August 2000 - openSUSE Security - openSUSE Mailing Lists

Sendmail Port 587
by Harald Scharf 03 Aug '00

03 Aug '00

Hello, to all.. does anybody know, why sendmail (8.10.x) needs this line in /etc/sendmail.cf DaemonPortOptions=Port=587, Name =MSA, M=E with a < telnet hostip 587 > i get a a connection to the estmp service, but why. I think it only has to run on port 50 ? Harald Scharf Softpoint electronic Netzwerksysteme / Firewalls Windows NT/Windows 2000/Linux/Netware/Unix mailto:h.scharf@softpoint.at www.softpoint.at www.simplex.at

2 2

natd
by ksemat＠wawa.eahd.or.ug 02 Aug '00

02 Aug '00

I know that this must probably be in the archives somewhere but could someone just help me. I have been using ipchains and masquerading to let the users on my LAN using MS windows(ouch!) connect to the net. Now I would like to change to using NAT can someone point me to a few readme's which are especially suse oriented? Two, where can I get the 2.4 kernels and a readme on the new iptables system? Noah ksemat(a)eahd.or.ug

2 2

Re: [suse-security] harden_suse & gdm
by Stephen nyc 02 Aug '00

02 Aug '00

Roman - Continuing along, I inserted strace as you suggested. Lo and behold, it worked, on tty2? It also created a giantic strace file. I removed the strace, and it no longer works. changing gdm to suid root does not solve the problem. commenting out line 29 in xdm changed nothing as well. I did notice the following in the gdm log - the last line reads: System: `/usr/X11R6/lib/X11/xkb/xkbcomp -w 1 -R/usr/X11R6/lib/X11/xkb -xkm -m us -em1 "The XKEYBOARD keymap compiler (xkbcomp) reports:" -emp "> " -eml "Errors from xkbcomp are not fatal to the X server" keymap/xfree86 compiled/xfree86.xkm' I figure I'll include this since the keyboard is what appears to not be working... - Steve --- Stephen nyc <stephennyny(a)yahoo.com> wrote: > Roman - > > Thanks for the insight - xdm and kdm run fine. > Neither > of them run as suid root.t > > I'm looking into the strace now. > > - Steve > > --- Roman Drahtmueller <draht(a)suse.de> wrote: > > Stephen, > > > > It would be useful to know if the system is > > accessible if you run xdm or > > kdm instead of gdm. > > Unfortunately, I can't reproduce your problem > right > > now. > > > > Most liklely, the origin of the failure comes out > of > > one or two corners: > > > > 1) a permission problem. You would have to strace > or > > ltrace the binary to > > get more details (maybe the process changes euid > and > > runs into a closed > > device file). Insert `strace -f -o /strace.gdm� > > before the "startproc" in > > /sbin/init.d/xdm. (kill the process with an atjob > or > > alike to regain > > control again!) > > > > 2) a locale problem, or a mixture with 1). Since > the > > thing works with gdm > > ran as root, the profile settings in one or more > of > > /etc/rc.status, > > /etc/rc.config, /etc/SuSEconfig/profile may be the > > culprit. > > > > If nothing helps, comment out line 29 in > > /sbin/init.d/xdm (which reads > > like "export $var") and see what it does. > > > > Thanks, > > Roman. > > -- > > - > > > - > > | Roman Drahtm�ller <draht(a)suse.de> "Caution: > > Cape does not | > > SuSE GmbH - Security enable > user > > to fly." > > | N�rnberg, Germany (Batman > > Costume warning label) | > > - > > > - > > > > > > > > > > > > > Folks - > > > > > > I ran the harden suse scripts today and have run > > into > > > a little problem with gdm. > > > > > > System is clean suse 6.4 install, clean > > helix-gnome > > > 1.2 install. run level 3 booted to gdm login > > window. > > > > > > Before running the harden script (options y y y > y > > n n > > > y n y y - modified workstation) on startup I > would > > get > > > the gdm login window. I could switch back to > > console > > > 1, and log in either way. > > > > > > Now I boot to the gdm login window - it accepts > no > > > keyboard inputs, making it impossible to login > or > > > change consoles. > > > > > > Interestingly enough, now that it is disabled, I > > can > > > run gdm fine from a root login and behavior is > as > > > expected. > > > > > > This probably has something to do with some of > the > > > permission resets and that gdm can access the > > keyboard > > > - can someone point me in the right direction > for > > > repairing this, or help me understand the > benefit > > of > > > this behavior. > > > > > > Thanks. > > > > > > - Steve > > > > > > > > > > > > > __________________________________________________ > Do You Yahoo!? > Kick off your party with Yahoo! Invites. > http://invites.yahoo.com/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: > suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: > suse-security-help(a)suse.com > __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

1 0

Re: security
by ksemat＠wawa.eahd.or.ug 02 Aug '00

02 Aug '00

> I think most of us should take time to read this article I found it quite > interesting. Especially the analysis on SuSE's responses to security problems. > http://securityportal.com/cover/coverstory20000724.html > > Noah > ksemat(a)eahd.or.ug > >  > > > ------------------------------------------------- > This mail sent through IMP: webmail.eahd.or.ug > Noah ksemat(a)eahd.or.ug

