June 2000 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] SuSE Security Announcement: kernel-2.2.x
by Eilert Brinkmann 28 Jun '00

28 Jun '00

Markus Gaugusch <markus(a)gaugusch.dhs.org> wrote: > > We are sorry about the late release of the new kernel, but the plain > > 2.2.16 kernel causes trouble with our patches and it also has a new > > security hole. After we solved all these problems, we hope, > > we could provide you with a more stable and more secure kernel. > Which new security holes are this? I am always using fresh kernel.org > kernels, so I'd like to know about those other holes. There was a security problem when using NFS: The lockd could be crashed by sending it random data over TCP. This was fixed in 2.2.17pre1. Eilert -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Eilert Brinkmann -- Universitaet Bremen -- FB 3, Informatik eilert(a)informatik.uni-bremen.de - eilert(a)tzi.org - eilert(a)linuxfreak.com http://www.informatik.uni-bremen.de/~eilert/

1 0

Re: [suse-security] wuftpd-2.6.0-122
by t b 28 Jun '00

28 Jun '00

Thanks, now is better. ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

1 0

wuftpd-2.6.0-122
by t b 28 Jun '00

28 Jun '00

Hi, after update the package wuftpd-2.6.0-122.i386.rpm, #rpm -qi wuftpd ... Version:2.6.0 Release:122 ... but when I log to the ftp server #ftp localhost *** Welcome ... *** ... FTP Server (Version wu-2.4.2-academ BETA (18))... Why the version is not correct and how can't show the server version. Thanks ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

3 2

Kernel question
by Magus Ba'al 28 Jun '00

28 Jun '00

I have a semi security related question. I prefer to run my console in 800x600 (easier to get everything on the screen to read) and when I compile the 2.2.16 kernel, the video comes up blank right after loading lilo. The system is running perfectly (ssh running, all daemons are up), but no video. I have tested with SuSE 6.3 & 6.4, as well as Slackware 7 on 4 different computers using different video cards. I have recompiled the kernel well over 30 times trying different options and combinations, still a no go. I have also been working with another admin and he's run into the same problem. Between us I *know* we've hit every kernel combination. I'm thinking there might be something else that I need to recompile somewhere, but can't seem to find what it is. I've been searching everywhere for the last month and decided that I'd ask some more experienced admins for their advice. One last thing, if I get the kernel patches for SuSE 6.3/6.4, the resolution works fine, but I'd like to compile my own kernel to get it as small as possible. For the time being I've dropped the console resolution back down to normal (vga=normal instead of vga=788), but if anyone could point me in the right direction or give me some tips on what I can try to get the resolution back up, I would be extremely grateful. Thanks in advance Steven Beverly "He who fights with monsters should look to it that he himself does not become a monster...when you gaze long into the abyss the abyss also gazes into you." -Friedrich Nietzsche "Push and you will find resistance, lead and you will find followers" -Unknown Author "Help me Obi Wan Root, you're my only hope!" - Me

1 0

/-Root-FS: Readonly?
by Stefan Bauer 27 Jun '00

27 Jun '00

Hi, I'm setting up a firewall with 6.4. At the moment, I'm trying to secure the machine. I wanted to set the /-FS to readonly, only /home,/var,/tmp are writable. All works fine, but after closing a tty, mingetty is respawning too fast and I'm unable to use this tty any more. I tracked the problem down to an write-attempt to the cua-device, but the system reports that / is mounted readonly. Is there a possibility to supress this write-access in the respawning-process? -- Stefan Bauer

4 4

Auditing software for Squid
by mablanco＠earthling.net 27 Jun '00

27 Jun '00

Dear friends: I'm running a Squid proxy server on a SuSE Linux box (6.3) which authenticates users against a NT primary domain controller. I've been asked to get accurate information on proxy usage based on users' ID. I've been trying "calamaris" for this task, but it seems unable to extract any info based on users (each line in the Squid logs includes the name of the user). Any idea of what's happening? Maybe should I use another software? Thanks in advance. -- | * * * * * * * * Marco Antonio Blanco | See the stars, they're shining bright (mablanco(a)earthling.net) | * Everything's alright tonight * | * * * * - M.L.Gore * *

