Re: FreeBSD Security in Multiuser Environments

2012-04-02 Thread Da Rock
On 04/02/12 17:48, Ian Smith wrote: In freebsd-questions Digest, Vol 408, Issue 10, Message: 5 On Sat, 31 Mar 2012 21:05:00 +0700 Erich Dollansky wrote: > On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: [..] > > Da Rock wrote: > > > On 03/31/12 17:46, Julian H. Stacey wro

Re: FreeBSD Security in Multiuser Environments

2012-04-02 Thread Ian Smith
In freebsd-questions Digest, Vol 408, Issue 10, Message: 5 On Sat, 31 Mar 2012 21:05:00 +0700 Erich Dollansky wrote: > On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: [..] > > Da Rock wrote: > > > On 03/31/12 17:46, Julian H. Stacey wrote: [..] > > > > schu...@ime.usp.br wrote: >

Re: FreeBSD Security in Multiuser Environments

2012-04-01 Thread Matthew Seaman
On 01/04/2012 09:47, Peter Vereshagin wrote: >> Also, thanks for Capsicum, it sure is useful. > Who is that? Robert Watson, Jonathan Anderson and Ben Laurie are the principle 'who' behind Capsicum. Now, if you'ld asked 'What is that?' I'd've pointed you towards https://www.cl.cam.ac.uk/rese

Re: FreeBSD Security in Multiuser Environments

2012-04-01 Thread Peter Vereshagin
Hello. 2012/03/30 22:44:16 -0300 schu...@ime.usp.br => To freebsd-questions@freebsd.org : > P.S.: If you want to attain desktop security, matters get even more > complicated. If anyone is interested, I can discuss what I did there > (basically virtual X servers and building ports as regular user

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Erich Dollansky
Hi, On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: > Hi, > Reference: > > From: Da Rock > > Date: Sat, 31 Mar 2012 21:25:37 +1000 > > Message-id: <4f76e9b1.5040...@herveybayaustralia.com.au> > > Da Rock wrote: > > On 03/31/12 17:46, Julian H. Stacey wro

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Julian H. Stacey
Hi, Reference: > From: Da Rock > Date: Sat, 31 Mar 2012 21:25:37 +1000 > Message-id: <4f76e9b1.5040...@herveybayaustralia.com.au> Da Rock wrote: > On 03/31/12 17:46, Julian H. Stacey wrote: > > Hi, > > Reference: > >> From: schu...@ime.usp.br > >> Date:

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Da Rock
On 03/31/12 17:46, Julian H. Stacey wrote: Hi, Reference: From: schu...@ime.usp.br Date: Fri, 30 Mar 2012 22:44:16 -0300 Message-id: <20120330224416.13643xk4rsfd2...@webmail.ime.usp.br> schu...@ime.usp.br wrote: Hello, I would like to raise a discussion about the secur

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Julian H. Stacey
Hi, Reference: > From: schu...@ime.usp.br > Date: Fri, 30 Mar 2012 22:44:16 -0300 > Message-id: <20120330224416.13643xk4rsfd2...@webmail.ime.usp.br> schu...@ime.usp.br wrote: > Hello, > > I would like to raise a discussion about the security features > of FreeBSD as a whole a

Re: FreeBSD Security Advisory FreeBSD-SA-09:12.bind

2009-08-02 Thread Tim Judd
Trying to apply this to a 6.4 box with no manpages install. Install fails because the man3 directory doesn't exist. is this expected? Adding the src.conf knob of WITHOUT_MAN=1 still prevents the updated libraries to install. I'm just following the directions on the advisory and doesn't install c

Re: FreeBSD Security Survey

2006-05-22 Thread Alex Zbyslaw
I'd have to agree with most of Ted and Gayn's points. Also, it's hard to answer many of the questions when they are different for different servers. Unless there is a serious bug in something like SSH, then a paying client with a seriously firewalled server and no malicious users might get up

