June 2002 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] CFS Crypto-File Problems ::::: THANKS works
by Ryan Swenson 12 Jun '02

12 Jun '02

Hello, Thanks Jens... you made me say, "ok yeah..." under /etc/rc.d there exists a boot.crypto bash script... It provides all the mechanisms for starting the cfs - I should review it so I know a bit more how it works, prob uses loopback mounts.. never fails to check your boot scripts -duh -thanks!! Gruesse/Regards, Ryan S. -----Original Message----- From: jkerle(a)gmx.de [mailto:jkerle@gmx.de] Sent: Wednesday, June 12, 2002 12:46 PM To: suse-security(a)suse.com Cc: Ryan Swenson Subject: Re: [suse-security] CFS Crypto-File Problems Hi, if it is mounted by fstab, check /etc/fstab for a entry with cfs, remount with mount mountpoint if it is mounted by a script in /etc/rc.d (/etc/rc.d/rc.local for example), run it and check then why it fails on startup. if all fails, try grep -ir cfs /etc Jens > > On Wed, 12 Jun 2002, Ryan Swenson wrote: > > > Hello, > > > > Some of us here use SuSe Linux at each foreign site to provide CFS filesystems to protect a directory containing certificates for all our various java security related certs. Its more or less our Key Escrow. Unfortunately a German co-worker took off for a 5 week vacation, and a system crashed and restarted but never mounted the CFS. > > > > Normally in the boot process we are prompted for the passphrase. What can I do to remount the CFS filesystem in the security mount point partion I created. I have a partition all of its own for CFS, the directory exists but has not mounted the filesystem. > > > > Where do I begin, to find where CFS is specified, how to mount it, etc. > > > > Thanks, > > Ryan S. > > > > > > > > >