2 1

Forwarded mail....
by Thomas Biege 27 Jun '00

27 Jun '00

Hi, here are the MD5 hash of the INN RPM for 6.1. AXP: 259a0ad4e170a4e2576b463603549fd5 ftp://ftp.suse.com/pub/suse/axp/update/6.1/n1/inn-2.2.2-86.alpha.rpm i386: 34e505924919724d736481ec6b1cd017 ftp://ftp.suse.com/pub/suse/i386/update/6.1/n1/inn-2.2.2-91.i386.rpm Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomas(a)suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47

1 0

Re: [suse-security] qpopper and APOP (starting to bore, ah?!)
by rhoerbe＠netpromote.co.at 27 Jun '00

27 Jun '00

I had exactly the same experience with the update package for Suse 6.3. After I upgraded, Windows users where locked out, because their Netscape version support APOP. Mac users did not experience a problem, because the ydid not have APOP. (If this is an advantage, remains to be discussed :->) Rainer Simone Grabstein <gsimon(a)rocketmail.com> Sent by: suse-security-return-2003-rhoerbe=netpromote.co.at(a)suse.com 26.06.00 20:13 To: suse-security(a)suse.com cc: Subject: [suse-security] qpopper and APOP (starting to bore, ah?!) There has been a discussion (quite recently) about QPOP and APOP support, and the whole thing seemed to had been settled with the release of the "pop-2000.6.7-0.i386.rpm" package. Well, I confidently downloaded the above mentioned RPM and upgraded a server of mine. While tryng to create the /etc/pop.auth database, I was STILL getting that boring "unable to open POP authorization DB". After browsing through several newsgroup and mailing-list archives, I reached the conclusion that I *HAD* to upgrade to QPOP 3.02. Thus, I downloaded the sources from Qualcomm's site, compiled and - enough said - popauth worked seamlessly. Did anybody else have analogue experiences? (To Thomas Biege: did you have some positive feedback about SuSE's update?). __________________________________________________ Do You Yahoo!? Get Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

Re: [suse-security] Auditing software for Squid
by Bauer, Juergen 27 Jun '00

27 Jun '00

hi, try sqmgrlog, from http://www.ineparnet.com.br/orso/index.html . it generates "Squid utilization reports by userid or ip/name" i have never tested it with uids in the log file but it works perfect just for ip's. bye, jb -----Ursprüngliche Nachricht----- Von: mablanco(a)earthling.net [mailto:mablanco@earthling.net] Gesendet: Montag, 26. Juni 2000 13:47 An: suse-security(a)suse.com Betreff: [suse-security] Auditing software for Squid Dear friends: I'm running a Squid proxy server on a SuSE Linux box (6.3) which authenticates users against a NT primary domain controller. I've been asked to get accurate information on proxy usage based on users' ID. I've been trying "calamaris" for this task, but it seems unable to extract any info based on users (each line in the Squid logs includes the name of the user). Any idea of what's happening? Maybe should I use another software? Thanks in advance. -- | * * * * * * * * Marco Antonio Blanco | See the stars, they're shining bright (mablanco(a)earthling.net) | * Everything's alright tonight * | * * * * - M.L.Gore * * --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

qpopper and APOP (starting to bore, ah?!)
by Simone Grabstein 26 Jun '00

26 Jun '00

There has been a discussion (quite recently) about QPOP and APOP support, and the whole thing seemed to had been settled with the release of the "pop-2000.6.7-0.i386.rpm" package. Well, I confidently downloaded the above mentioned RPM and upgraded a server of mine. While tryng to create the /etc/pop.auth database, I was STILL getting that boring "unable to open POP authorization DB". After browsing through several newsgroup and mailing-list archives, I reached the conclusion that I *HAD* to upgrade to QPOP 3.02. Thus, I downloaded the sources from Qualcomm's site, compiled and - enough said - popauth worked seamlessly. Did anybody else have analogue experiences? (To Thomas Biege: did you have some positive feedback about SuSE's update?). __________________________________________________ Do You Yahoo!? Get Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/

1 0