines around here get

Re: woody kernel image

2005-01-29 Thread Jan Lühr
Greetings, Am Freitag, 28. Januar 2005 21:25 schrieb Harald Krammer: hi ! I have running some debian/woody machines with kernel 2.4.18. blocked@blocked:~$ cat /proc/version Linux version 2.4.18-1-k7 ([EMAIL PROTECTED]) (gcc version 2.95.4 20011002 (Debian prerelease)) #1 Wed Apr 14

Re: [Fwd: security]

2005-01-29 Thread Jan Lhr
Greetings,... Am Samstag, 29. Januar 2005 16:05 schrieb michael: On debian-user it was suggested I also post this here, thanks, Michael Forwarded Message From: michael [EMAIL PROTECTED] To: debian user debian-user@lists.debian.org Subject: security Date: Fri, 28 Jan 2005

Re: [Fwd: security]

2005-01-29 Thread Steve Suehring
Could it be this? http://lists.sans.org/pipermail/intrusions/2004-August/008357.html You didn't specify which usernames were being used, so it's tough to tell if that's the same. A couple of simple and quick things that I might do if this was a concern: -Setup an iptables firewall on the

Empty Release.gpg files and Debian Archive key for 2005

2005-01-29 Thread Michal J. Gajda
Hello I'm probably not the only one to notice, that Release.gpg files for unstable and testing are empty, and that Debian Archive key for 2005 seems not to appear in /usr/share/apt/debian-archive.gpg. When can I hope new Debian Archive for 2005 to appear? Who can fix the problem? Is there a

Re: [Fwd: security]

2005-01-29 Thread Demonen
I'm sure others have appropriate suggestions as well. I've had similar problems myself so I threw together a little perl just to check what usernames are being used so I can make a note of never allowing any of them to be a valid one. It's not very pretty, but you're welcome to it:

Re: [Fwd: security]

2005-01-29 Thread michael
On Sat, 2005-01-29 at 09:44 -0600, Steve Suehring wrote: Could it be this? http://lists.sans.org/pipermail/intrusions/2004-August/008357.html You didn't specify which usernames were being used, so it's tough to tell if that's the same. There seems to be two sets, one is half a dozen

Re: woody kernel image

2005-01-29 Thread Michelle Konzack
Am 2005-01-29 14:45:37, schrieb Harald Krammer: Hi ! You are right, but why is the kernel image from woody not up-to date ? There are Security Updates for kernel 2.4.18 A simple 'apt-get update apt-get upgrade' will not help. Is is not better to remove the kernel image from woody and take

Re: [Fwd: security]

2005-01-29 Thread Jeffrey L. Taylor
A possible improvement: http://www.soloport.com/iptables.html Quoting Steve Suehring [EMAIL PROTECTED]: Could it be this? http://lists.sans.org/pipermail/intrusions/2004-August/008357.html You didn't specify which usernames were being used, so it's tough to tell if that's the same.

Re: [Fwd: security]

2005-01-29 Thread smj
On Sat, Jan 29, 2005 at 03:05:35PM +, michael wrote: On debian-user it was suggested I also post this here, thanks, Michael Forwarded Message From: michael [EMAIL PROTECTED] To: debian user debian-user@lists.debian.org Subject: security Date: Fri, 28 Jan 2005 09:46:31

Re: Empty Release.gpg files and Debian Archive key for 2005

2005-01-29 Thread Florian Weimer
* Michal J. Gajda: When can I hope new Debian Archive for 2005 to appear? Who can fix the problem? I've suggested to the ftp-masters to add a new self-signature to the 2004 key as a temporary measure. This should fix the Release file signing. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: woody kernel image

2005-01-29 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: There are Security Updates for kernel 2.4.18 The last update for kernel-source-2.4.18 in stable was in April 2004. BTW: I wonder why http://packages.qa.debian.org/k/kernel-source-2.4.18.html contains the latest version 2.4.18-14.3 but no entry in the

Re: [Fwd: security]

2005-01-29 Thread Paul Day
On Sat, 29 Jan 2005, michael wrote: On debian-user it was suggested I also post this here, thanks, Michael snip I notice that frequently many machines around here get attacked by a potential hacker (a prog I guess) trying lots of usernames to get in to all the machines, using the same set of

Re: woody kernel image

2005-01-29 Thread smj
On Sat, Jan 29, 2005 at 07:12:21PM -0800, peace bwitchu wrote: This has been bothering me as well. They dropped support for kernel 2.4.18 when Herbert Xu left but I don't remember seeing any notification of this. I roll my own but how many boxes out there havn't been patched because they