Re: setuid changes

2001-09-22 Thread Steve Greenland
led to root? Am I missing something? In the cron 3.0pl-71 (in testing and unstable), who can set the CHECKSECURITY_EMAIL variable to the desired recipient (in /etc/checksecurity.conf). See checksecurity(8) for more configuration info. Steve -- Steve Greenland <[EMAIL PROTECTED]>

Re: setuid changes

2001-09-22 Thread Steve Greenland
led to root? Am I missing something? In the cron 3.0pl-71 (in testing and unstable), who can set the CHECKSECURITY_EMAIL variable to the desired recipient (in /etc/checksecurity.conf). See checksecurity(8) for more configuration info. Steve -- Steve Greenland <[EMAIL PROTECTED]> --

Re: SSH install in Woody

2001-09-10 Thread Steve Greenland
On 10-Sep-01, 03:34 (CDT), Colin Walters <[EMAIL PROTECTED]> wrote: > Jeff Coppock <[EMAIL PROTECTED]> writes: > > > I'm having trouble getting ssh installed on my new woody system. > > I'm getting segmentation faults during the ssh-keygen process. I > > can't find any reason for this. > > Are

Re: SSH install in Woody

2001-09-10 Thread Steve Greenland
On 10-Sep-01, 03:34 (CDT), Colin Walters <[EMAIL PROTECTED]> wrote: > Jeff Coppock <[EMAIL PROTECTED]> writes: > > > I'm having trouble getting ssh installed on my new woody system. > > I'm getting segmentation faults during the ssh-keygen process. I > > can't find any reason for this. > > Are

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Steve Greenland
On 27-Aug-01, 17:25 (CDT), Samu <[EMAIL PROTECTED]> wrote: > hi, > this is just a curiosity, i think is not so security related, aniway... So it should be on the debian-user list. > if i made a package by my self, or from deb sources, of a package > that already exist on to the debian db, and my

Re: [ OT ] local packages vs official packages

2001-08-28 Thread Steve Greenland
On 27-Aug-01, 17:25 (CDT), Samu <[EMAIL PROTECTED]> wrote: > hi, > this is just a curiosity, i think is not so security related, aniway... So it should be on the debian-user list. > if i made a package by my self, or from deb sources, of a package > that already exist on to the debian db, and m

Re: --no-run option (was: Re: red worm amusement)

2001-07-23 Thread Steve Greenland
ons restart themselves when they are > upgraded. Folks, this is all designed and implemented, and is waiting on the sysvinit and file-rc maintainers to integrate. See http://bugs.debian.org/76868 (Note that it changed somewhat during the disccussion, so read *all* the way through before commenting

Re: --no-run option (was: Re: red worm amusement)

2001-07-23 Thread Steve Greenland
ons restart themselves when they are > upgraded. Folks, this is all designed and implemented, and is waiting on the sysvinit and file-rc maintainers to integrate. See http://bugs.debian.org/76868 (Note that it changed somewhat during the disccussion, so read *all* the way through before

Re: pgp and elm

2001-07-15 Thread Steve Greenland
do -- I was happy elm user, but switched to mutt years ago. (The mutt project was started by Michael Elkins, who is the "me" in elm-me+, for whatever that may be worth.) Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read every list I post to.)

Re: pgp and elm

2001-07-15 Thread Steve Greenland
do -- I was happy elm user, but switched to mutt years ago. (The mutt project was started by Michael Elkins, who is the "me" in elm-me+, for whatever that may be worth.) Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe t

Re: shared root account

2001-07-06 Thread Steve Greenland
can do, and that it logs (or can be set to log) all issued commands. (Except that if you allow 'sudo bash' or some variation, it won't log the session, just that bash started, of course.). But at least you'll have some audit trail. Steve -- Steve Greenland <[EMAIL PROTECTE

Re: shared root account

2001-07-06 Thread Steve Greenland
can do, and that it logs (or can be set to log) all issued commands. (Except that if you allow 'sudo bash' or some variation, it won't log the session, just that bash started, of course.). But at least you'll have some audit trail. Steve -- Steve Greenland <[EMAIL PROTECTE

Re: Security in a shell that starts ssh

2001-06-14 Thread Steve Greenland
an we contact? I've submitted a bug against lists.debian.org asking that it be created. It's #100907. If I don't get a response in a few days I may just create it on my hosting system. Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read every list I post to.)

