August 1999 - openSUSE Security - openSUSE Mailing Lists

Re[2]: [suse-security] New users, how?
by Orlando Ortiz 04 Aug '99

04 Aug '99

I'll throw my one cent in this...I think 'Linux: The Complete Reference' sold at CDROM.com is also a great book. They have a 7th addition coming out soon (if it haven't come out already.) (Yeah, I know the saying is 'I'll throw my 2 cents in' but I don't want to up the value of my opinion.) On Tue, Aug 03, 1999 at 05:21:20PM -0700, Mr. M wrote: > > On Tue, 3 Aug 1999, Wayne, Steven L SSI-TSEA-353 wrote: > > > > > "Running Linux" has most of the answers, with both you should > > be pretty well > > > covered. > > > > Is that any better than combining the Network and the System Admin's > > Guides avaliable free online? > > All the books from O'Reilly are good. I wouldn't recommend purchasing > Running Linux unless the new edition (3rd) is finally out. The 2nd edition > is 4 years old! Yes they are. There are a number of other good ones out there too. Sams has some good stuff (SlackWare Unleashed is pretty good for getting into the meat of Linux, I don't know how recent it is anymore though). > > You may also want to pick up a copy of "Essential System Administration" by > AEleen Frisch. It's a bit dated on Linux, however, it does cover Unix > system administration of various Unices - System V and BSD. The book is > more than just a "how-to". The author shares her years of experience as a > Unix sysadmin and the many aspects related to the job. It's one of my > favorites. > I just really felt the need to say that "Essential System Administration" is an incredible book. It took me from being a decent user to knowing enough (and what else to find out about) to be a fully qualified System Admin. Definately high on my favorites list. The vast majority of what she talks about with Linux is still relevant. Also, most of the stuff on the other Unixen is very relevant. -- Jeff -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/M/>P d-(pu) s+:- a17>? C++(++++) L+++ UL++(+++)@>++++$ P+ E W++@ N+ o? K- w--- O? M V- PS+ PE(--)@ Y++@ PGP t+ 5 X++@ R++@ !tv@ b++ DI++++ D- G e- h! r++ y? ------END GEEK CODE BLOCK------ -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

News Forwarder
by Michael Hamm 03 Aug '99

03 Aug '99

hi, I like to run a News-Forwarder on my Applikation-Gateway (without any kind of IP-Forwarding). Did anybody have an Idea where to find something like this???? Thanks for every hint Michael --------------------------------------------------------------------------------------------------- Michael Hamm Tel. +352 749292-43 EUROBASE AG Fax +352 740044 2, rue Haute eMail Michael.Hamm(a)Eurobase.lu L-6680 Mertert Web www.eurobase.lu Luxembourg ---------------------------------------------------------------------------------------------------

2 1

RE: [suse-security] Re: [SuSE Security] Re: nessus output
by Wayne, Steven L SSI-TSEA-353 03 Aug '99

03 Aug '99

>-----Original Message----- >From: cogNiTioN [mailto:cognition@bigfoot.com] >Sent: 02 August 1999 20:53 >Cc: suse-security(a)suse.com >Subject: [suse-security] Re: [SuSE Security] Re: nessus output > > >On Fri, 30 Jul 1999, Hubert Mantel wrote: >> >> PS: SuSE: Could someone please configure this mailing >>list, so that I will not get a dozen errors, if someone >>is on vacation or if his or her e-mail address doesnt exist. >>It's pissing me of. :-( > >I agree. It really is a waste of bandwidth, yours for sending > them, but mainly ours for having to download them. > >> IMHO there is nothing we can do about it. The failure >>messages are sent directly to you, our server is not involved. > >As I see it, the error messages are bounced back to >suse-security(a)suse.com which then redistributes it to the list. >Isn't there a way the server can be set up to detect bounced >messages, and not redistribute them. > >I maybe wrong, feel free to flame me if I am. Ok, I will :-) I don't get 'on holiday' or 'out of office' messages, why do you? >cog >-- ,------------------------------, > ================| S H U N A N T I O N L I N E |================ > ================'------------------------------'================ > == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == > ================================================================ > == My New Domain <cognite.net> should be up and running soon. == > ================================================================ > == I use Linux every day to up my productivity - so up yours! == > ================================================================ And your .sig is too long. Steven. -- If a man stands in the middle of the forest speaking and there is no woman around to hear him....Is he still wrong?