1 0

SuSE8.0 and SAMBA crash
by Olivier Daigle 12 Jun '02

12 Jun '02

Hi all, We have been using SuSE7.2 and samba (client and server) without any problems for a few months. Now, we migrated some workstations (samba clients) to SuSE8.0 and we get segfaults while accessing files mounted through samba. Here is our network configuration: - SuSE7.2 server with default samba server package. - Few SuSE7.2 workstations with default samba client packages. - Few Windows2000 workstations. - Few SuSE8.0 workstations with default samba client packages. Every SuSE workstation is UP and has a default SuSE UP kernel (2.4.4-4GB for 7.2 and 2.4.18-4GB for 8.0). Windows2000 and SuSE7.2 clients can access our server without any problem. SuSE8.0 clients crashes (segfault) while accessing a mounted directory. The crash happens at a random time (ie: doing a ls -lR in a mounted directory causes a segfault at random). The SuSE8.0 workstations are Intel Pentium 4 1.8GHz with 256MB of ram. I copied the output of lspci below: Here is the log I get: Jun 12 09:31:55 lemans kernel: Unable to handle kernel paging request at virtual address d0000000 Jun 12 09:31:55 lemans kernel: printing eip: Jun 12 09:31:55 lemans kernel: ccaebae9 Jun 12 09:31:55 lemans kernel: *pde = 00000000 Jun 12 09:31:55 lemans kernel: Oops: 0000 Jun 12 09:31:55 lemans kernel: CPU: 0 Jun 12 09:31:55 lemans kernel: EIP: 0010:[nls_cp437:__insmod_nls_cp437_O/lib/modules/2.4.18-4GB/kernel/fs/nls/n+-9823511/96] Tainted: P Jun 12 09:31:55 lemans kernel: EFLAGS: 00210246 Jun 12 09:31:55 lemans kernel: eax: 00000000 ebx: 9f454432 ecx: f80863fd edx: 9a1d91d6 Jun 12 09:31:55 lemans kernel: esi: d0000000 edi: cd53fe44 ebp: cd53fedc esp: cd53fdf4 Jun 12 09:31:55 lemans kernel: ds: 0018 es: 0018 ss: 0018 Jun 12 09:31:55 lemans kernel: Process ls (pid: 29093, stackpage=cd53f000) Jun 12 09:31:55 lemans kernel: Stack: c013fec0 cd53feac d483a252 00000001 00000000 00000000 00000000 cf5bfd80 Jun 12 09:31:55 lemans kernel: c5c3e220 5d812e9f 00e74a2a 64fa5aec 00000000 00000000 cfb99000 00000004 Jun 12 09:31:55 lemans kernel: 00000000 00000000 00000001 00000006 ccaea335 cafb77c0 cd53ffb0 c013fec0 Jun 12 09:31:55 lemans kernel: Call Trace: [filldir+0/216] [nls_cp437:__insmod_nls_cp437_O/lib/modules/2.4.18-4GB/kernel/fs/nls/n+-9829579/96] [filldir+0/216] [filldir+0/216] [nls_cp437:__insmod_nls_cp437_O/lib/modules/2.4.18-4GB/kernel/fs/nls/n+-9829438/96] Jun 12 09:31:55 lemans kernel: [filldir+0/216] [nls_cp437:__insmod_nls_cp437_O/lib/modules/2.4.18-4GB/kernel/fs/nls/n+-9825524/96] [filldir+0/216] [vfs_readdir+97/132] [filldir+0/216] [sys_getdents+74/152] Jun 12 09:31:55 lemans kernel: [filldir+0/216] [system_call+51/64] Jun 12 09:31:55 lemans kernel: Jun 12 09:31:55 lemans kernel: Code: 8a 06 46 89 c2 c1 e2 04 01 da c1 e8 04 01 c2 8d 04 92 8d 1c Here is what lsmod tells me: Module Size Used by Tainted: P nls_cp437 4384 6 (autoclean) nls_iso8859-1 2880 6 (autoclean) smbfs 32064 6 (autoclean) snd-pcm-oss 45152 0 (autoclean) snd-mixer-oss 11136 1 (autoclean) snd-intel8x0 12160 1 snd-pcm 58528 0 [snd-pcm-oss snd-intel8x0] snd-timer 11456 0 [snd-pcm] snd-ac97-codec 24196 0 [snd-intel8x0] snd-mpu401-uart 3504 0 [snd-intel8x0] snd-rawmidi 13536 0 [snd-mpu401-uart] snd-seq-device 4336 0 [snd-rawmidi] snd 31720 0 [snd-pcm-oss snd-mixer-oss snd-intel8x0 snd-pcm snd-timer snd-ac97-codec snd-mpu401-uart snd-rawmidi snd-seq-device] soundcore 3268 3 [snd] ipv6 123424 -1 (autoclean) isa-pnp 27816 0 (unused) joydev 5728 0 (unused) evdev 3904 0 (unused) input 3072 0 [joydev evdev] usb-uhci 20996 0 (unused) usbcore 55136 1 [usb-uhci] af_packet 11528 1 (autoclean) e100 69272 1 reiserfs 158816 1 Here is the output of lspci: 00:00.0 Host bridge: Intel Corp. 82845 845 (Brookdale) Chipset Host Bridge (rev 04) 00:01.0 PCI bridge: Intel Corp. 82845 845 (Brookdale) Chipset AGP Bridge (rev 04) 00:1e.0 PCI bridge: Intel Corp. 82801BA/CA PCI Bridge (rev 05) 00:1f.0 ISA bridge: Intel Corp. 82801BA ISA Bridge (LPC) (rev 05) 00:1f.1 IDE interface: Intel Corp. 82801BA IDE U100 (rev 05) 00:1f.2 USB Controller: Intel Corp. 82801BA/BAM USB (Hub (rev 05) 00:1f.3 SMBus: Intel Corp. 82801BA/BAM SMBus (rev 05) 00:1f.4 USB Controller: Intel Corp. 82801BA/BAM USB (Hub (rev 05) 00:1f.5 Multimedia audio controller: Intel Corp. 82801BA/BAM AC'97 Audio (rev 05) 01:00.0 VGA compatible controller: nVidia Corporation: Unknown device 0171 (rev a3) 02:08.0 Ethernet controller: Intel Corp. 82801BA/BAM/CA/CAM Ethernet Controller (rev 03) And here is the output of uname -a: Linux lemans 2.4.18-4GB #1 Wed Mar 27 13:57:05 UTC 2002 i686 unknown Is there a patch or something I can apply to fix this problem? Thanks, Olivier -- Olivier Daigle <daio3003(a)ele.etsmtl.ca> :wq

