Re: Exploit in 2.6 kernels

2005-04-15 Thread Adrian Bunk
On Wed, Apr 13, 2005 at 03:01:46PM +0100, John M Collins wrote: >... > Could I possibly make a suggestion for "make xconfig" in the kernel tree > (and make other-kinds-of-config I suppose)? > > I currently routinely copy the ".config" out of the previous kernel tree > before I start to save

Re: Exploit in 2.6 kernels

2005-04-15 Thread Duncan Sands
> I still don't think they would lose out by much.. I've just being > trying to RE the ATI Mpeg2 IDCT/MC hardware, ATI know this, I know > this, they are only wasting my time and my employers money (we still > are going to buy their chips... no choice..) will they give out specs > .. no .. why?

Re: Exploit in 2.6 kernels

2005-04-15 Thread Dave Airlie
On 4/16/05, Alan Cox <[EMAIL PROTECTED]> wrote: > On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: > > On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > > Graphics card companies don't realize they are hardware companies not > > software companies and that it is hardware

Re: Exploit in 2.6 kernels

2005-04-15 Thread Alan Cox
On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: > On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > Graphics card companies don't realize they are hardware companies not > software companies and that it is hardware they make their money from? > Oh and they have too many

Re: Exploit in 2.6 kernels

2005-04-15 Thread Alan Cox
On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many

Re: Exploit in 2.6 kernels

2005-04-15 Thread Dave Airlie
On 4/16/05, Alan Cox [EMAIL PROTECTED] wrote: On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make

Re: Exploit in 2.6 kernels

2005-04-15 Thread Duncan Sands
I still don't think they would lose out by much.. I've just being trying to RE the ATI Mpeg2 IDCT/MC hardware, ATI know this, I know this, they are only wasting my time and my employers money (we still are going to buy their chips... no choice..) will they give out specs .. no .. why? cause

Re: Exploit in 2.6 kernels

2005-04-15 Thread Adrian Bunk
On Wed, Apr 13, 2005 at 03:01:46PM +0100, John M Collins wrote: ... Could I possibly make a suggestion for make xconfig in the kernel tree (and make other-kinds-of-config I suppose)? I currently routinely copy the .config out of the previous kernel tree before I start to save working through

Re: Exploit in 2.6 kernels

2005-04-14 Thread John M Collins
On Thu, 2005-04-14 at 16:02 -0400, Greg Folkert wrote: > A-Freakin'-MEN me droogy. > > Hehehe, either a slow system, or you know how to transfer a working > setup to another machine. > > My current image I use(d) for all of my machines was Built a long time > ago, I think slink was what I used

Re: Exploit in 2.6 kernels

2005-04-14 Thread Greg Folkert
On Wed, 2005-04-13 at 10:41 -0400, Lennart Sorensen wrote: > On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: > > On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > > > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > > > install nvidia &&

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Chris Friesen wrote: Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: You're not. Complain to nvidia - using both email and snailmail. If everybody with such problems did that, chances are they see the light someday. Oh, and complain to the guy handing out nvidia cards like

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: You're not. Complain to nvidia - using both email and snailmail. If everybody with such problems did that, chances are they see the light someday. Oh, and complain to the guy handing out nvidia cards like

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Chris Friesen wrote: Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has

Re: Exploit in 2.6 kernels

2005-04-14 Thread Greg Folkert
On Wed, 2005-04-13 at 10:41 -0400, Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: modprobe nvidia || m-a -t prepare nvidia m-a -t build nvidia m-a -t install nvidia modprobe nvidia

Re: Exploit in 2.6 kernels

2005-04-14 Thread John M Collins
On Thu, 2005-04-14 at 16:02 -0400, Greg Folkert wrote: A-Freakin'-MEN me droogy. Hehehe, either a slow system, or you know how to transfer a working setup to another machine. My current image I use(d) for all of my machines was Built a long time ago, I think slink was what I used to build

Re: Exploit in 2.6 kernels

2005-04-13 Thread Chris Friesen
Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has intellectual property from

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: > On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > > install nvidia && modprobe nvidia > > Something along the lines of: > modprobe nvidia || sh

Re: Exploit in 2.6 kernels

2005-04-13 Thread Eric Rannaud
On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > install nvidia && modprobe nvidia Something along the lines of: modprobe nvidia || sh NVIDIA-Linux-x86-1.0-6629-pkg1.run -s -f --no-network && modprobe nvidia

Re: Exploit in 2.6 kernels

2005-04-13 Thread John M Collins
On Wed, 2005-04-13 at 09:23 -0400, Lennart Sorensen wrote: > Graphics card companies don't realize they are hardware companies not > software companies and that it is hardware they make their money from? > Oh and they have too many lawyers? > > It seems to me that 2D graphics are a done deal,

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > On 2005-04-13T08:59:21, Lennart Sorensen <[EMAIL PROTECTED]> wrote: > > > It is becoming harder and harder to find supported cards it seems. > > Finding a card with decent 2D drivers for X can still be done, but 3D is > > just

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lars Marowsky-Bree
On 2005-04-13T08:59:21, Lennart Sorensen <[EMAIL PROTECTED]> wrote: > It is becoming harder and harder to find supported cards it seems. > Finding a card with decent 2D drivers for X can still be done, but 3D is > just not really an option it seems. Even 2D seems to be a problem on > many cards

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Tue, Apr 12, 2005 at 10:32:59PM +0100, John M Collins wrote: > I'll do that - trouble is round where I am they dish out Nvidia cards > like confetti, I've got them in the machine I use most and another 2 and > you have to do all that gyrating with running the script to FTP down and > build the

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: > You're not. Complain to nvidia - using both email and snailmail. > If everybody with such problems did that, chances are they see > the light someday. Oh, and complain to the guy handing out > nvidia cards like confetti, state your

