Re: [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness

2005-10-29 Thread Philippe Troin
[EMAIL PROTECTED] (Martin Schulze) writes: The following matrix explains which version in which distribution has this problem corrected. oldstable (woody) stable (sarge) unstable (sid) openssl 0.9.6c-2.woody.8 0.9.7e-3sarge1 0.9.8-3

Re: Addressing the recent zlib issue

2005-07-10 Thread Philippe Troin
Florian Weimer [EMAIL PROTECTED] writes: On my system, the following packages contain statically linked copies of zlib-related code: dpkg (zlib version 1.2.2) various kernel images (zlib version 1.1.3) monotone (probably an independent reimplementation of the algorithm)

Re: Kernel Crash Bug????

2004-06-14 Thread Philippe Troin
peace bwitchu [EMAIL PROTECTED] writes: Anyone have info on this one? http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html Fixed by Linux here: http://linux.bkbits.net:8080/linux-2.5/diffs/include/asm-i386/[EMAIL

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread Philippe Troin
elijah wright [EMAIL PROTECTED] writes: It's been a long time, but IIRC, the NIS uses it's own dbm files which are built from those in /etc. The test account must have existed when you set it up. Arnaud, if i remember correctly, there's a special directory you can go to and type 'make'

Re: Secure temporary fifo creation

2004-05-18 Thread Philippe Troin
Goswin von Brederlow [EMAIL PROTECTED] writes: Philippe Troin [EMAIL PROTECTED] writes: Not needed... This should be race-free: char *s; while (s = (tempnam(/tmp, foo)) { if (mknod(s, S_IFIFO|0600, 0) == 0) break; if (errno != EEXIST) /* error

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread Philippe Troin
elijah wright [EMAIL PROTECTED] writes: It's been a long time, but IIRC, the NIS uses it's own dbm files which are built from those in /etc. The test account must have existed when you set it up. Arnaud, if i remember correctly, there's a special directory you can go to and type 'make'

Re: Secure temporary fifo creation

2004-05-17 Thread Philippe Troin
Greg Deitrick [EMAIL PROTECTED] writes: Hello, What is the recommended method for securely creating a temporary named pipe in C code? Looking at the man pages for various library calls it appears that tmpfile(3) is probably an acceptable means of creating a temporary file, but this

Re: Secure temporary fifo creation

2004-05-17 Thread Philippe Troin
Greg Deitrick [EMAIL PROTECTED] writes: Hello, What is the recommended method for securely creating a temporary named pipe in C code? Looking at the man pages for various library calls it appears that tmpfile(3) is probably an acceptable means of creating a temporary file, but this

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr [EMAIL PROTECTED] writes: Greetings, Am Mittwoch, 14. April 2004 16:52 schrieb Martin Schulze: -- Debian Security Advisory DSA 479-1 [EMAIL PROTECTED] http://www.debian.org/security/

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr [EMAIL PROTECTED] writes: Greetings,.. Am Mittwoch, 14. April 2004 20:57 schrieben Sie: Jan Lühr [EMAIL PROTECTED] writes: Greetings, Okay... This is the result of a cursory check, do your homework, yada, yada... Thanks for doing so ;) Anyway, this wasn't the

Re: Converting Users from Solaris to (Debian-)Linux

2002-08-30 Thread Philippe Troin
Jan-Hendrik Palic [EMAIL PROTECTED] writes: Hi .. On Fri, Aug 30, 2002 at 12:04:15PM -0400, Steve Mickeler wrote: Your solaris hashes arent MD5. is it not possible to upgrade to MD5 on Solaris? AFAIK Solaris does not support MD5. I wrote a PAM module that exactlky does that... Works

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood [EMAIL PROTECTED] writes: On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: Hi everyone, please can me tell somebody how to make MD5 passwords in order to supply it to ftppasswd file? You just need to call the standard crypt() function with the apropriate

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood [EMAIL PROTECTED] writes: On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: Hi everyone, please can me tell somebody how to make MD5 passwords in order to supply it to ftppasswd file? You just need to call the standard crypt() function with the apropriate

Re: home directory permission

2001-12-01 Thread Philippe Troin
Peter Samek [EMAIL PROTECTED] writes: On Fri, Nov 30, 2001 at 12:22:34PM -0300, teste teste1 wrote: Howto modify permission when create a new user, I do not want to change the permissions all time that to add a new user. Default Permission drwxr-sr-x2 teste2 teste2

Re: home directory permission

2001-12-01 Thread Philippe Troin
Peter Samek [EMAIL PROTECTED] writes: On Fri, Nov 30, 2001 at 12:22:34PM -0300, teste teste1 wrote: Howto modify permission when create a new user, I do not want to change the permissions all time that to add a new user. Default Permission drwxr-sr-x2 teste2 teste2

Re: Multiple IP addresses

2001-10-23 Thread Philippe Troin
Marcel Welschbillig [EMAIL PROTECTED] writes: Can any one tell me the kernel option to enable on 2.2.17 to be able to specify multiple ethernet addresses in the /etc/network/interfaces file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? I know it works on the standard

Re: Multiple IP addresses

2001-10-22 Thread Philippe Troin
Marcel Welschbillig [EMAIL PROTECTED] writes: Can any one tell me the kernel option to enable on 2.2.17 to be able to specify multiple ethernet addresses in the /etc/network/interfaces file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? I know it works on the standard

Re: listen on tcp port and log input ??

2001-09-05 Thread Philippe Troin
Marcel Welschbillig [EMAIL PROTECTED] writes: Dose anybody know of any programs i could use to open a port on a debian box and log the data that comes in to a file ?? What i want to do is have a CISCO router send data that it recieves on an AUX port to a tcp port on a linux machine and log

Re: listen on tcp port and log input ??

2001-09-05 Thread Philippe Troin
Marcel Welschbillig [EMAIL PROTECTED] writes: Dose anybody know of any programs i could use to open a port on a debian box and log the data that comes in to a file ?? What i want to do is have a CISCO router send data that it recieves on an AUX port to a tcp port on a linux machine and log

Re: Logging practices (and why does it suck in Debian?)

2001-04-20 Thread Philippe Troin
Lupe Christoph [EMAIL PROTECTED] writes: On Friday, 2001-04-20 at 14:14:13 -0300, Peter Cordes wrote: On Fri, Apr 20, 2001 at 10:12:42AM -0600, Tim Uckun wrote: Shared libraries may have been a good idea but somehow the implementation in both windows and linux got all weird. I just

Re: Logging practices (and why does it suck in Debian?)

2001-04-20 Thread Philippe Troin
Lupe Christoph [EMAIL PROTECTED] writes: On Friday, 2001-04-20 at 14:14:13 -0300, Peter Cordes wrote: On Fri, Apr 20, 2001 at 10:12:42AM -0600, Tim Uckun wrote: Shared libraries may have been a good idea but somehow the implementation in both windows and linux got all weird. I just