2 1

OT: naver.com autoreplier nastiness ?
by Maarten J H van den Berg 11 Jun '02

11 Jun '02

Does anyone else get this back when posting to the list ? Can we boot this sorry (l)user off the list, or what ? Sorry if this in inappropriate, or redundant... Maarten ## headers start here >From NAVER-MAILER(a)naver.com Tue Jun 11 19:20:37 2002 Return-Path: <NAVER-MAILER(a)naver.com> Received: from naver335.naver.com ([211.218.150.15]) by nebula.vbvb.nl (8.11.3/8.11.3/SuSE Linux 8.11.1-0.5) with SMTP id g5BGpa518086 for <maarten(a)vbvb.nl>; Tue, 11 Jun 2002 18:51:37 +0200 Message-Id: <200206111651.g5BGpa518086(a)nebula.vbvb.nl> Received: (qmail 1179 invoked by uid 0); 11 Jun 2002 16:51:33 -0000 Received: from naver332.naver.com (HELO naver332) (211.218.150.12) by naver335.naver.com with SMTP; 11 Jun 2002 16:51:33 -0000 MIME-Version: 1.0 Content-Id: <3D062A95.000001.16352(a)naver332.naver.com> Content-Type: text/plain From: <NAVER-MAILER(a)naver.com> Date: Wed, 12 Jun 2002 01:51:33 +0900 (KST) To: <maarten(a)vbvb.nl> Subject: =?ks_c_5601-1987?B?uN7AzyDA/LzbIL3HxtAgvsu4siA8bWludDExMTVAbmF2ZXIuY29t?= =?ks_c_5601-1987?B?Pg==?= X-Mailer: NAVER Mailer 1.0 X-Virus-Scanned: by AMaViS-perl11-milter (http://amavis.org/) X-UIDL: ,eR"!Ie/"!8&1"!@C`"! Status: R X-Status: N Content-Type: message/rfc822; name="Re: [suse-security] Resetting Firewall2.eml" Content-Disposition: attachment; Filename="Re: [suse-security] Resetting Firewall2.eml" Content-Transfer-Encoding: 8bit Received: (qmail 16348 invoked from network); 11 Jun 2002 16:51:32 -0000 Received: from unknown (HELO naver439.naver.com) (211.218.150.239) by naver332 with SMTP; 11 Jun 2002 16:51:32 -0000 Received: from [217.9.113.68] by naver439.naver.com (Terrace Internet Messaging Server 3.1) with ESMTP id 2002061201:51:31:849232.30220.6329511 for <mint1115(a)naver.com>; Wed, 12 Jun 2002 01:51:28 +0900 (KST) Received: (qmail 6926 invoked by alias); 11 Jun 2002 16:48:42 -0000 Mailing-List: contact suse-security-help(a)suse.com; run by ezmlm Precedence: bulk List-Post: <mailto:suse-security@suse.com> List-Help: <mailto:suse-security-help@suse.com> List-Unsubscribe: <mailto:suse-security-unsubscribe@suse.com> List-Subscribe: <mailto:suse-security-subscribe@suse.com> X-MIME-Notice: attachments may have been removed from this message X-Mailinglist: suse-security Delivered-To: mailing list suse-security(a)suse.com Received: (qmail 6892 invoked from network); 11 Jun 2002 16:48:41 -0000 Content-Type: text/plain; charset="iso-8859-1" From: Maarten J H van den Berg <maarten(a)vbvb.nl> Reply-To: maarten(a)vbvb.nl Organization: VBVB To: suse-security(a)suse.com Date: Tue, 11 Jun 2002 19:10:07 +0200 X-Mailer: KMail [version 1.2] References: <3D061D71.2090305(a)mrichi.com> In-Reply-To: <3D061D71.2090305(a)mrichi.com> MIME-Version: 1.0 Message-Id: <0206111910070H.15680@itux> Content-Transfer-Encoding: 8bit X-Virus-Scanned: by AMaViS-perl11-milter (http://amavis.org/) Subject: Re: [suse-security] Resetting Firewall2 -- Maarten J. H. van den Berg ~~//~~ network administrator VBVB - Amsterdam - The Netherlands - http://vbvb.nl T +31204233288 F +31204233286 G +31651994273

1 0

susefirewall2 examples
by Carlos Carrera 11 Jun '02

11 Jun '02

Hello somebody know more examples of SuSEfirewall2 ???

