April 2000 - openSUSE Security - openSUSE Mailing Lists

AW: [suse-security] Change group/owner of dir or files
by Harald Scharf 06 Apr '00

06 Apr '00

if you want to change the permissions of a directory (file) you can use the following commands : chown (Change Owner) chgrp (Change Group) chmod (Change Mode) Examples : Set User / Group for Directory : chown user.group dirname/ if you want to do this for the directory and all subdirectories make a chown -R user.group dirname/ (-R = recursive) or chown --recursive user.group dirname/ You have to be in the Directory below that one, you want to change. With this examples you wont need chgrp (set only group permissions) With chmod you can set the attributes of files and directories An directory entry under Un.x Systems look like this : -rwx-rw-r-- rwx r r user group others r= readable w= writeable x= executeable for the exactly syntax of chmod (be carefull with this) see man chmod chmod 777 filname will set world access to the file : -rwxrwxrwx filename OK ? Harald Scharf Softpoint electronic Linux Firewalls and Security Systems h.scharf(a)softpoint.at -----Ursprüngliche Nachricht----- Von: wmmvdwee [mailto:wmmvdwee@hawedo.com] Gesendet: Donnerstag, 6. April 2000 15:59 An: suse-security Mailinglist Betreff: [suse-security] Change group/owner of dir or files Hi all, I'am relative new to linux I'am using SUSE 6.00 I still do not know how to change ownership of files and directory. Is this done with chmod? To be concreet I want to change the owner or group of a directory owned by root. I want to change the group to users. I tried YAST to change the group users etc, but this seems not to work. How can I use Yast to change the owner or group. Can somebody give me a hind, or how this is done. Thanks, rgd Wil --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

2 1

Re: Re: [suse-security] Turning of services
by Dirk.Nitka＠ages.de 06 Apr '00

06 Apr '00

Hi Francisco, i wouldn't disable syslogd, because it is needed also for logging local events, but you could check in rc.config, if the syslogd ist startet without any parameters, especially "-r" (i think?) is used, if you want to accept entrys from other machines. Dirk "Francisco M. Marzoa Alonso" <fmmarzoa(a)idecnet.com> am 06.04.2000 10:19:23 An: Frank Derichsweiler <fd-l-s-s(a)daidalos.informatik.unibw-muenchen.de>, SuSE Security <suse-security(a)suse.com> Kopie: (Blindkopie: Dirk Nitka/AGES/DE) Thema: Re: [suse-security] Turning of services > 514 maybe syslog. You're surely on right. I don't know very well what exactly syslogd do... so... is it just needed for remote logs or is really *needed* for log info locally? --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

2 1

Change group/owner of dir or files
by wmmvdwee 06 Apr '00

06 Apr '00

Hi all, I'am relative new to linux I'am using SUSE 6.00 I still do not know how to change ownership of files and directory. Is this done with chmod? To be concreet I want to change the owner or group of a directory owned by root. I want to change the group to users. I tried YAST to change the group users etc, but this seems not to work. How can I use Yast to change the owner or group. Can somebody give me a hind, or how this is done. Thanks, rgd Wil

2 1

RE: [suse-security] Change group/owner of dir or files
by Jeroen Bakker 06 Apr '00

06 Apr '00

> > > Hi all, > > I'am relative new to linux I'am using SUSE 6.00 > I still do not know how to change ownership of > files and directory. Is this done with chmod? btw this is not the list for it nope chown (man chown) be carefull because the chown command can be used to bypass quota Jeroen bakker

1 0

Re: [suse-security] IPCHAINS question
by Erwin Zierler 06 Apr '00

06 Apr '00

Hi Francisco, if you are using SuSE you should find the related documentaion under /usr/doc/packages/ipchains/ipchains-HOWTOs-1.0.7/ Go to section 4.2.1 Using ipchains-save and 4.2.2 Using ipchains-restore and you will find all you need to know :-) Regards, Erwin Zierler --- At 12:54 06.04.00 +0200, you wrote: >I've read in any place that there was a manner to save the ipchains >status to a file and later recover this status from that file, that's in >fact that i can specified a set of rules, then save it to a file just >with ipchains command and later restablish these rules again calling >ipchains command with that filename as parameter in any manner that i >cannot remember... i'm wrong? is this is right... how is done? > >Excuse my poor english, hope you all understand the question. > >Best regards, > >-- >Francisco M. Marzoa Alonso >Nuevo Mundo - Dpto. Informático ICQ#: 62850923 >Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 >España / Spain fax: +34 91 350 28 45 Erwin Zierler | Web-/Hostmaster - Stubainet | Email: Erwin.Zierler(a)stubainet.at / webmaster(a)stubainet.at | Mobil: 0664 - 130 67 91 Tel.: 05225 - 64325 Fax 99