Re: Security in a shell that starts ssh

2001-06-14 Thread Steve Greenland
an we contact? I've submitted a bug against lists.debian.org asking that it be created. It's #100907. If I don't get a response in a few days I may just create it on my hosting system. Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I s

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
On 13-Jun-01, 13:47 (CDT), Tim van Erven <[EMAIL PROTECTED]> wrote: > > On Wed, Jun 13, 2001 at 10:57:08AM -0500, Steve Greenland wrote: > > > > int main() > > > > > > int main(void) /* () != (void) in C */ > > The comp.lang.c faq (http://ww

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
at exit(_macro_) is better style than return from main(), but I'm hard pressed to find a technical argument. > Spaces and other shell metacharecters are irrelevant in this case, since > executed command won't undergo shell interpretation. Hmmm, right. I should have tried it. This i

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
On 13-Jun-01, 13:47 (CDT), Tim van Erven <[EMAIL PROTECTED]> wrote: > > On Wed, Jun 13, 2001 at 10:57:08AM -0500, Steve Greenland wrote: > > > > int main() > > > > > > int main(void) /* () != (void) in C */ > > The comp.lang.c faq (http://ww

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
t(_macro_) is better style than return from main(), but I'm hard pressed to find a technical argument. > Spaces and other shell metacharecters are irrelevant in this case, since > executed command won't undergo shell interpretation. Hmmm, right. I should have tried it. This is the

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
exit(EXIT_SUCCESS); /* return doesn't call atexit() registered functions, which doesn't apply in this case, but it's a good habit to get into */ > } You also should should make sure name doesn't contain any spaces: as written I can

Re: Security in a shell that starts ssh

2001-06-13 Thread Steve Greenland
exit(EXIT_SUCCESS); /* return doesn't call atexit() registered functions, which doesn't apply in this case, but it's a good habit to get into */ > } You also should should make sure name doesn't contain any spaces: as written I can

Re: Logging packets from iptables

2001-05-23 Thread Steve Greenland
> But do you read every post of every list you post to? Apparently not. (Well, I'd read the post, but didn't go back and re-read it before I mouthed off at Chris). Maxima mea culpa. > (sorry it was too tempting) And completely justified. :-) Steve, who opened an editor and inserted a f

Re: Logging packets from iptables

2001-05-23 Thread Steve Greenland
> But do you read every post of every list you post to? Apparently not. (Well, I'd read the post, but didn't go back and re-read it before I mouthed off at Chris). Maxima mea culpa. > (sorry it was too tempting) And completely justified. :-) Steve, who opened an editor and inserted a f

Re: Logging packets from iptables

2001-05-23 Thread Steve Greenland
this is port web servers listen on, and web browsers send requests to. Replies from web servers do not come back to 80, they come back to the client, at whatever (high-numbered, non-privileged, pretty much arbitrary) port got allocated when the client established the connection. Steve -- Steve Gr

Re: Logging packets from iptables

2001-05-23 Thread Steve Greenland
rver_ -- this is port web servers listen on, and web browsers send requests to. Replies from web servers do not come back to 80, they come back to the client, at whatever (high-numbered, non-privileged, pretty much arbitrary) port got allocated when the client established the connection. Steve --

Re: empty log files

2001-04-06 Thread Steve Greenland
messages since have been written to whereever those file descriptors point. You could poke around in /proc/(syslogdpid)/fd, or just run /etc/init.d/sysklogd restart. Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read every list I post to.)

Re: Ports to block?

2001-04-06 Thread Steve Greenland
aining from several more sarcastic replies. -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read every list I post to.)

Re: empty log files

2001-04-06 Thread Steve Greenland
messages since have been written to whereever those file descriptors point. You could poke around in /proc/(syslogdpid)/fd, or just run /etc/init.d/sysklogd restart. Steve -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read e

Re: Ports to block?

2001-04-06 Thread Steve Greenland
aining from several more sarcastic replies. -- Steve Greenland <[EMAIL PROTECTED]> (Please do not CC me on mail sent to this list; I subscribe to and read every list I post to.) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]