Partitions

older
Re: [suse-security] DynDNS Clients

Ricardo Javier Aranibar León

29 Apr 2002 29 Apr '02

18:57

Hi list, I need information about secure partitions, I have HD 40G, I like a web server an mail server. I saw that web master partitions yours disk with var/, boot/, home/, I like to know what directorys create and how I can asing size for this? If someone can help me, I will Thank full Thanks, Ricardo _________________________________________________________________ Envíe y reciba su correo de Hotmail desde el móvil: http://mobile.msn.com

Show replies by date

phil

29 Apr 29 Apr

20:07

New subject: [suse-security] Partitions

Although I'm not a suse expert all I did was make a partition called /cryptomaniac and have it format it as reiser FS instead of ext2. Added the password, and now when suse boots it asks for the password. I wouldn't make any of the "important" partitions crytped though. Maybe someone else has. I wouldn't know though. On Monday 29 April 2002 11:57 am, you wrote:

...

Hi list, I need information about secure partitions, I have HD 40G, I like a web server an mail server. I saw that web master partitions yours disk with var/, boot/, home/, I like to know what directorys create and how I can asing size for this? If someone can help me, I will Thank full

Thanks, Ricardo

_________________________________________________________________ Envíe y reciba su correo de Hotmail desde el móvil: http://mobile.msn.com

-- Leave the Constitution Alone. http://members.osb.net/phil

Thomas Föcking

20:55

New subject: [suse-security] Partitions

...

I need information about secure partitions, I have HD 40G, I like a web server an mail server. I saw that web master partitions yours disk with var/, boot/, home/, I like to know what directorys create and how I can asing size for this? If someone can help me, I will Thank full

Read some documentation on how setting up a secure webserver... http://www.suse.de/en/support/howto/secure_webserv/index.html Best regards, Thomas

Steffen Dettmer

30 Apr 30 Apr

06:27

New subject: [suse-security] Partitions

* Ricardo Javier Aranibar León wrote on Mon, Apr 29, 2002 at 18:57 +0000:

...

I saw that web master partitions yours disk with var/, boot/, home/, I like to know what directorys create and how I can asing size for this?

I do not understand you well. If you ask about how large I would recommend partitions, then you're on the wrong list and second for any size combination you should find someone who tells exactly this combination is the correct only one :) On public servers you shouldn't have private and/or sensitive data if possible. So your concern shouldn't be security but safety, and you may wish to setup a disk mirror (RAID-1) and do regulary backups as always. oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.

Ernesto Fries

06:24

New subject: mod_frontpage

Hi folks, there will be an update from Suse for mod_frontpage ? http://securitytracker.com/alerts/2002/Mar/1003767.html We have a lot webhosters as customers, and they need mod_frontpage. Thx Ernesto

Thomas Biege

2 May 2 May

13:57

New subject: [suse-security] mod_frontpage

On Tue, 30 Apr 2002, Ernesto Fries wrote:

...

Hi folks,

Hi. :)

...

there will be an update from Suse for mod_frontpage ?

No, this bug hasn't a high severity. It could just be exploited locally and the attacker has to become wwwrun first. Even if the attacker get's access to the victims machine and manages to become wwwrun s/he will just get access to UID >= 100. This bug is fixed in SuSE 8.0. Bye, Thomas -- Thomas Biege SuSE Linux AG,Deutschherrnstr. 15-19,90429 Nuernberg Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/contact/thomas.asc | pgp -fka" Key fingerprint = 51 AD B9 C7 34 FC F2 54 01 4A 1C D4 66 64 09 83 -- Trete durch die Form ein, und trete aus der Form heraus.

Steffen Dettmer

4 May 4 May

20:41

New subject: [suse-security] mod_frontpage

* Thomas Biege wrote on Thu, May 02, 2002 at 15:57 +0200:

...

...
there will be an update from Suse for mod_frontpage ?

No, this bug hasn't a high severity.

It could just be exploited locally and the attacker has to become wwwrun first. Even if the attacker get's access to the victims machine and manages to become wwwrun s/he will just get access to UID >= 100.

But that means that exploiting a cgi-bin script in a typical configuration gives the intruder access to any regular user (who have typical UID >= 100). Then the intruder can change their path to contain /tmp/trojaned_ssh/ and put a ssh binary here to get access to the keys or whatever! For me it sounds like high severity. And for me it sounds like mod_frontpage wants still to be set up setuid=0 which is bad by itself... oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.

