Re: root fs/crypted

2001-05-29 Thread paul
opinion is, with privacy, you can never have too much. Thanks, Paul [EMAIL PROTECTED] The price of freedom is eternal vigilence. Curt Howland wrote: there is already a HowTo on how to create an encrypted loop-back file system. it doesn't encrypt the whole disk, but it could certainly hold

Re: root fs/crypted

2001-05-30 Thread paul
Couldn't you say something like I'm so sorry, I can't remember the pass phrase, my mind has failed me...etc? Are there real truth serums? hehe, Paul Ethan Benson wrote: On Wed, May 30, 2001 at 03:01:17AM +0200, clemens wrote: SAWFASP^* as laws around the globe are forged to weak

Re: root fs/crypted

2001-05-30 Thread paul
Couldn't you say something like I'm so sorry, I can't remember the pass phrase, my mind has failed me...etc? Are there real truth serums? hehe, Paul Ethan Benson wrote: On Wed, May 30, 2001 at 03:01:17AM +0200, clemens wrote: SAWFASP^* as laws around the globe are forged to weak

Re: Proposal

2001-02-12 Thread Paul Haesler
on debian-security-announce a couple of days previously. My understanding is that debian-security IS more or less a debian- user for security issues. :) Paul Haesler [EMAIL PROTECTED] "We are the Steely-Pips and we have no fear, no spats in our vats, no rules, no schools, no gloom, no

Re: Packet filtering help

2001-04-09 Thread Paul Haesler
I went to a talk by Paul "Rusty" Russell (who maintains the firewalling code in the Linux kernel) last year. Now I don't have my notes with me so I'm just going by my highly fallible memory here, but Rusty definitely said that blocking ICMP was evil and anti-social. I can't remember

Re: Problem with logging firewall packets

2001-05-24 Thread Paul Dossett
- From: Ed Street [EMAIL PROTECTED] To: Paul Dossett [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, May 25, 2001 2:17 AM Subject: RE: Problem with logging firewall packets Hello, Make sure you have klogd and syslogd running. Ed -Original Message- From: Paul Dossett [mailto

Re: Problem with logging firewall packets

2001-05-24 Thread Paul Dossett
- Original Message - From: Ronny Adsetts [EMAIL PROTECTED] To: Paul Dossett [EMAIL PROTECTED] Sent: Friday, May 25, 2001 2:27 AM Subject: RE: Problem with logging firewall packets Okay, I'm *really* embarrassed about this, but I can't get syslog to log firewall packets to a logfile

Re: root fs/crypted

2001-05-29 Thread Paul Lowe
I like this. Would it be difficult to modify Debian, so that upon install, it creates an encrypted root volume and starts things off the right way? -Original Message- From: clemens [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Date: Tuesday, May 29, 2001 6:04 PM Subject: root

Re: How to write a secure C program..

2001-07-03 Thread Paul Haesler
Besides not passing those arguments to printf( ), what C/C++ function(s) I should take extra care while using? All of them. No, seriously. Paul Haesler [EMAIL PROTECTED] icq: 74142604 We are the Steely-Pips and we have no fear, no spats in our vats, no rules, no schools

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
. And even OpenBSD don't audit every single line of code in every package - they audit every critical software component. That word critical wouldn't be there if it didn't mean something. -- Paul Haesler[EMAIL PROTECTED] ICQ: 124547085

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-26 Thread Paul Fleischer
it has those common commands builtin and does not depend on the files being in the jail. However, how would you use ls which resides in /bin/ls, if you are jailed into /home/username ?? As I see it, it cannot be done (though it would be nice) -- Paul Fleischer -- To UNSUBSCRIBE, email to [EMAIL

Re: MTAs

2001-11-17 Thread Paul Haesler
it is a Good Thing to have an MTA which does not run as root. I found the argument persuasive, and happily installed postifx. I do miss one thing from exim, however. Default debian installation of exim runs as mail: [paul@marge procmail] grep exim /etc/inetd.conf smtpstream

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Paul Tansom
. Apart from a few applications I just have to use I find its interface slows me down. I'll qualify that by saying that I am definately a techy user. Still this is getting OT for this list - perhaps move onto user?! -- --- Paul Tansom:Talking to penguins can be inTUXicating, whereas talking

