Re: DSA policy change? (posting stopped to full-disclosure ML)

2005-01-27 Thread Steve Kemp
On Thu, Jan 27, 2005 at 11:53:45AM +0900, Seiji Kaneko wrote: The security team had posted DSAs to full-disclosure mailing list as well as Debian security announce ML, but seems to have stopped to post since last December. Are there any policy change? I'm not sure about the full-disclosure

Re: DSA policy change? (posting stopped to full-disclosure ML)

2005-01-27 Thread Michael Stone
On Thu, Jan 27, 2005 at 11:53:45AM +0900, Seiji Kaneko wrote: The security team had posted DSAs to full-disclosure mailing list as well as Debian security announce ML, but seems to have stopped to post since last December. Are there any policy change? The security team has never posted

possible samba security problem

2005-01-27 Thread Thorsten Giese
Hello there. I just discovered, that smbstatus can be run by a normal user. It gives sensible Information about usernames and pathes to files (locked files). I do not find this behaviour reasonable. Any comments? suggestions how to fix this? Should I file a bug report? -- Viele Grüße

Re: possible samba security problem

2005-01-27 Thread Michael Stone
On Thu, Jan 27, 2005 at 03:28:49PM +0100, Thorsten Giese wrote: I just discovered, that smbstatus can be run by a normal user. It gives sensible Information about usernames and pathes to files (locked files). I do not find this behaviour reasonable. Any comments? suggestions how to fix this?

Re: possible samba security problem

2005-01-27 Thread Thorsten Giese
Am Donnerstag, 27. Januar 2005 15:56 schrieb Michael Stone: I just discovered, that smbstatus can be run by a normal user. It gives sensible Information about usernames and pathes to files (locked files). I do not find this behaviour reasonable. Any comments? suggestions how to fix this?

Re: possible samba security problem

2005-01-27 Thread Daniel van Eeden
Use setfacl to set/remove rights to smbstatus. Example: chmod 700 /usr/bin/smbstatus setfacl -m u:adminuser:r-x /usr/bin/smbstatus setfacl -m u:baduser:--- /usr/bin/smbstatus Use groups instead of users when posible. setfacl is part of the acl package. On Thu, 2005-01-27 at 15:28 +0100, Thorsten

Re: auth log

2005-01-27 Thread Bernd Eckenfels
In article [EMAIL PROTECTED] you wrote: Does any body know what this is mean: su[32278]: + ??? root-nobody I found this line in my auth.log file. It means some root process has used su to drop priveledges and become nobody. cron jobs are known to do that. Gruss Bernd -- To

Re: possible samba security problem

2005-01-27 Thread Michael Stone
On Thu, Jan 27, 2005 at 05:11:51PM +0100, Daniel van Eeden wrote: Use setfacl to set/remove rights to smbstatus. Example: chmod 700 /usr/bin/smbstatus setfacl -m u:adminuser:r-x /usr/bin/smbstatus setfacl -m u:baduser:--- /usr/bin/smbstatus Use groups instead of users when posible. setfacl is part

Debian Archive Automatic Signing Key 2005

2005-01-27 Thread Claudius
Hello,   does anybody know where I can find the new Debian Archive Automatic Signing Key 2005? Thanks Claudius

Re: Debian Archive Automatic Signing Key 2005

2005-01-27 Thread martin f krafft
also sprach Claudius [EMAIL PROTECTED] [2005.01.27.2131 +0100]: does anybody know where I can find the new Debian Archive Automatic Signing Key 2005? http://ftp-master.debian.org/ziyi_key_$YEAR.asc but 2005 does not yet exist. Archive key management in Debian is suboptimal. Very suboptimal.

Re: possible samba security problem

2005-01-27 Thread Thorsten Giese
Am Donnerstag, 27. Januar 2005 21:06 schrieb Michael Stone: /var/run/samba/locking.tdb There is plenty of information regarding filenames in this specific file, and there are of course many other files ;). I wonder if it would do any harm do samba, if that was not readable by others, if the