1 0

Re: [suse-security] New users, how?
by earendil7＠juno.com 03 Aug '99

03 Aug '99

On Mon, 2 Aug 1999 22:42:47 +0200 Jan Theofel <jtheofel(a)rst-consulting.de> writes: >If you have many users, you might think of writing a script. But always >remember: passwords MAY NOT handled as parameters for programs!!! Why not? since /etc/passwd fields are delimited by colons, a suid script could copy the salt and then put it somewhere else. Hell, you could even go as far as to right your own little program that takes in a password and gives the salt right back to you, since most of the dirty work is already in the c headers. >But don't ask me if Yast will like that. Only for the possibility that you'll >use one day Yast again to add users. But I think it should be able to >manage that. Uhm, Yast runs off of the same files as anything else, so it shouldn't barf over an altered /etc/passwd and /etc/shadow. Totally unrelated question for the sizable german contingent on the list: what does GmbH stand for (both literally in german and english, as well as any nice condescending meanings for this guy with five meager and irregular years of school german)? dan ___________________________________________________________________ Get the Internet just the way you want it. Free software, free e-mail, and free Internet access for a month! Try Juno Web: http://dl.www.juno.com/dynoget/tagj.

4 3

New users, how?
by cogNiTioN 03 Aug '99

03 Aug '99

I want to add a new user to my system (SuSE 5.2), but I don't want to use YAST to do it. How do I add a user manually? All the books seem to say that the adduser cmd is easy to use. I can't find the program. I can manually add a user to the bottom of the /etc/passwd file, but then I have a problem with the passwords, and the shadow file doesn't have an entry for them. Am I being thick, or is SuSE just different to other flavours of Linux? P.S. This is a security issue, because suse-security is the only suse group I'm subscribed to, and also because at the moment I can add a user, but not a password for a user. (I think everyone can see the security problems with that) Thanks cog -- ,------------------------------, ================| S H U N A N T I O N L I N E |================ ================'------------------------------'================ == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == ================================================================ == My New Domain <cognite.net> should be up and running soon. == ================================================================ == I use Linux every day to up my productivity - so up yours! == ================================================================

5 5

RE: [SuSE Security] Qmail (please!)
by Matthias Pigulla 03 Aug '99

03 Aug '99

Hi Chris, like you, I prefer qmail for our mail purposes; we're running some high-load mailing lists, and qmail gives us a much better performance than any other MTA. Besides, I like it's modularity, which makes qmail very extendable. There has been a really _huge_ discussion on the qmail mailing list about the release of qmail as a RPM package with Red Hat, maybe half a year or even a bit longer ago. The thread was that huge that I have to admit I got bored of it and stopped following the postings. So, best best would be to dig the archives to get hold of the copies. (without warranty for 100% correctness) There have been several issues; one of tham was that qmail (as it comes "out of the package") requires you to set up several users before compile time; the UIDs are compiled into the binaries. This makes it difficult to generate RPM binaries that are cross-system protable. Besides, qmail "prefers" to be installed under /var/qmail, what might lead to other difficulties. There are patches to help out, but I cannot remember wheter there has been some licence or whatever trouble distributing patched binaries. As I said, the best thing to do would be to dig out the old postings. Maybe you could give us a brief summary of what was debated *wink*. Best regards, Matthias w e b f a c t o r y matthias pigulla <mp(a)webfactory.de> lessingstrasse 60 - 53113 bonn - http://www.webfactory.de/ fon: 0228-9114455 - fax: 0228-9114499 - icq: 6394233 > -----Original Message----- > From: owner-suse-security(a)suse.com > [mailto:owner-suse-security@suse.com]On Behalf Of Chris L. Mason > Sent: Gn > To: suse-security(a)suse.com > Subject: [SuSE Security] Qmail (please!) > > I just wanted to ask if there any plans to add qmail to a > future version of > SuSE? I much prefer qmail to sendmail as it is small, quick [...] > So, is there any hope for qmail in future versions of SuSE?