Re: MTAs

2001-11-21 Thread Paul Haesler
by the 'mail' user I do not see a problem here. Also check /var/spool/mqueue... if also using outgoing e-mail Well, lets try it shall we: [paul@marge ~] cd /usr/sbin [paul@marge sbin] su Password: [marge /usr/sbin]# ls -l exim -rwsr-xr-x1 root mail 430740 Jun 9 07:21 exim [marge

Re: How can I change my domainname on my server

2002-01-09 Thread Paul Haesler
-- .--=-=-=-=--=---=-=-=. /David Barclay HarrisAut agere, aut mori. \ \Clan Barclay Either action, or death./ `---==-=-=-=-===-=---=--=' -- Paul Haesler[EMAIL

Re: NFS, password transparency, and security

2002-04-11 Thread Paul Hedderly
VPN'd. -- Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Apache 1.3.27 is out...

2002-10-03 Thread Paul Baker
Apache 1.3.27 is out to fix 3 security vulnerabilities in 1.3.26 and below. Are fixed pacakges on their way to security.debian.org? Did ASF notify any vendors in advance of their announcement today? http://www.apache.org/dist/httpd/Announcement.html -- Paul Baker They that can give up

Re: Apache Virtual Hosts Chroot ?

2003-03-19 Thread Paul Hampson
On Wed, Mar 19, 2003 at 02:35:53PM +0100, Ralf Dreibrodt wrote: Paul Hampson wrote: You can effectively chroot php files with: php_admin_value open_basedir /directory/where/files/are in the Apache virtual host config. Then: a) php4 won't let files outside that directory be accessed

Re: Apache Virtual Hosts Chroot ?

2003-03-19 Thread Paul Hampson
. (If you're using the cgi version, then this might not work... Then of course you can use suexec or SetEnv PHPRC to do it... See bug #161627) -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd

Re: iptables forwarding to inside firewall

2003-03-30 Thread Paul Hampson
? -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills

Re: Bug in Tiger check_listening_procs?

2003-03-30 Thread Paul Hampson
| It seems that it should `grep LISTEN` as well. Comments? I would guess that only TCP sockets get 'LISTEN' but I don't know the output of lsof to confirm this. -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU

Re: [Fwd: Re: LWN: Ptrace vulnerability in 2.2 and 2.4 kernels]

2003-04-01 Thread Paul Hampson
the security system, instead of the _data_ used to secure it. It's a bad idea because _processes and functionality_ is a much smaller search domain than _data_. -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss

Re: [Fwd: Re: LWN: Ptrace vulnerability in 2.2 and 2.4 kernels]

2003-04-02 Thread Paul Hampson
... -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills

Re: port forwarding issues

2003-07-01 Thread Paul Hink
will never get to know it. Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Linux clients in network - experiences?

2004-03-20 Thread Paul Johnson
for it. Someone who actually uses that support would be better to complete that answer, though. Will the information superhighway have any rest stops? Doesn't look like it. Can you make due with rolling down the Windows(tm) and aiming it towards the shoulder? - -- .''`. Paul Johnson [EMAIL PROTECTED

Paul Yahnig/PR Newswire is out of the office.

2004-06-25 Thread Paul Yahnig
I will be out of the office starting 06/25/2004 and will not return until 07/06/2004. I will be out of the office from 6/25 - 7/5. You can contact Jason Lavalley at 201.946.5433 with any management issues. Any Operational issues should be reported to Operations Center at 201-946-5462. If

Paul Yahnig/PR Newswire is out of the office.

2004-07-03 Thread Paul Yahnig
I will be out of the office starting 06/25/2004 and will not return until 07/06/2004. I will be out of the office from 6/25 - 7/5. You can contact Jason Lavalley at 201.946.5433 with any management issues. Any Operational issues should be reported to Operations Center at 201-946-5462. If

security.debian.org stable/updates Release file outdated

2005-01-07 Thread Paul Hink
-2005 16:43 1k | Sources.gz 06-Jan-2005 17:4857k http://security.debian.org/dists/stable/updates/main/source/ This probably is the reason for apt-check-sigs to complain about bad checksums of the Packages and Sources files. Could somebody please take care of this? Paul

