Re: FIle access auditing

2005-05-02 Thread Russell Coker
On Wednesday 27 April 2005 21:16, Marcell Metzner [EMAIL PROTECTED] wrote: I have seen this using SE Linux or RSBAC. This 2 are the best I have seen till now. One limitation of SE Linux in this regard is due to the design of the LSM interface. The LSM interface does not get called until

Re: Fixing stupid PHP application design flaws

2005-05-02 Thread Henrique de Moraes Holschuh
On Mon, 02 May 2005, Thijs Kinkhorst wrote: Your viewpoint requires shell access for webmasters and that creates extra Why? It is not too difficult to make your PHP scripts use ../include/foo for their includes, and that is all it takes to get the crap out of the exported tree. dependencies

about install --reinstall for overwriting possible trojaned bins

2005-05-02 Thread Jorge Salamero
i was thinking about checking if all debian binaries on my system are safe, not trojaned. there is debsums but not all binaries come with their md5 in the debian packages, so a solution is to make an apt-get install --reinstall for every package on my system and then save their md5 for future

Re: about install --reinstall for overwriting possible trojaned bins

2005-05-02 Thread Floris Bruynooghe
On Mon, May 02, 2005 at 06:10:11PM +0200, Jorge Salamero wrote: is there any way to do something like 'apt-get install --reinstall *' ? apt-get install --reistall `dpkg --get-selections`? if my binaries are safe, my kernel is safe, after a reboot my machine could be unless apt-get was