Re: Exploit in 2.6 kernels

2005-04-13 Thread Helge Hafting
John M Collins wrote: On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: * John M Collins ([EMAIL PROTECTED]) wrote: Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're

Re: Exploit in 2.6 kernels

2005-04-13 Thread Helge Hafting
John M Collins wrote: On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: * John M Collins ([EMAIL PROTECTED]) wrote: Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: You're not. Complain to nvidia - using both email and snailmail. If everybody with such problems did that, chances are they see the light someday. Oh, and complain to the guy handing out nvidia cards like confetti, state your

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Tue, Apr 12, 2005 at 10:32:59PM +0100, John M Collins wrote: I'll do that - trouble is round where I am they dish out Nvidia cards like confetti, I've got them in the machine I use most and another 2 and you have to do all that gyrating with running the script to FTP down and build the

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lars Marowsky-Bree
On 2005-04-13T08:59:21, Lennart Sorensen [EMAIL PROTECTED] wrote: It is becoming harder and harder to find supported cards it seems. Finding a card with decent 2D drivers for X can still be done, but 3D is just not really an option it seems. Even 2D seems to be a problem on many cards if you

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: On 2005-04-13T08:59:21, Lennart Sorensen [EMAIL PROTECTED] wrote: It is becoming harder and harder to find supported cards it seems. Finding a card with decent 2D drivers for X can still be done, but 3D is just not really

Re: Exploit in 2.6 kernels

2005-04-13 Thread John M Collins
On Wed, 2005-04-13 at 09:23 -0400, Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? It seems to me that 2D graphics are a done deal, with no

Re: Exploit in 2.6 kernels

2005-04-13 Thread Eric Rannaud
On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: modprobe nvidia || m-a -t prepare nvidia m-a -t build nvidia m-a -t install nvidia modprobe nvidia Something along the lines of: modprobe nvidia || sh NVIDIA-Linux-x86-1.0-6629-pkg1.run -s -f --no-network modprobe nvidia should

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: modprobe nvidia || m-a -t prepare nvidia m-a -t build nvidia m-a -t install nvidia modprobe nvidia Something along the lines of: modprobe nvidia || sh

Re: Exploit in 2.6 kernels

2005-04-13 Thread Chris Friesen
Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has intellectual property from

Re: Exploit in 2.6 kernels

2005-04-12 Thread Valdis . Kletnieks
On Tue, 12 Apr 2005 22:32:59 BST, John M Collins said: > I wish some kind soul would speak nicely to Nvidia and get them to see > reason on the point but I suspect I'm not the first person to wish that. NVidia is aware, and they're doing the best they can under the circumstances (no, they can't

Re: Exploit in 2.6 kernels

2005-04-12 Thread Chris Wright
* John M Collins ([EMAIL PROTECTED]) wrote: > Thanks to everyone for the pointers on this one I've rebuilt the kernels > and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're protected from another local root exploit. thanks, -chris - To unsubscribe from this list:

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: > * John M Collins ([EMAIL PROTECTED]) wrote: > > Thanks to everyone for the pointers on this one I've rebuilt the kernels > > and we'll see what happens. > > BTW, I'd recommend updating to 2.6.11.7 so that you're protected from > another

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. Seems like they got in because on most of the machines I had an ancient sshd_config which allowed Protocol 1. When I installed newer sshds the newer sshd_config got stuck in as a ".rpmnew" file.

Re: Exploit in 2.6 kernels

2005-04-12 Thread Baruch Even
You can find the source at http://www.securiteam.com/exploits/5VP0N0UF5U.html The fix: http://linux.bkbits.net:8080/linux-2.6/[EMAIL PROTECTED]|[EMAIL PROTECTED] CAN: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0736 John M Collins wrote: Please CC any reply to jmc AT xisl.com as

Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Please CC any reply to jmc AT xisl.com as I'm not subscribed - thanks We had 5 machines broken into last night all but one with kernel 2.6.8 and found a binary "krad-no-longer-private.c" had been downloaded It contains the string: k-rad.c - linux 2.6.* CPL 0 kernel exploit Discovered Jan

Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Please CC any reply to jmc AT xisl.com as I'm not subscribed - thanks We had 5 machines broken into last night all but one with kernel 2.6.8 and found a binary krad-no-longer-private.c had been downloaded It contains the string: k-rad.c - linux 2.6.* CPL 0 kernel exploit Discovered Jan 2005

Re: Exploit in 2.6 kernels

2005-04-12 Thread Baruch Even
You can find the source at http://www.securiteam.com/exploits/5VP0N0UF5U.html The fix: http://linux.bkbits.net:8080/linux-2.6/[EMAIL PROTECTED]|[EMAIL PROTECTED] CAN: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0736 John M Collins wrote: Please CC any reply to jmc AT xisl.com as

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. Seems like they got in because on most of the machines I had an ancient sshd_config which allowed Protocol 1. When I installed newer sshds the newer sshd_config got stuck in as a .rpmnew file.

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: * John M Collins ([EMAIL PROTECTED]) wrote: Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're protected from another local root

Re: Exploit in 2.6 kernels

2005-04-12 Thread Chris Wright
* John M Collins ([EMAIL PROTECTED]) wrote: Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're protected from another local root exploit. thanks, -chris - To unsubscribe from this list:

Re: Exploit in 2.6 kernels

2005-04-12 Thread Valdis . Kletnieks
On Tue, 12 Apr 2005 22:32:59 BST, John M Collins said: I wish some kind soul would speak nicely to Nvidia and get them to see reason on the point but I suspect I'm not the first person to wish that. NVidia is aware, and they're doing the best they can under the circumstances (no, they can't