Re: security.debian.org stable/updates Release file outdated

2005-01-07 Thread Paul Hink
Paul Hink [EMAIL PROTECTED] wrote: The Release file of stable/updates on security.debian.org and its OpenPGP signature seem to be missing an update after the latest security updates for Woody were released yesterday: [...] This probably is the reason for apt-check-sigs to complain about

unsubscribe

2005-01-17 Thread paul . dougan
== HFC Bank Disclaimer The information in this Email belongs to HFC Bank Limited. It is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from

Re: [Fwd: security]

2005-01-29 Thread Paul Day
password policies and regularly run your passwd file through john with a big dictionary file, automatically locking accounts it cracks. PD -- Paul Day Web: www.bur.st/~paul GPG Key ID: 7FF655A8 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact

Re: woody kernel image

2005-01-30 Thread Paul Hink
. And of course this is nothing to inform the ordinary users about, is it? Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: woody kernel image

2005-01-30 Thread Paul Hink
Paul Hink [EMAIL PROTECTED] wrote: Michelle Konzack [EMAIL PROTECTED] wrote: Am 2005-01-29 22:56:39, schrieb [EMAIL PROTECTED]: Where is it posted that the dropped support for 2.4.18? It was on debian-devel and debian-kernel Both of which are lists mainly intended for developers

Re: [SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

2005-02-04 Thread Paul Hink
Repasi Tibor [EMAIL PROTECTED] wrote: However, I'm missing DSA-665 on the DSA mailing list ... is it possible it wasn't posted? http://www.debian.org/security/faq#missing Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Missing debsums and mismatches

2005-06-24 Thread Paul Gear
. -- Paul http://paulgear.webhop.net -- Did you know? Microsoft Internet Explorer and Outlook have a poor track record for security http://www.kb.cert.org/vuls/id/713878. Why not try one of the more secure alternatives from http://mozilla.org? signature.asc Description: OpenPGP digital signature

Re: Bad press related to (missing) Debian security

2005-06-27 Thread Paul Hink
definitely be recognized by all of its users. Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: HHHEEEEEEEEELLLLLLLLPPPPPPPP!!!!!!!!!!

2000-07-06 Thread Paul Klinkenberg
That would be great, i always wanted to remove random people from the list when i was bored. ;) Paul. On Wed, Jul 05, 2000 at 09:00:58PM -0600, Mason wrote: It would be nice to have the mailing list software support 'unsubscribe [EMAIL PROTECTED]' so that people with more complicated emailing

Re: Is Open Source software really more secure?

2000-10-08 Thread Paul Lowe
, announce it on freshmeat, have it distributed to thousands of people -- and have malicious code inside it. I mean, hey, do you always read the Makefile to make sure it doesn't contain a line that says rm -rf / for make install? Just my five nickels Paul Lowe [EMAIL PROTECTED] -Original

Re: I want to try something for freedom.

2000-11-02 Thread Paul Haesler
... Regards, Alex. -- Paul Haesler[EMAIL PROTECTED] Quidquid latine dictum sit, altum viditur

Re: Proposal

2001-02-13 Thread Paul Haesler
-security-announce a couple of days previously. My understanding is that debian-security IS more or less a debian- user for security issues. :) Paul Haesler [EMAIL PROTECTED] We are the Steely-Pips and we have no fear, no spats in our vats, no rules, no schools, no gloom, no evil

Re: Question about ipchains

2001-03-26 Thread Paul Rushing
It accepts all other traffic to non-privileged ports. i prefer to allow traffic without the syn flag (not initiating a new connection) only, not all misc traffic, it's more secure, the way to do it is like: ipchains -A input -s 0/0 -d 0/0 1024:65535 -p tcp ! -y -j ACCEPT ipchains -A

Re: Packet filtering help

2001-04-09 Thread Paul Haesler
I went to a talk by Paul Rusty Russell (who maintains the firewalling code in the Linux kernel) last year. Now I don't have my notes with me so I'm just going by my highly fallible memory here, but Rusty definitely said that blocking ICMP was evil and anti-social. I can't remember the exact

Problem with logging firewall packets

2001-05-24 Thread Paul Dossett
? The crappy ipchains test script I've rigged is working, a grc.com scan is being blocked in all the right ways, but I just can't get the logs on magnetic media... what really simple, obvious, even-a-redheaded-stepchild-could-work-it-out step am I missing? Thanks... Paul D -crap-