RE: FreeBSD Security Survey

2006-05-22 Thread Gayn Winters
> [mailto:[EMAIL PROTECTED] On Behalf Of Ted > Mittelstaedt > Sent: Sunday, May 21, 2006 11:20 PM > To: Colin Percival; FreeBSD Questions > Subject: RE: FreeBSD Security Survey > > Colin, > > Just a couple problems with the survey: > > Question #6 needs a &qu

RE: FreeBSD Security Survey

2006-05-21 Thread Ted Mittelstaedt
Colin, Just a couple problems with the survey: Question #6 needs a "Sometimes" as it is not going to be a yes or no question for many people. Your also ignoring the fact that many security holes are a lot easier to ignore and just block off the affected service. For example we run an older R

Re: freebsd-security-announce

2004-08-31 Thread Radek Kozlowski
On Tue, Aug 31, 2004 at 09:02:23AM -0400, Moti Levy wrote: > >It doesn't appear in the list of FreeBSD mailing lists at: > > > > http://lists.freebsd.org/mailman/listinfo > > > >which suggests that it has gone the way of all flesh. > > > >Perhaps [EMAIL PROTECTED] or > >[EMAIL PROTECTED] would se

Re: freebsd-security-announce

2004-08-31 Thread Moti Levy
Matthew Seaman wrote: On Tue, Aug 31, 2004 at 08:44:43AM -0400, Moti Levy wrote: is this list active ? i am subscribed to it but received no emails from it in the past three months . anyone knows ? It doesn't appear in the list of FreeBSD mailing lists at: http://lists.freebsd.org/mail

Re: freebsd-security-announce

2004-08-31 Thread Matthew Seaman
On Tue, Aug 31, 2004 at 08:44:43AM -0400, Moti Levy wrote: > is this list active ? > i am subscribed to it but received no emails from it in the past three > months . > > anyone knows ? It doesn't appear in the list of FreeBSD mailing lists at: http://lists.freebsd.org/mailman/listinfo whi

Re: FreeBSD security ....

2003-10-28 Thread Edward Epstein
On October 28, 2003 4:34 am, Shrikant wrote: >Dear All , > >Is it possible that i give a Normal (without wheel rights) user to access > my server using ftp ,and he can only browse thru his home directory not > above that .If it is possbile pls reply me . If you create the file /etc/ftpchroot a

Re: FreeBSD security ....

2003-10-28 Thread Rus Foster
On Tue, 28 Oct 2003, Shrikant wrote: > Dear All , > > Is it possible that i give a Normal (without wheel rights) user to > access my server using ftp ,and he can only browse thru his home > directory not above that .If it is possbile pls reply me . > This is more to do with the FTP server than no

Re: FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail

2003-03-03 Thread Mike Meyer
In <[EMAIL PROTECTED]>, Kris Kennaway <[EMAIL PROTECTED]> typed: > On Mon, Mar 03, 2003 at 03:56:40PM -0600, Oscar Ricardo Silva wrote: > > Anybody know how we should approach this for older versions of FreeBSD? Is > > upgrading source and rebuilding the only way? I was wondering if there > > w

Re: FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail

2003-03-03 Thread Kris Kennaway
On Mon, Mar 03, 2003 at 03:56:40PM -0600, Oscar Ricardo Silva wrote: > Anybody know how we should approach this for older versions of FreeBSD? Is > upgrading source and rebuilding the only way? I was wondering if there > were binary versions or patches for older versions so we don't have > upg

Re: FreeBSD Security Advisory FreeBSD-SA-03:04.sendmail

2003-03-03 Thread Oscar Ricardo Silva
Anybody know how we should approach this for older versions of FreeBSD? Is upgrading source and rebuilding the only way? I was wondering if there were binary versions or patches for older versions so we don't have upgrade, rebuild and reboot. At 09:11 AM 3/3/2003 -0800, FreeBSD Security Adv