Michael Ströder

5 May 5 May

11:07

New subject: [suse-security] mod_frontpage

Steffen Dettmer wrote:

...

* Thomas Biege wrote on Thu, May 02, 2002 at 15:57 +0200:

...
...
there will be an update from Suse for mod_frontpage ?

No, this bug hasn't a high severity.

It could just be exploited locally and the attacker has to become wwwrun first. Even if the attacker get's access to the victims machine and manages to become wwwrun s/he will just get access to UID >= 100.

But that means that exploiting a cgi-bin script in a typical configuration gives the intruder access to any regular user (who have typical UID >= 100). Then the intruder can change their path to contain /tmp/trojaned_ssh/ and put a ssh binary here to get access to the keys or whatever!

For me it sounds like high severity.

Steffen is absolutely right when pointing out the CGI-BIN scripts. For me it sounds like high severity too. Ciao, Michael.

Ernesto Fries

6 May 6 May

11:47

New subject: [suse-security] mod_frontpage

hi, is it enough to copy mod_frontpage.so from suse 8.0 thx Ernesto ----- Original Message ----- From: "Thomas Biege" To: "Ernesto Fries" Cc: ; Sent: Thursday, May 02, 2002 3:57 PM Subject: Re: [suse-security] mod_frontpage

...

On Tue, 30 Apr 2002, Ernesto Fries wrote:

...
Hi folks,

Hi. :)

...
there will be an update from Suse for mod_frontpage ?

No, this bug hasn't a high severity.

It could just be exploited locally and the attacker has to become wwwrun first. Even if the attacker get's access to the victims machine and manages to become wwwrun s/he will just get access to UID >= 100. This bug is fixed in SuSE 8.0.

Bye, Thomas -- Thomas Biege SuSE Linux AG,Deutschherrnstr. 15-19,90429 Nuernberg Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/contact/thomas.asc | pgp -fka" Key fingerprint = 51 AD B9 C7 34 FC F2 54 01 4A 1C D4 66 64 09 83 -- Trete durch die Form ein, und trete aus der Form heraus.

Thomas Biege

12:45

New subject: [suse-security] mod_frontpage

On Mon, 6 May 2002, Ernesto Fries wrote:

...

hi,

is it enough to copy mod_frontpage.so from suse 8.0

Hm, dunno. What about installing the RPM file from 8.0?

...

thx Ernesto

----- Original Message ----- From: "Thomas Biege" To: "Ernesto Fries" Cc: ; Sent: Thursday, May 02, 2002 3:57 PM Subject: Re: [suse-security] mod_frontpage

...
On Tue, 30 Apr 2002, Ernesto Fries wrote:

...
Hi folks,

Hi. :)

...
there will be an update from Suse for mod_frontpage ?

No, this bug hasn't a high severity.

It could just be exploited locally and the attacker has to become wwwrun first. Even if the attacker get's access to the victims machine and manages to become wwwrun s/he will just get access to UID >= 100. This bug is fixed in SuSE 8.0.

Bye, Thomas -- Thomas Biege SuSE Linux AG,Deutschherrnstr. 15-19,90429 Nuernberg Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/contact/thomas.asc | pgp -fka" Key fingerprint = 51 AD B9 C7 34 FC F2 54 01 4A 1C D4 66 64 09 83 -- Trete durch die Form ein, und trete aus der Form heraus.

Bye, Thomas -- Thomas Biege SuSE Linux AG,Deutschherrnstr. 15-19,90429 Nuernberg Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/contact/thomas.asc | pgp -fka" Key fingerprint = 51 AD B9 C7 34 FC F2 54 01 4A 1C D4 66 64 09 83 -- Trete durch die Form ein, und trete aus der Form heraus.

8033

Age (days ago)

8040

Last active (days ago)

List overview

Download

9 comments

7 participants

participants (7)

Ernesto Fries
Michael Ströder
phil
Ricardo Javier Aranibar León
Steffen Dettmer
Thomas Biege
Thomas Föcking

Partitions

Ricardo Javier Aranibar León

phil

Thomas Föcking

Steffen Dettmer

Ernesto Fries

Thomas Biege

Steffen Dettmer

Michael Ströder

Ernesto Fries

Thomas Biege

tags

participants (7)