Re: Problem with logging firewall packets

2001-05-24 Thread Paul Dossett
- From: Ed Street [EMAIL PROTECTED] To: Paul Dossett [EMAIL PROTECTED]; debian-security@lists.debian.org Sent: Friday, May 25, 2001 2:17 AM Subject: RE: Problem with logging firewall packets Hello, Make sure you have klogd and syslogd running. Ed -Original Message- From: Paul

Re: Problem with logging firewall packets

2001-05-24 Thread Paul Dossett
- Original Message - From: Ronny Adsetts [EMAIL PROTECTED] To: Paul Dossett [EMAIL PROTECTED] Sent: Friday, May 25, 2001 2:27 AM Subject: RE: Problem with logging firewall packets Okay, I'm *really* embarrassed about this, but I can't get syslog to log firewall packets to a logfile

Re: root fs/crypted

2001-05-29 Thread Paul Lowe
I like this. Would it be difficult to modify Debian, so that upon install, it creates an encrypted root volume and starts things off the right way? -Original Message- From: clemens [EMAIL PROTECTED] To: debian-security@lists.debian.org debian-security@lists.debian.org Date: Tuesday, May

Re: How to write a secure C program..

2001-07-03 Thread Paul Haesler
Besides not passing those arguments to printf( ), what C/C++ function(s) I should take extra care while using? All of them. No, seriously. Paul Haesler [EMAIL PROTECTED] icq: 74142604 We are the Steely-Pips and we have no fear, no spats in our vats, no rules, no schools

Sudo and Chown?

2001-07-12 Thread Paul Socolow
I would like to give a user the ability to chown files in certain directories to other users ownership. I have configured sudo to limit the users and files that can be specified for this operation, but there is still one loophole that bugs me: If the user were to make a hard link to a file I

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
. And even OpenBSD don't audit every single line of code in every package - they audit every critical software component. That word critical wouldn't be there if it didn't mean something. -- Paul Haesler[EMAIL PROTECTED] ICQ: 124547085

Re: [off-topic?] Chrooting ssh/telnet users?

2001-10-26 Thread Paul Fleischer
those common commands builtin and does not depend on the files being in the jail. However, how would you use ls which resides in /bin/ls, if you are jailed into /home/username ?? As I see it, it cannot be done (though it would be nice) -- Paul Fleischer

Re: MTAs

2001-11-17 Thread Paul Haesler
stream tcp nowait mail/usr/sbin/exim exim -bs And let me just say that exim rocks. -- Paul Haesler[EMAIL PROTECTED] ICQ: 124547085

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-19 Thread Paul Tansom
. Apart from a few applications I just have to use I find its interface slows me down. I'll qualify that by saying that I am definately a techy user. Still this is getting OT for this list - perhaps move onto user?! -- --- Paul Tansom:Talking to penguins can be inTUXicating, whereas talking

Re: MTAs

2001-11-21 Thread Paul Haesler
exim [marge /usr/sbin]# chmod 2755 exim [marge /usr/sbin]# ls -l exim -rwxr-sr-x1 root mail 430740 Jun 9 07:21 exim [marge /usr/sbin]# exit exit [EMAIL PROTECTED] sbin] mail paul Subject: Test Does this work? . Cc: [EMAIL PROTECTED] sbin] 2001-11-21 22:41:42 166Vl8-00017q-00

Re: shutdown user and accountability

2001-11-29 Thread Paul Fleischer
still be able to login (the technical procedure will be slighly different depending on how the user/password machine/database works). Or am I getting something wrong? -- Paul Fleischer // ProGuy Registered Linux User #166300 http://counter.li.org

Re: How can I change my domainname on my server

2002-01-10 Thread Paul Haesler
-- .--=-=-=-=--=---=-=-=. /David Barclay HarrisAut agere, aut mori. \ \Clan Barclay Either action, or death./ `---==-=-=-=-===-=---=--=' -- Paul Haesler[EMAIL

Re: NFS, password transparency, and security

2002-04-11 Thread Paul Hedderly
VPN'd. -- Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Apache chunk handling vulnerability and Apache 1.3.24-3

2002-06-20 Thread Paul Hosking
, among others. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=150284repeatmerged=yes [2] http://online.securityfocus.com/bid/5033/info/ [3] http://downloads.securityfocus.com/vulnerabilities/exploits/apache-scalp.c -- .: Paul Hosking . [EMAIL PROTECTED] .: InfoSec .: PGP KeyID

Re: Updated Apache packages for testing?