1 0

apache with mod_ssl and mod_auth_ldap
by Belick, Mirko 11 Jun '02

11 Jun '02

> I have started to build up a secure webaccess solution with SSL > client-authentication , based on apache+mod_ssl and a ldap-based user > administration. I tried mod_authz_ldap ( http://authzldap.othello.ch/ ) > which maps x509 certificate entries to ldap usernames and it works fine > for me. But mod_authz_ldap lacks on support for crypted passwords, as > mod_auth_ldap can. > Does anybody know if mod_ssl and mod_auth_ldap ( included in SuSE ) work > together well? When I try to install both packages, yast prints out a > warning, that it is not recommended to install mod_ssl and mod_auth_ldap > together. Any experiences ... ? > > Many thanks > > Mirko > > > > ----------------------------------- > Mirko Belick > Bundesdruckerei GmbH > IT-Netzmanagement > 10598 Berlin > Oranienstrasse 91 > > Tel: (030) 2598-2113 > Fax: (030) 2598-6083 > Email: belick(a)bdr.de > http://www.bundesdruckerei.de >

1 0

NFS-Server and Firewall
by Florian Rossol 11 Jun '02

11 Jun '02

Hi list, i have to set up an NFS-Server. I want to protect this server with SuSEfirewall2. The question is: What ports do I have to open? Of course I have to open port 111 (udp,tcp) and 2049 (udp,tcp). But that seems not to be enough. Everytime I try to connect to the server the client conntects to some other (randomly choosen?) ports (608, 922, 1024, ...). Do I have to open a range of ports? If so, what range I have to open? Thanks and greetings Florian

2 1

Webmin & SuSEfirewall2
by Dr. Peter Bast 11 Jun '02

11 Jun '02

Hi, is there any modul to managing SuSEfirewall2 with Webmin. Thank's Peter

2 2

RE: [suse-security] bind8 security question
by Herbrechter, Marc 10 Jun '02

10 Jun '02

Michael Ryan wrote: > Hi List, Moinsen > I am running BIND 8.2.3 on a production SuSE 6.4 box and want > to know whether upgrading to 8.3.1 as recommended by the ISC > ('due to certain security vulnerabilities in previous > versions') is going to cause problems ... ? You should Update your BIND as often as possible out of the sources avaiable at http://www.isc.org/. You should also consider updating your BIND to 9.x and running it in a chroot'ed environment for more secure operation. > .. or do SuSE intend providing an updated BIND8 rpm for 6.4 ? For sure... LOL ;)

3 2

bind8 security question
by Michael Ryan 10 Jun '02

10 Jun '02

Hi List, I note from a recent CERT advisory and subsequent SuSE Security announcement that there is a DoS issue with BIND 9 versions prior to 9.2.1. I am running BIND 8.2.3 on a production SuSE 6.4 box and want to know whether upgrading to 8.3.1 as recommended by the ISC ('due to certain security vulnerabilities in previous versions') is going to cause problems ... ? .. or do SuSE intend providing an updated BIND8 rpm for 6.4 ? Thanks, Michael

1 0

Re: [suse-security] Webmin & SuSEfirewall2
by Dr. Peter Bast 10 Jun '02

10 Jun '02

Per R Laursen schrieb: > Try to look at http://www.webmin.com > > > On Friday 07 June 2002 16:26, Dr. Peter Bast wrote: > >>Hi, >> >>is there any modul to managing SuSEfirewall2 with Webmin. >> >>Thank's >> >>Peter > > I can't find any modul for SuSEfirewall2 at http://www.webmin.com.

1 0