January 2010 - openSUSE Security - openSUSE Mailing Lists

RE: [opensuse-security] Kernel Update for 11.1
by Josh More 10 Feb '10

10 Feb '10

Have you run chkrootkit and rkhunter? Have you verified the rpm that uname is in with rpm -qV? This is looking suspicious to me. -Josh More Mobile email powered by Nokia Intellisync ---- Original Message ---- From: "Togan Muftuoglu" <toganm(a)dinamizm.com> Date: 10/1/15 12:08 To: "opensuse-security(a)opensuse.org" <opensuse-security(a)opensuse.org> Subj: Re: [opensuse-security] Kernel Update for 11.1 Manfred Hollstein wrote: > On Fri, 15 Jan 2010, 18:50:45 +0100, Togan Muftuoglu wrote: >> ariel sabiguero yawelak wrote: >>> Well, I know this is awful, bad, irreponsable, and so on, but, how about: >>> >>> strings /boot/vmlinuz | grep 2.6 >>> >> >> toganm@mobile:~> strings /boot/vmlinuz | grep 2.6 >> 2.6.27.42-0.1-default (geeko@buildhost) #1 SMP 2010-01-06 16:07:25 +0100 >> ~2;6 >> X256 >> #2j6 >> I2n6 >> 2_6H >> >> >> Yet why uname prints something else ? > > What does > > cat /proc/version > toganm@mobile:~> cat /proc/version Linux version 2.6.27.42-0.1-default (geeko@buildhost) (gcc version 4.3.2 [gcc-4_3-branch revision 141291] (SUSE Linux) ) #1 SMP 2010-01-06 16:07:25 +0100 -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

4 5

Re: [opensuse-security] Kernel Update for 11.1
by ariel sabiguero yawelak 15 Jan '10

15 Jan '10

<suggestion orthodox="false"> Well, I know this is awful, bad, irreponsable, and so on, but, how about: strings /boot/vmlinuz | grep 2.6 just check your kernel "directly". </suggestion> ariel El 15/01/10 14:25, Togan Muftuoglu escribió: > Jon Clausen wrote: > >> I think Marcus was referring to the gyrations one sometimes has to perform >> in order to compile stuff which uses the uname command to get the kernel >> version, but misinterprets the result(?) >> >> What do you get from >> >> which uname >> > toganm@mobile:/tmp> which uname -a > /bin/uname > > toganm@mobile:/tmp> which uname -a |xargs rpm -qf > coreutils-6.12-32.10 > > > >> Does it report something else if you use the full path? >> >> What's under /lib/modules? >> > toganm@mobile:/tmp> l /lib/modules/ > total 8 > drwxr-xr-x 26 root root 1000 Jan 15 09:04 ./ -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 3

[opensuse-security] Kernel Update for 11.1
by Togan Muftuoglu 15 Jan '10

15 Jan '10

Hi, I have updated the kernel for 11.1 today via online-update after the reboot the question is maybe it is downgraded now :=) toganm@mobile:/tmp> uname -a Linux mobile 2.6.11.4-20a-default #1 SMP 2010-01-06 16:07:25 +0100 i686 i686 i386 GNU/Linux toganm@mobile:/tmp> rpm -q kernel-default kernel-default-2.6.27.42-0.1.1 Grub menu.lst # Modified by YaST2. Last modification on Fri Jan 15 08:49:09 CET 2010 default 0 timeout 8 gfxmenu (hd0,1)/boot/message ##YaST - activate ###Don't change this comment - YaST2 identifier: Original name: linux### title openSUSE 11.1 - 2.6.27.42-0.1 root (hd0,1) kernel /boot/vmlinuz-2.6.27.42-0.1-default root=/dev/disk/by-id/ata-FUJITSU_MHT2040AT_NN7AT491CH4F-part2 resume=/dev/disk/by-id/ata-FUJITSU_MHT2040AT_NN7AT491CH4F-part1 splash=silent showopts vga=0x317 initrd /boot/initrd-2.6.27.42-0.1-default Any ideas what's going on Thanks Togan -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

5 10

[opensuse-security] Warning: new kernel update in oS 11.2 breaks encrypted home partitions, report failure to mount.
by Carlos E. R. 06 Jan '10

06 Jan '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You can't log in. rccrypto reports failure, even when it succeeds. The script mounts the partition, but says it failed. Thus login procedure fails. rccrypto status report success. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEUEARECAAYFAktEnp4ACgkQtTMYHG2NR9UqFACY0mKXB14OGJZkiqaYM/+nzauY AwCfQMxcaCPjFyQf3Dc4kJvKWb6F5ns= =rgYh -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0