2002-06-21 Thread Paul Haesler
PROTECTED] -- Paul Haesler[EMAIL PROTECTED] Neutrons are wormholes. And if Blanca's dead clone was right, the Transmuters had all the degrees of freedom they could need to make Swift's neutrons unique. - Yatima, in Greg Egan's Diaspora. -- To UNSUBSCRIBE

the openssh exploit

2002-06-25 Thread Paul Baker
an ip that is already denied via tcp_wrapper support in ssh, will it still be able to exploit OpenSSH 3.3? I'm not on the list, so cc me please. -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin

Re: the openssh exploit

2002-06-25 Thread Paul Baker
of the trusted ips?? -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 GPG Key: http://homepage.mac.com/pauljbaker/public.asc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: DSA-134-1

2002-06-25 Thread Paul Haesler
. Lovely situation, isn't it? Doesn't OpenBSD have a full-disclosure policy anyway? -- Paul Haesler[EMAIL PROTECTED] ICQ: 124547085 Neutrons are wormholes. And if Blanca's dead clone was right, the Transmuters had all the degrees

Re: the openssh exploit

2002-06-25 Thread Paul Baker
to mind. Or just use an unused IP He was talking about spoofing ips that I am allowing access for in my firewall. All the ips I'm allowing are for existing machines, so an unused IP would be one that is not allowed through the firewall already. -- Paul Baker They that can give up essential

openssh packages not vulnerable

2002-06-26 Thread Paul Baker
and pam. - -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 GPG Key: http://homepage.mac.com/pauljbaker/public.asc -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (Darwin) Comment

Re: openssh packages not vulnerable

2002-06-26 Thread Paul Baker
the security team will make an official announcement. -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 GPG Key: http://homepage.mac.com/pauljbaker/public.asc -- To UNSUBSCRIBE, email

http://www.debian.org/security/2002/dsa-136

2002-07-30 Thread Paul Baker
The web page for the DSA-136 advisory at http://www.debian.org/security/2002/dsa-136 says Debian GNU/Linux 2.2 (potato) above the list of fixed packages for Woody. Somebody might want to fix that. -- Paul Baker They that can give up essential liberty to obtain a little temporary safety

Re: Some more port closing questions

2002-08-01 Thread Paul Hampson
this far without such a system. ;-) -- --- Paul TBBle Hampson, MCSE 5th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] Of course Pacman didn't influence us as kids. If it did

Re: Some more port closing questions

2002-08-01 Thread Paul Hampson
On Thu, Aug 01, 2002 at 11:58:59AM +0200, Thiemo Nagel wrote: Paul Hampson wrote: You mean like maybe assigning different questions different priorities, and letting the user choose the priority which a question needs to have before it is asked, with some default assumed otherwise? Excellent

Re: (fwd) OpenSSH trojan!

2002-08-01 Thread Paul Hampson
it's MD5 recorded. Although it would only affect people who built the package anyway. -- --- Paul TBBle Hampson, MCSE 5th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED

Re: [SECURITY] [DSA-136-1] Multiple OpenSSL problems

2002-08-01 Thread Paul Baker
continue to try and backport the woody packages to my potato machines myself? -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759 GPG Key: http://homepage.mac.com/pauljbaker

Re: [SECURITY] [DSA-136-1] Multiple OpenSSL problems

2002-08-01 Thread Paul Baker
On Thursday, August 1, 2002, at 01:33 PM, Ted Deppner wrote: On Thu, Aug 01, 2002 at 12:19:52PM -0500, Paul Baker wrote: Is there an ETA yet on potato packages, or should I continue to try and backport the woody packages to my potato machines myself? Just as an encouragement, the upgrade

Re: [SECURITY] [DSA-136-1] Multiple OpenSSL problems

2002-08-01 Thread Paul Baker
later (perhaps when sarge is released). Also it expects you to be installing software that has 'make install' etc. Which our software doesn't necessarily have either. So as part of turning everything into debian packages, they will also get nice shiny Makefiles. -- Paul Baker They that can

Re: Some more port closing questions

2002-08-01 Thread Paul Hampson
On Fri, Aug 02, 2002 at 07:12:54AM +0900, [EMAIL PROTECTED] wrote: From: Paul Hampson [EMAIL PROTECTED] Subject: Re: Some more port closing questions Date: Thu, 1 Aug 2002 20:17:10 +1000 On Thu, Aug 01, 2002 at 07:09:28AM +0900, [EMAIL PROTECTED] wrote: It seems like you could just have