1 0

Sendmail noetrn?
by Nick Zentena 02 Aug '00

02 Aug '00

Hi, I noticed that the new sendmail.cf that suse installed included a noetrn setting. It didn't take me very long to change it but am I missing something? I can't see how having etrn on can hurt anything? Nick -- ----------------------------- Anybody got plans for an ark? -----------------------------

3 3

Re: [suse-security] /var/log/{messages,firewall,warn}
by Ralph Weichert 02 Aug '00

02 Aug '00

Steffen Dettmer <steffen(a)dett.de> writes: > I would suggest to name this file "kernel" and not firewall, > since IMHO "firewall" is misleading here. In a file firewall I > wouldn't expect Harddisk I/O errors and so on. It's a pitty that > syslog is to silly to sort by the tag field, but you could make a > little (i.e. perl-) Script or some program doing this. Syslogd is > able to write down to a named pipe, that could be read out be > such a script. What do you think? You could also have a look at syslog-ng, which can filter messages by various criteria (e. g. the message text itself). You can find it at http://www.balabit.hu/products/syslog-ng/ Regards, Ralph

1 0

Re: [suse-security] harden_suse & gdm
by Stephen nyc 02 Aug '00

02 Aug '00

Roman - Thanks for the insight - xdm and kdm run fine. Neither of them run as suid root.t I'm looking into the strace now. - Steve --- Roman Drahtmueller <draht(a)suse.de> wrote: > Stephen, > > It would be useful to know if the system is > accessible if you run xdm or > kdm instead of gdm. > Unfortunately, I can't reproduce your problem right > now. > > Most liklely, the origin of the failure comes out of > one or two corners: > > 1) a permission problem. You would have to strace or > ltrace the binary to > get more details (maybe the process changes euid and > runs into a closed > device file). Insert `strace -f -o /strace.gdm� > before the "startproc" in > /sbin/init.d/xdm. (kill the process with an atjob or > alike to regain > control again!) > > 2) a locale problem, or a mixture with 1). Since the > thing works with gdm > ran as root, the profile settings in one or more of > /etc/rc.status, > /etc/rc.config, /etc/SuSEconfig/profile may be the > culprit. > > If nothing helps, comment out line 29 in > /sbin/init.d/xdm (which reads > like "export $var") and see what it does. > > Thanks, > Roman. > -- > - > - > | Roman Drahtm�ller <draht(a)suse.de> "Caution: > Cape does not | > SuSE GmbH - Security enable user > to fly." > | N�rnberg, Germany (Batman > Costume warning label) | > - > - > > > > > > > Folks - > > > > I ran the harden suse scripts today and have run > into > > a little problem with gdm. > > > > System is clean suse 6.4 install, clean > helix-gnome > > 1.2 install. run level 3 booted to gdm login > window. > > > > Before running the harden script (options y y y y > n n > > y n y y - modified workstation) on startup I would > get > > the gdm login window. I could switch back to > console > > 1, and log in either way. > > > > Now I boot to the gdm login window - it accepts no > > keyboard inputs, making it impossible to login or > > change consoles. > > > > Interestingly enough, now that it is disabled, I > can > > run gdm fine from a root login and behavior is as > > expected. > > > > This probably has something to do with some of the > > permission resets and that gdm can access the > keyboard > > - can someone point me in the right direction for > > repairing this, or help me understand the benefit > of > > this behavior. > > > > Thanks. > > > > - Steve > > > > > __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/

1 0

Problems with YaST / Usermanagement
by Boris Kantwerk 02 Aug '00

02 Aug '00

Hi *, while creating new users the systemdefault for the userid is always 505. Setting it by hand to perhaps 510 doesn't work too. The homedirectories looks like this: drwxr-xr-x 3 505 users 1024 Aug 2 00:19 test drwxr-xr-x 3 510 users 1024 Aug 2 00:19 test2 A cd '~test' or cd '~test2' ends with following error-message: x:/webroots # cd ~test2 bash: cd: ~test2: No such file or directory Rebooting the system for reinit all daemons doesn't work too. System is SuSE 6.2 with Kernel 2.2.10. Reinstalled security fixes: x:~/new_rpms # ls . mdomo.rpm .. mysqclnt.rpm aaa_base-2000.5.2-0.i386.rpm mysql.rpm bind8.rpm mysqldev.rpm bindutil.rpm pine.rpm cpio.rpm pop-2000.6.8-0.i386.rpm cron.rpm syslogd.rpm lynx.rpm Any ideas? Boris.

2 1

Correction
by Harald Scharf 02 Aug '00

02 Aug '00

Of course i mean SMTP PORT 25 (not 50 as i wrote in the Mail before) Harald Scharf Softpoint electronic Netzwerksysteme / Firewalls Windows NT/Windows 2000/Linux/Netware/Unix mailto:h.scharf@softpoint.at www.softpoint.at www.simplex.at

1 0

Re: [suse-security] Problems with /var/log/messages -Reply
by Geert-Jan.Laat-de＠dsm-group.com 02 Aug '00

02 Aug '00

Hi, >> I'm having the following problem: >> >> Whenever cron gzip's my messages file, all logging to the "new" >> messages file >> is stopped, no information is entered. The only solution I found sofar is >> rebooting the machine, there has to be a simpler solution ! > > Yes, there was a bug in the log rotating scripts in SuSE 6.4, IIRC. > Please update aaa_base.rpm from our ftp site. I'm running SuSE 6.3, can I still use that package ??? Best regards, Geert-Jan de Laat

1 0