1 0

AW: [suse-security] IPCHAINS question
by Bauer, Juergen 06 Apr '00

06 Apr '00

hi again, just setup your all ipchains you want to have, and then try out "ipchains-save > /path/rules" and to restore your rules "ipchains-restore < /path/rules" thats all jb -----Ursprüngliche Nachricht----- Von: Francisco M. Marzoa Alonso [mailto:fmmarzoa@idecnet.com] Gesendet am: Donnerstag, 6. April 2000 12:54 An: SuSE Security Betreff: [suse-security] IPCHAINS question I've read in any place that there was a manner to save the ipchains status to a file and later recover this status from that file, that's in fact that i can specified a set of rules, then save it to a file just with ipchains command and later restablish these rules again calling ipchains command with that filename as parameter in any manner that i cannot remember... i'm wrong? is this is right... how is done? Excuse my poor english, hope you all understand the question. Best regards, -- Francisco M. Marzoa Alonso Nuevo Mundo - Dpto. Informático ICQ#: 62850923 Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 España / Spain fax: +34 91 350 28 45 --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

RE: [suse-security] IPCHAINS question
by vmatzken＠bytebox.de 06 Apr '00

06 Apr '00

Hello, yes, there is a way to save and restore ipchains-rules. It's described in the IMHO really good HOWTO (under SuSE at /usr/doc/packages/ipchains/HOWTO.txt) There should be some scripts, called ipchains-save and ipchains-restore. Hope that helps Regards Volker

1 0

RE: IPCHAINS question
by Rolf Eike Beer 06 Apr '00

06 Apr '00

Hi! Try ipchains-save > filename and ipchains-restore < filename Please look that ipchains-save and ipchains-restore are ONE word (its not an option fpr ipchains, its just a little script..) Hope the syntax is correct, please try... Bye -- Rolf Eike Beer E-Mail privat:dakon@sf-tec.de E-Mail Uni Hannover (Informatikprojekt): dakon(a)cip1.uni-hannover.de E-Mail Uni Hannover (privat): Rolf.Eike.Beer(a)stud.uni-hannover.de E-Mail für EFS: efs(a)sf-tec.de

1 0

Re: [suse-security] Turning of services
by Francisco M. Marzoa Alonso 06 Apr '00

06 Apr '00

Hey, think you're on right, i think this is the best way, i'll try it now. Sebastian Fallert wrote: > On Thu, 6 Apr 2000, Francisco M. Marzoa Alonso wrote: > > > <IfDefine SSL> > > Listen 80 > > Listen 443 > > </IfDefine> > > > > Well now, i can suppouse if i comment that line (Listen 443) the SSL server > > that's listen at this port will be out, but... it should be a better manner but > > i cant found were SSL is really *Defined*, should i recompile apache perhaps? > > This works like C-Preprocessing in a way. Never used it, but looking at > the apache command line it seems like the '-DSSL'-Parameter defines it and > activates what's inside <IfDefine SSL> and </IfDefine SSL>. > > Look at this: > > /sbin/init.d/apache: > ==================== > > [..] > test -e /usr/lib/apache/libssl.so && MODULES="-D SSL $MODULES" > [..] > case "$1" in > start) > echo -n "Starting service httpd" > startproc -t 7 /usr/sbin/httpd -f /etc/httpd/httpd.conf $MODULES || return=$rc_failed > ^^^^^^^^ > [..] > > The script puts '-DSSL' on the command line in case > /usr/lib/apache/libssl.so exists. Deleting it will result in 'SSL' not being defined > any more, I guess. > > I would prefer some boolean in /etc/rc.config to control this BTW. > > Cheers, > -Sebastian > > -- > Sebastian Fallert | Mobile(D2): +49-173-2985782 > mailto: sf(a)kki.org | Fon: +49-551-7989126) > http://www.kki.org/~sf | Fax: +49-551-7907351) > ----------------------------------------------------------------- > PGP Fingerprint 88 01 74 1D 3B 37 66 17 E6 8D 07 24 F8 56 20 8C -- Francisco M. Marzoa Alonso Nuevo Mundo - Dpto. Informático ICQ#: 62850923 Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 España / Spain fax: +34 91 350 28 45

1 0

IPCHAINS question
by Francisco M. Marzoa Alonso 06 Apr '00

06 Apr '00

I've read in any place that there was a manner to save the ipchains status to a file and later recover this status from that file, that's in fact that i can specified a set of rules, then save it to a file just with ipchains command and later restablish these rules again calling ipchains command with that filename as parameter in any manner that i cannot remember... i'm wrong? is this is right... how is done? Excuse my poor english, hope you all understand the question. Best regards, -- Francisco M. Marzoa Alonso Nuevo Mundo - Dpto. Informático ICQ#: 62850923 Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 España / Spain fax: +34 91 350 28 45

1 0