Re: [SECURITY] [DSA 149-1] New glibc packages fix security related problems

2002-08-13 Thread Paul Baker
that need to be restarted just to be safe? I'd rather not have to type in the SSL passphrase for apache+mod_ssl if I don't have to. -- Paul Baker They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759

security.debian.org

2002-08-29 Thread Paul Haesler
from 130.89.175.34: icmp_seq=0 ttl=235 time=478.3 ms 64 bytes from 130.89.175.34: icmp_seq=1 ttl=235 time=488.2 ms --- security.debian.org ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 478.3/483.2/488.2 ms [EMAIL PROTECTED] ~] -- Paul Haesler

Re: security.debian.org

2002-08-29 Thread Paul Haesler
Yep - back up now. Must have hit it at a bad time. :) It's working from Vietnam... May be some filter in your network? -- Paul Haesler[EMAIL PROTECTED] Neutrons are wormholes. And if Blanca's dead clone was right, the Transmuters had all the degrees

Re: Apache Virtual Hosts Chroot ?

2003-03-19 Thread Paul Hampson
option. (If you're using the cgi version, then this might not work... Then of course you can use suexec or SetEnv PHPRC to do it... See bug #161627) -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth

Re: Apache Virtual Hosts Chroot ?

2003-03-19 Thread Paul Hampson
On Wed, Mar 19, 2003 at 02:35:53PM +0100, Ralf Dreibrodt wrote: Paul Hampson wrote: You can effectively chroot php files with: php_admin_value open_basedir /directory/where/files/are in the Apache virtual host config. Then: a) php4 won't let files outside that directory be accessed

Re: iptables forwarding to inside firewall

2003-03-30 Thread Paul Hampson
? -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills

Re: Bug in Tiger check_listening_procs?

2003-03-30 Thread Paul Hampson
| It seems that it should `grep LISTEN` as well. Comments? I would guess that only TCP sockets get 'LISTEN' but I don't know the output of lsof to confirm this. -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU

Re: [Fwd: Re: LWN: Ptrace vulnerability in 2.2 and 2.4 kernels]

2003-04-02 Thread Paul Hampson
the security system, instead of the _data_ used to secure it. It's a bad idea because _processes and functionality_ is a much smaller search domain than _data_. -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss

Re: [Fwd: Re: LWN: Ptrace vulnerability in 2.2 and 2.4 kernels]

2003-04-02 Thread Paul Hampson
... -- --- Paul TBBle Hampson, MCSE 6th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills

Re: Woody security updates

2003-04-25 Thread Paul Hink
be as up to date as security.debian.org is. Paul

Re: na schick mal

2003-06-17 Thread Paul Pinkel
://www.surf4euros.info/?ref=Zockervogel http://www.cashcrawler.de/join.php?ref=Teiplay2000 http://www.moneybar.de/?ref=Zockervogel Wie gesagt, bei Anmeldung entstehen Dir da keine Kosten. Schau es Dir einfach mal alles an und melde Dich bei mir. Paul

Re: port forwarding issues

2003-07-01 Thread Paul Hink
will never get to know it. Paul

Re: chkrootkit and linux 2.6

2003-12-04 Thread Paul Norris
just guessing that being owned by root is the kicker in this instance. Either that, or I'm screwed ;) -Paul Norris

Re: Linux clients in network - experiences?

2004-03-20 Thread Paul Johnson
for it. Someone who actually uses that support would be better to complete that answer, though. Will the information superhighway have any rest stops? Doesn't look like it. Can you make due with rolling down the Windows(tm) and aiming it towards the shoulder? - -- .''`. Paul Johnson [EMAIL PROTECTED

Re: logcheck.ignore entries

2004-04-14 Thread Paul Hink
) for user matches session opened for user and session closed for user which is what is needed here. session (opened)|(closed) for user matches session opened and closed for user which does not make much sense in this context. Paul

Re: logcheck.ignore entries

2004-04-14 Thread Paul Hink
Jeff Coppock [EMAIL PROTECTED] wrote: On 14 Apr 2004 20:35:19 GMT Paul Hink [EMAIL PROTECTED] wrote: Russell Coker [EMAIL PROTECTED] wrote: Try this one: CRON\[.*\]:( )?\(pam_unix\) session (opened)|(closed) for user (root)|(mail) [...] session (opened|closed) for user matches