2 1

Re: [SuSE Security] Re: nessus output
by cogNiTioN 02 Aug '99

02 Aug '99

On Fri, 30 Jul 1999, Hubert Mantel wrote: > > > PS: SuSE: Could someone please configure this mailing list, so that I > > will not get a dozen errors, if someone is on vacation or if his or her > > e-mail address doesnt exist. It's pissing me of. :-( I agree. It really is a waste of bandwidth, yours for sending them, but mainly ours for having to download them. > IMHO there is nothing we can do about it. The failure messages are sent > directly to you, our server is not involved. As I see it, the error messages are bounced back to suse-security(a)suse.com which then redistributes it to the list. Isn't there a way the server can be set up to detect bounced messages, and not redistribute them. I maybe wrong, feel free to flame me if I am. cog -- ,------------------------------, ================| S H U N A N T I O N L I N E |================ ================'------------------------------'================ == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == ================================================================ == My New Domain <cognite.net> should be up and running soon. == ================================================================ == I use Linux every day to up my productivity - so up yours! == ================================================================

2 1

Re: [suse-security] Re: [SuSE Security] Re: nessus output
by Daniel Clemens 02 Aug '99

02 Aug '99

The wrong email address's are not being sent from the <suse security list> they are being sent from the failed mail server. Look @ the headers and you can see where it fails. thank you, dan At 07:52 PM 8/2/99 +0000, you wrote: >On Fri, 30 Jul 1999, Hubert Mantel wrote: >> >> > PS: SuSE: Could someone please configure this mailing list, so that I >> > will not get a dozen errors, if someone is on vacation or if his or her >> > e-mail address doesnt exist. It's pissing me of. :-( > >I agree. It really is a waste of bandwidth, yours for sending them, but >mainly ours for having to download them. > >> IMHO there is nothing we can do about it. The failure messages are sent >> directly to you, our server is not involved. > >As I see it, the error messages are bounced back to suse-security(a)suse.com >which then redistributes it to the list. Isn't there a way the server can >be set up to detect bounced messages, and not redistribute them. > >I maybe wrong, feel free to flame me if I am. > >cog >-- ,------------------------------, > ================| S H U N A N T I O N L I N E |================ > ================'------------------------------'================ > == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == > ================================================================ > == My New Domain <cognite.net> should be up and running soon. == > ================================================================ > == I use Linux every day to up my productivity - so up yours! == > ================================================================ > > >-- >To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com >For additional commands, e-mail: suse-security-help(a)suse.com

1 0

network device encryption and compression
by Bernd Thallner 02 Aug '99

02 Aug '99

hi, i have a 9600 b/s pocket net point to point tcp/ip connection and i want to encrypt and compress all data transferrd over this device (sm0 or ax25). i use http, pop, ssh, telnet, nfs, samba, ftp and many more with partly confidential data over this connection and i think the best solution would be to encrypt and compress on one side and to decrypt and decompress on the other side paticularly because the data is tranferred over the air and monitoring is absolute no problem. changing all protocols would be much more work a no real alternativ because same protocols have no secure alternativ (intranet http, samba a.s.o.). is there a solution for encrypting and compressing all trafic for a device (tcp and udp) with no big data overhead but if necessary cpu power? thx; bernd

3 2

CGI-scan
by belial 01 Aug '99

01 Aug '99

hi Today i downloaded CGI-scanner and scanned my PC(SuseLinux 6.0).The scanner founds only one bug: Searching for test-cgi : Found!! Can somebody tell me how does this bug work and what would a cracker do to gain access. And how can i fix this bug? Th@nx Christian

10 10