September 1999 - openSUSE Security - openSUSE Mailing Lists

Permissions for Mail-only Users
by Holger Will 29 Sep '99

29 Sep '99

Hello, I have set up a box which will act as our Mail-Server. How should I set up the permissions for user which only are allowed to use mail on this System. (Sending by SMTP getting via popper) Which shell should I give them? Which would be the best home-directory? -- Holger Will

3 2

Antwort: [suse-security] Permissions for Mail-only Users
by tschweikle＠FIDUCIA.de 29 Sep '99

29 Sep '99

will <will(a)suedwestrolle.de> wrote: > Hello, > > I have set up a box which will act as our Mail-Server. > > How should I set up the permissions for user which only are allowed to > use mail on this System. > (Sending by SMTP getting via popper) > > Which shell should I give them? /bin/false should do it. > Which would be the best home-directory? give them a real home. This may be empty - but makes it possible to have the mail file on different servers (mounting /home/username via autofs) if later desired. But you may give them all one empty home if you like, leaving mail where it resides normaly (/var/spool/mail). -- Thomas

1 0

SuSE 6.2: proftpd sends out /etc/shadow
by Ivo Letzas 29 Sep '99

29 Sep '99

Hi, I installed proftpd while installing SuSE 6.2, activated it in inetd.conf and did kill -1 on inetd. I did not change proftpd.conf. Then I logged in per ftp as a normal user (letzas) - and downloaded /etc/shadow. Here are the logs (two trys): /var/log/messages: Sep 23 21:59:07 glutamat proftpd[1189]: connect from root(a)192.168.1.111 Sep 23 21:59:13 glutamat proftpd[1189]: FTP login as 'letzas' from somat.homenet [192.168.1.111] to 192.168.1.112:21 Sep 23 21:59:13 glutamat proftpd[1189]: FTP session opened: letzas/users somat.homenet[192.168.1.111] Sep 23 22:00:34 glutamat proftpd[1219]: connect from letzas(a)192.168.1.111 Sep 23 22:00:39 glutamat proftpd[1219]: FTP login as 'letzas' from somat.homenet [192.168.1.111] to 192.168.1.112:21 Sep 23 22:00:39 glutamat proftpd[1219]: FTP session opened: letzas/users somat.homenet[192.168.1.111] /var/log/xferlog: Thu Sep 23 21:59:35 1999 0 somat.homenet 1010 /etc/shadow b _ o r letzas ftp 0 * Thu Sep 23 22:00:53 1999 0 somat.homenet 1010 /etc/shadow b _ o r letzas ftp 0 * regards, Ivo Letzas

2 2

6.2 Installation
by Richard 29 Sep '99

29 Sep '99

Hello When I installed SuSE 6.2 into my machine I found that when I booted it after installation I got a PGP signature and a request for login. I've since found a message which says that my kernel is not verified. I found this by chance. Does this mean that I am supposed to check my PGP signature against the kernel and vice versa ? I can't find anything in the SuSE 6.2 manual about this so I need some help. Thanks Richard Sheffield UK

3 2

Re: Linux GNOME exploit
by Thomas Biege 28 Sep '99

28 Sep '99

Hi, I tested the exploit on SuSE 6.2 and it doesn't work. /usr/games/nethack is neither setu/gid nor does it use shared libs. All GNOME binaries aren't SU/GID except /opt/gnome/sbin/gnome-pty-helper, which seems to be non-vulnerable. Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomas(a)suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47

3 2

Which ftp daemon to use?
by Matthias Pigulla 27 Sep '99

27 Sep '99

Hi folks, after all the buffer overflows found in proftpd and SuSE's unambigous statement yesterday night, I wonder which ftp daemon to use if you have to run ftpd services on a production machine. SuSE recommended D. J. Bernstein's anonftpd for anonymous ftp access. But what to do if user logins are required? Which daemon would you recommend if - security (hey, we're on suse-security ;-) - easy configuration - chroot'ing - administration by a non-root user is required? What do you think about wuftpd? in.ftpd? If I remember right, there were postings on this list reporting wuftpd weaknesses a few months ago. Thanks a lot, Matthias -- w e b f a c t o r y Matthias Pigulla <mp(a)webfactory.de> - Geschaefsfuehrer Lessingstr. 60 - 53113 Bonn - http://www.webfactory.de/ Fon: 0228-9114455 - Fax: 0228-9114499 - ICQ: 49185492

5 9

YaST problems
by Bryan Porter 26 Sep '99

26 Sep '99

Greetings : I'm running SuSE 6.2 and am having some problems with YaST... if I add a user to my system, then try to send mail to that user, or su to that user, or do anything to that user, I get a 'User does not exist' error. HOWEVER, the user is listed in both the shadow and passwd files, belongs to a vaild group, has a mail spool and a home directory. I'm more that a little confused. :) Any help here would be greatly appreciated. Regards, Bryan Porter

15 26

subscribe digest
by iasmodeus 26 Sep '99

26 Sep '99

subscribe digest

1 0

Re: [suse-security] Firewall Script
by Graham Murray 26 Sep '99

26 Sep '99

"Richard" <r.ibbotson(a)zetnet.co.uk> writes: > I was thinking that when the 2.4 kernel comes along it might be an > idea to try to publish a small booklet in England which will help the > crippled to walk ? Our linux demo days were so much of a success > that I've got people crawling all over me who want to do something > with linux. So much so that have arranged a linux demo week :-) By 2.4, you will have to use iptables and netfilter not ipchains, as these have already been superceded in 2.3.x

2 1

Firewall Script
by Richard 26 Sep '99

26 Sep '99

Hello I've asked this question on the SuSE English list but didn't get an answer. I've been able to find a generic firewall script which will probably work with my own PC. Do I just type that into a terminal window or do I just put it into a file somewhere ? If I do need to put it into a certain part of the system where do I put it ? Thanks Richard Sheffield UK

3 4