May 2000 - openSUSE Security - openSUSE Mailing Lists

automating security updates?
by mgx＠ornl.gov 09 May '00

09 May '00

good day all ... i'm looking for a way to speedup or automate the installation of security related updates. i have a local mirror of ftp.suse.com:/.../suse/updates nfs mounted to my suse systems. is there anyway to use rpm to upgrade all the rpms in this directory? tnks! -- -- michael

3 2

multiple ip adresses per network adapter?
by Heiko Nardmann 09 May '00

09 May '00

1) Is it possible to assign multiple ip adresses to a single network adapter? 2) If 1 is possible, then my next question is: is it possible to direct the requests to different processes listening to the same port? Maybe I should ask if it is possible to have different (ip-based) "port spaces" where different processes listen to the same port but for a different ip address? -- Heiko Nardmann (Dipl.-Ing.), h.nardmann(a)secunet.de, Software Development secunet Security Networks AG - Sicherheit in Netzwerken (www.secunet.de), Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13, Fax : +49 271 48950-50

7 6

Re: [suse-security] aaa_base updatedb problems?
by Ruediger Oertel 08 May '00

08 May '00

Hi, > > Also, after installing the new aaa_base, I have seen a root > > "manpath" process consuming lots of CPU time, and staying indefinately as > > a running process. Again, any thoughts? > I have the Same problem on my SuSE 6.4 but not on the SuSE 6.2 Servers. No > idea what todo. The script /etc/cron.daily/aaa_base_do_mandb calls /usr/sbin/makewhatis. This one calls up "unset MANPATH mandb -qg 2>/dev/null" to get the correct manpath-setting. Does "unset MANPATH mandb -q" hang for any of you when executed on the command line ? The whole thing looks like a circular link in the man-directory tree structure, but this is merely a wild guess. -- with kind regards (mit freundlichem Grinsen), Ruediger Oertel (ro(a)suse.de) ---------------------------------------------------------- does "DONT PANIC" give a hint ?

1 0

[suse-security] manpath hanging (was:Re: SuSE Security Announcement - aaa_base - UPDATE)
by Volker Kuhlmann 08 May '00

08 May '00

> >Has anyone else encountered this problem? > > PID USER PRI NI SIZE RSS SHARE STAT LIB %CPU %MEM TIME COMMAND > 18307 root 10 0 704 704 384 R 0 33.1 1.1 2003m manpath > 24773 root 10 0 704 704 384 R 0 32.7 1.1 688:48 manpath > 29999 root 12 0 704 704 384 R 0 29.7 1.1 1:51 manpath > <snip> > > 12:07am up 5 days, 11:46, 1 user, load average: 4.41, 4.32, 3.84 > > > ... and this machine does nothing. The manpath commands hang until you > manually kill them. Yes, various times, SuSE 6.2 and 6.3 (don't have 6.4 yet). It obviously doesn't always happen, but I could not track down when and how. If I run the same command on the command lne (as is run by cron), it always ran fine. Volker

4 4

aaa_base updatedb problems?
by L. Sassaman 06 May '00

06 May '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, folks... I recently upgraded to SuSE 6.3 from SuSE 6.1, and locate has stopped working. It seems that updatedb nolonger properly is executed from the cron.daily script. I try running it by hand, and it hangs, doing nothing. Does anyone have any suggestions? Also, after installing the new aaa_base, I have seen a root "manpath" process consuming lots of CPU time, and staying indefinately as a running process. Again, any thoughts? - --Len. __ L. Sassaman System Administrator | Technology Consultant | "To hold a pen is to be at war." icq.. 10735603 | pgp.. finger://ns.quickie.net/rabbi | --Voltaire -----BEGIN PGP SIGNATURE----- Comment: OpenPGP Encrypted Email Preferred. iD8DBQE5E++tPYrxsgmsCmoRAq5YAJ98SzBMW3/0dbjwyKEDjcdfNCXtpwCfYiZN qR6ZiFluMHq4YSyp5Mo0QWU= =1SEK -----END PGP SIGNATURE-----

2 1

Re: [suse-security] temporary files created by crontab -e
by Eilert Brinkmann 05 May '00

