Re: Kernal Panic

2001-05-31 Thread Zak Kipling
On Thu, 31 May 2001, Dan Hutchinson wrote: request-module[block-major-8]: Root fs not mounted. VFS: Cannot open root device 801 or 08:01 Please append a correct root= boot option Kernel panic: VFS: Unable to mount root fs on 08:01 This is way off-topic on debian-security, but: This

Re: root fs/crypted

2001-05-30 Thread Zak Kipling
On Tue, 29 May 2001 [EMAIL PROTECTED] wrote: I see it as more than this. I see it as ensuring that the data on the disk does not get accessed by anyone never intended to see it. (physically, of course). I guess this would mostly be cool for thwarting things like police raids, Although in

Re: root fs/crypted

2001-05-30 Thread Zak Kipling
On Wed, 30 May 2001, Jon Leonard wrote: I'm not aware of any actual implementations, unfortunately. http://www.mcdonald.org.uk/StegFS/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: root fs/crypted

2001-05-30 Thread Zak Kipling
On Tue, 29 May 2001 [EMAIL PROTECTED] wrote: I see it as more than this. I see it as ensuring that the data on the disk does not get accessed by anyone never intended to see it. (physically, of course). I guess this would mostly be cool for thwarting things like police raids, Although in

Re: root fs/crypted

2001-05-30 Thread Zak Kipling
On Wed, 30 May 2001, Jon Leonard wrote: I'm not aware of any actual implementations, unfortunately. http://www.mcdonald.org.uk/StegFS/

Re: port 812

2001-05-27 Thread Zak Kipling
On Sun, 27 May 2001, Daniel Faller wrote: I did a nmap scan (nmap -sT hostname) and found several ports open. The only one I could not identify was 812. Have you tried netstat -tp or fuser -vn tcp 812 on the machine in question to find out what process is listening on it? That's usually how I

Re: proftpd exploit??

2001-05-24 Thread Zak Kipling
On Thu, 24 May 2001, Andres Herrera wrote: I've tried to exploit it by login and sending: ls ../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../ and suddenly it began eating memory and getting slow all the system. ... Any solution?? Resource limits on the ftp server process? Zak. --

Re: proftpd exploit??

2001-05-24 Thread Zak Kipling
On Thu, 24 May 2001, Andres Herrera wrote: I've tried to exploit it by login and sending: ls ../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../ and suddenly it began eating memory and getting slow all the system. ... Any solution?? Resource limits on the ftp server process? Zak.

Re: secure install

2001-02-17 Thread Zak Kipling
to larger disks, then add additional partitions if you want to take advantage of the extra space. The geometry is only relevant is you want to dd entire disks (eg /dev/hda). Alternatively you can tar the whole system -- slightly more work, but allows you to unpack on a differently-sized partition. Zak

RE: Extremely simple MTA

2000-12-14 Thread Zak Kipling
On Thu, 14 Dec 2000, Stefan Melcher wrote: try "nullmailer" from Bruce Guenter http://em.ca/~bruceg/nullmailer/ Or ssmtp. (There are Debian packages of both.) Zak. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: Extremely simple MTA

2000-12-14 Thread Zak Kipling
On Thu, 14 Dec 2000, Stefan Melcher wrote: try nullmailer from Bruce Guenter http://em.ca/~bruceg/nullmailer/ Or ssmtp. (There are Debian packages of both.) Zak.

Re: something on port 98?

2000-10-13 Thread Zak Kipling
On Fri, 13 Oct 2000, Bradley M Alexander wrote: Filtered means that a firewall, filter, or other network obstacle is covering the port and preventing nmap from determining whether the port is open. Are you running IPchains that is specifically blocking port 98? That would

Re: something on port 98?

2000-10-13 Thread Zak Kipling
On Fri, 13 Oct 2000, Bradley M Alexander wrote: Filtered means that a firewall, filter, or other network obstacle is covering the port and preventing nmap from determining whether the port is open. Are you running IPchains that is specifically blocking port 98? That would

Re: recent gpm DoS issue

2000-07-28 Thread Zak Kipling
On Fri, 28 Jul 2000, Jim Breton wrote: And the file only exists while gpm is running (it's removed when you stop gpm) so I am guessing it is the socket through which clients read mouse data. Isn't that /dev/gpmdata? -- Zak Kipling, Girton College, Cambridge. As long as the superstition

SMB passwords etc (was How can I help ?)

2000-06-14 Thread Zak Kipling
allow for the required flexibiliity, with either one or both off the unix/SMB password setting modules used by passwd and smbd as desired. This would hopefully eliminate the need for the password sync option with its dependence on the precise prompt string produced by the passwd command. -- Zak

Re: bind running as root in Mandrake 7.0

2000-06-05 Thread Zak Kipling
better that the default mode should be (relatively) safe, requiring active intervention (and presumably knowledge) to open the big holes like running it as root -- which as has already been pointed out is only likely to be desirable for a very small minority of users. -- Zak Kipling, E114 Wolfson

Re: Tripwire in bin-directory?

2000-05-24 Thread Zak Kipling
into your system, he/she could change /usr/lib/tripwire itself... isn't this just as much of a problem, except in the unlikely event that /usr/lib is hardware write-protected while /bin is not. -- Zak Kipling, Girton College, Cambridge, England. As long as the superstition that people should obey

Re: Sendmail

2000-03-27 Thread Zak Kipling
On 27 Mar 2000, Brian May wrote: I think some programs use port 25 for outgoing mail, too (netscape? pine? mh?). True. In which case block port 25 on all _external_ interfaces (eth0, ppp0 etc) but leave it open on the loopback interface. -- Zak Kipling. As long as the superstition