May 2000 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] Source for patched 2.2.14 kernel
by Jeremy Buchmann 24 May '00

24 May '00

Thank you, I found it. In case anyone else wants it, it is at: ftp://ftp.suse.com/suse_update/6.4/d1/lx_suse-2.2.14.SuSE-24.i386.rpm -- Jeremy Buchmann System Admin/Database Programmer Wells Gaming Research ---------- >From: Steffen Noe <noe(a)ifs.tu-darmstadt.de> >To: Jeremy Buchmann <jeremy(a)wellsgaming.com> >Subject: Re: [suse-security] Source for patched 2.2.14 kernel >Date: Mon, May 22, 2000, 11:50 AM > > ftp://ftp.suse.com/update/6.4/d1/

4 3

Re: [suse-security] manpath again
by Michael Reichardt 24 May '00

24 May '00

Ho folks, there exists three solutions to the manpath problem: 1. you could create the directories as needed :-(( 2. you could edit the file /etc/manpath.config (see man page of manpath) and remove the offending directories. that doesn't fix the problem :-(( 3. you could fix the problem in the source file manp.c. Look for the function "def_path", then search for the statement "dlp++;". It's at the wrong place. move it down one line, so that it's executed every iteration. that's it :-)) so long Michael -- Michael Reichardt Cranachstrasse 6, D-80797 M"unchen, Germany mrabuse(a)adlatus.muc.de Phone +49-89-12392611

1 0

Sendmail Virusscan
by Harald Scharf 23 May '00

23 May '00

Helo, to everyone. I'm using the AMVIS 0.6 to scan incoming Mail for Viruses. Question : Is there a possibility to scan relayed mails (transport with smtp / esmtp), and outgoing mails ? Amavis simply replaces the procmail (mail.local), so i think, with Amavis this will not work. Any Idea ? tia Harald Scharf Softpoint electronic Netzwerksysteme / Firewalls Windows NT/Windows 2000/Linux/Netware/Unix mailto:h.scharf@softpoint.at www.softpoint.at www.simplex.at

2 2

AW: [suse-security] manpath again and again
by Bauer, Juergen 23 May '00

23 May '00

hi folks, did somebody find a real solution to the hanging manpath problem. any help would be very nice. thanx in advance, jb -----Ursprüngliche Nachricht----- Von: Martin P. Peikert [mailto:mp@tetm36.ee.tu-Berlin.DE] Gesendet: Donnerstag, 18. Mai 2000 11:16 An: suse-security(a)suse.com Betreff: Re: [suse-security] manpath again On Don, 18 Mai 2000 L. Sassaman wrote about Re: [suse-security] manpath again: > > I fixed the manpath problem by creating the directories it was looking > for. <shrug> Kind of silly, but it worked. > Hi, on my machine mkdir /usr/share/man/allman mkdir /opt/man mkdir /opt/sniff mkdir /opt/sniff/man Is that correct on yours, too? Bye, Martin -- ----------------------------------------------------- Martin Peikert EN 636 Fachgebiet Theoretische Elektrotechnik TU Berlin Sekretariat EN 2 fon 314-23881 fax 314-22284 http://www-tet.ee.tu-berlin.de/peikert/index.html ----------------------------------------------------- --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

freeSWAN
by Bjoern Chyba 22 May '00

22 May '00

hi there i wanted to establish a freeswan tunnel and i've tried everything suggested in documentation but it won't work... (boring question, i know) both boxes are masqued 'firewalls' running ipchains and suse6.3. each box has rules to accept the other's private and official addresses as 'trusted' (suse firewall script). ipsec seems to be set up correctly, turning on debug does not make failure output and the route is correct, too. traceroute stops at the ipsec0 device. if i ping the other's private net packets will only reach ipsec0. does anybody know what i could do? does anybody know tools to check if routers inbetween drop ipsec packets? Bjoern

3 2

Source for patched 2.2.14 kernel
by Jeremy Buchmann 22 May '00

22 May '00

Hello, I am looking for the source code to the patched 2.2.14 kernel that was just announced (the one that fixes the masquerading bug(s)). All I could find was the binary RPM on the FTP site. I would prefer to configure the kernel myself, so could anyone please point me to the location of the source for this kernel? Thank you. -- Jeremy Buchmann System Admin/Database Programmer Wells Gaming Research

2 1

Re: "gdm" remote hole
by Thomas Biege 22 May '00

22 May '00

Hi. Just a short note: We ship gdm with "Enable=0", so we are not vulnerable to this kind of attack. Older SuSE releases, which ship with gdm 1.x, have "Enable" set to 1 but seem not to be vulnerable by this bug. Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomas(a)suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47

1 0

Invisible lpd
by Ragnar Beer 22 May '00

22 May '00

Howdy! Next question ;) I have a local printer attached to the serial port so I don't need lpd to listen on the web. Is there a way to stop that like the -nolisten tcp option for X? I couldn't find anything in the lpd manpage :( --Ragnar

2 1

Re: [suse-security] SuSE Security Announcement - kernel
by Belick, Mirko 22 May '00

22 May '00

I cant figure out if this is an vulnerabillity just regarding the masquerading feature or if it basically touches the firewall functionality of the linux kernel. Is linux vulnerably when I do not use masquerading? Mirko

1 0

Re: [suse-security] harden_suse documentation
by rhoerbe＠netpromote.co.at 22 May '00

22 May '00

If I consider it, there are many more issues .. e.g. you should have console access available until ssh/sudo works. Harden_suse will take away su/sudo rights for plain users, and ssh will not let you in remotely as root. But this is only an issue if your server is at a remote data center or ISP :-) Rainer "Andreas Kunberger" <andreas.kunberger(a)itvd.uni-stuttgart.de> 22.05.00 12:21 To: rhoerbe(a)netpromote.co.at cc: Subject: Re: [suse-security] harden_suse documentation At 22 May 00, um 11:47 rhoerbe(a)netpromote.co.at wrote: > I learned to take care of two things with harden_suse: One more hint: harden_suse inserts in hosts.deny the line 'all execpt localhost' By this ssh-connetions to (open_)sshd are disabled. mfg Andreas Kunberger -- Dipl.-Ing. Andreas Kunberger Institut fuer Textil- und Verfahrenstechnik Universitaet Stuttgart

1 0