05 May '00

Roland Hilkenbach <roland(a)profil-hannover.de> wrote: > trying to create a user-crontab, I found that crontab -e creates > temporary files in /tmp. These files take the name /tmp/crontab.xxx > where the extension seems to be the PID of the crontab -e command and > thus are easy to guess by other people. > Since /tmp is writable by everyone, someone else could possibly create a > file following this naming convention, thereby disturbing the crontab > command. I did crontab -e (with cron-3.0.1-84 on SuSE 6.2) as normal user serveral times under different conditions and strace'd what the command did. This are the results (well, only the interesting parts): 1. /tmp/crontab.<pid> does'nt exist ----------------------------------- open("/tmp/crontab.21464", O_RDWR|O_CREAT|O_EXCL, 0600) = 6 getgid() = 114 getuid() = 2814 fchown(6, 2814, 114) = 0 This seems to be ok. The O_CREAT together with O_EXCL ensures that the operation fails if the file already exists. Maybe it would better to temporarily switch back to the callers uid/gid instead of creating the file with root ownership and then changing it's owner and group. But I can't see a security risk in this. 2. /tmp/crontab.<pid> already exists ------------------------------------ open("/tmp/crontab.21533", O_RDWR|O_CREAT|O_EXCL, 0600) = -1 EEXIST (File exists) write(2, "/tmp/crontab.21533: File exists\n", 32) = 32 unlink("/tmp/crontab.21533") = 0 _exit(1) = ? In this case open fails, the existing file is not overwritten, crontab prints an error message and exists. But before exiting the existing file is unlinked, even if the calling user has no permission to do so. I would call this a bug, but unless someone uses temporary files with names like /tmp/crontab.xxx (which probably noone will do except with the crontab command) there is no "real" security problem resulting from this. If the existing file is a symbolic link, only the link is removed - the file it points to it not affected. So there is a possible (theoretical) security problem and probably it would be a good idea to fix it. But regarding the unrealistic conditions under which it appears, I currently don't see a reason to take immediate action in this case. Eilert -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Eilert Brinkmann -- Universitaet Bremen -- FB 3, Informatik eilert(a)informatik.uni-bremen.de - eilert(a)tzi.org - eilert(a)linuxfreak.com http://www.informatik.uni-bremen.de/~eilert/

1 0

temporary files created by crontab -e
by Roland Hilkenbach 05 May '00

05 May '00

Hi, trying to create a user-crontab, I found that crontab -e creates temporary files in /tmp. These files take the name /tmp/crontab.xxx where the extension seems to be the PID of the crontab -e command and thus are easy to guess by other people. Since /tmp is writable by everyone, someone else could possibly create a file following this naming convention, thereby disturbing the crontab command. I wasn´t able to smuggle data into the crontabs but this behavior can easily be used to do a DoS since the /tmp directory has the sticky-Bit set. Regards Roland Hilkenbach

3 3

Re: [suse-security] md5sums
by Volker Kuhlmann 05 May '00

05 May '00

> As there seems to be constant problems with md5sums, would it be > possible to set up a http-service offering md5-sums of the distribution- > and update files thus removing the need to have related security posting > whenever you need to check the authentity of any file you have. These > transfers could possibly be signed by SuSE:s private pgp key so that > authentity could be checked against the public key printed on SuSE > manual. I brought this up a month ago but there was no reaction from SuSE at all. As SuSE continually publishes incorrect md5 sums, or misses publishing some altogether, I do not really attribute that much security to those sums which are published (perhaps I'm paranoid). As an additional pain with those md5sums, I have not yet found a way how to conveniently check e.g. db53e002b6be652b31262bf89be0c31a ftp://ftp.suse.com/pub/suse/ i386/update/6.4/a1/aaa_base-2000.5.2-0.i386.rpm Do I really have to load this into an editor and meddle with it, because otherwise md5sum (the command) barfs about the path in front of the filename? What I suggest is what Red Hat has been doing for many years: sign the rpms with either pgp, gpg, or both. Fixes the problem in the most user-friendly way. Oh yes, md5 sums could still be published... Volker

2 1

IPchains Assistance
by KULISHdotCOM 05 May '00

05 May '00

Can someone please tell me how the following script CAN'T forward HTTP requests to and internal server? This is Hacker-Bait if I ever seen it. Thanks. #!/bin/sh echo "Flushing Existing Rules and Setting Policies ..." ipchains -F ipchains -P input ACCEPT ipchains -P output ACCEPT ipchains -P forward ACCEPT echo "Complete" echo " " echo "Initializing Kernel Level Modules ..." echo "IP Forwarding" echo 1 > /proc/sys/net/ipv4/ip_forward ipmasqadm portfw -f echo "Complete" echo " " echo "Initializing HTTP ..." ipchains -A input -i eth0 -p tcp -s 0/0 1024:65535 -d 207.177.58.56 80 -j ACCEPT ipchains -A forward -p tcp -s 10.1.1.2 80 -j MASQ ipmasqadm portfw -a -P tcp -L 207.177.58.56 80 -R 10.1.1.2 80 echo "Incoming HTTP requests Forwarded To 10.1.1.2" echo "Complete" echo " "

2 1

Re: [suse-security] manpath hanging (was:Re: SuSE Security Announcement - aaa_base - UPDATE)
by Volker Kuhlmann 04 May '00

04 May '00

> The manpath utility is run from cron... if you do an "strace -p <pid of > manpath>", you'll likely see that it gets stuck in a loop for directories > that don't exist, yet it expects to find. I'll do that next time, but your explanation doesn't really say why it only happens sometimes (I don't think I changed $MANPATH), or why it works when run from the shell with the same args as taken from the ps output? Whatever, of course it shouldn't hang... (not sure whether this ought to go on the security list though) Volker

2 1