Re: Question about Debian security policy

2005-06-30 Thread Paul Haesler
interface by default). I've always wondered about portmap in debian myself - I presume it's to do with NFS. Perhaps it has to be part of the base system to support network installs. -- Paul Haesler[EMAIL PROTECTED] Neutrons are wormholes. And if Blanca's dead clone was right

Re: Firewall-troubleshooting

2005-07-03 Thread Paul Gear
my main firewall at home to a beefy Celeron 600! :-) -- Paul http://paulgear.webhop.net -- Did you know? Using accepted quoting conventions makes your email easier to understand. Learn how at http://www.netmeister.org/news/learn2quote.html. signature.asc Description: OpenPGP digital

Re: Firewall-troubleshooting

2005-07-03 Thread Paul Gear
they don't like it -- and if they can't tell you *why*, it is just that they don't like it. Couldn't agree more. -- Paul http://paulgear.webhop.net -- Did you know? Many viruses specifically target Microsoft Outlook and Outlook Express. You can help to keep your computer free of viruses by using one

Re: Firewall-troubleshooting

2005-07-04 Thread Paul Gear
inferring is not using RELATED/ESTABLISHED in the preferred way)? -- Paul http://paulgear.webhop.net -- Did you know? If you use two dashes followed by a space as your signature separator, good email programs will chop them off automatically, reducing noise in email replies. signature.asc Description

Re: Firewall-troubleshooting

2005-07-04 Thread Paul Gear
Michael Stone wrote: On Mon, Jul 04, 2005 at 07:45:47PM +1000, Paul Gear wrote: I mustn't be understanding you here. Isn't the very definition of RELATED/ESTABLISHED that the packet is part of an established connection to a service actually used? RELATED and ESTABLISHED are two

Re: Firewall-troubleshooting

2005-07-05 Thread Paul Gear
that makes security sense to other firewall users. -- Paul http://paulgear.webhop.net -- Did you know? Using Microsoft Internet Explorer can make your computer less secure. Find out more at http://browsehappy.com. signature.asc Description: OpenPGP digital signature

Re: Light weight IDSes and then some

2005-07-16 Thread Paul Gear
manually editing the whole thing). Someone please correct me if i'm missing something that might overcome these difficulties - they've been driving me to despair for quite some time... -- Paul http://paulgear.webhop.net -- Did you know? Email viruses spread using addresses they find on the host

Re: Document the bug fix policy regarding PHP Safe Mode

2005-07-22 Thread Paul Hink
Debian supports Safe Mode or not, I would very much appreciate a clear, official statement concerning this issue, e.g. by publishing the text Florian suggested in his first mail on this topic somewhere on Debian's website. Paul -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: On Mozilla-* updates

2005-08-03 Thread Paul Gear
David Ehle wrote: ... What I don't want to see is this discussion drag on eternally on woe-is-me-they-wont-play-like-i-like-i-hate-change fashion, It's too late for that... ;-) -- Paul http://paulgear.webhop.net -- Did you know? Most email-borne viruses use a false sender address, so you

Re: policy change is needed to keep debian secure

2005-08-23 Thread Paul Gear
years now? -- Paul http://paulgear.webhop.net -- Did you know? Email addresses can be forged easily. This message is signed with GNU Privacy Guard http://www.gnupg.org and Enigmail http://enigmail.mozdev.org so you can be sure it comes from me. signature.asc Description: OpenPGP digital

Re: policy change is needed to keep debian secure

2005-08-23 Thread Paul Gear
=1version=allrelease=allkeywords=firefox -- Paul http://paulgear.webhop.net -- Did you know? If you receive a virus warning from a friend and not through a virus software vendor, it's likely to be a hoax. See http://gear.dyndns.org:81/features/virus_hoaxes for more info. enoch:/root # apt-get install

Status of Mozilla fixes (was Re: policy change is needed to keep debian secure)

2005-08-23 Thread Paul Gear
Paul Gear wrote: (This turned into a saga - so here's the executive summary: let's let the security team do their job and find us a secure version. Talk about removing Firefox and/or definitely ruling out upgrading to a newer version is unhelpful in solving the problem.) And, of course, i

  1   2   3   4   5   >