March 2003 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] SuSE Security Announcement: kernel (SuSE-SA:2003:021)
by Sebastian Stadtlich 31 Mar '03

31 Mar '03

> Do you have local access to the system or a serial console? > If yes, then just try it. If the kernel failed you can > immediatelly go back to the old kernel. So you at least > don't have a regression. Hi there could you explain the 'immediatelly go back' a little? My Server is a Suse 7.2 to which I don't have local access, but i can boot my server remote with a rescue-debian installation, that can access the Harddisc. Do you think that would be usefull when reboot fails? if so : which files do i need to backup, so that i can restore the old kernel without a running suse on the box? Any help appreciated, since i'm not used to update kernels on remote servers and i'm a little bit in fear that the reboot will fail. thanks Sebastian

5 4

RE: [suse-security] /etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

Thanks Armin, I reinstall the package, according to Togan there is no /etc/sysconfig on 7.3 and I have to use /etc/rc.config.d/firewall2.rc.config. After I did several setting to match our network. I still cannot ftp to the world from internal. How should i set this thing, on FW_MASQ_NETS? I want to let internal network to do icmp/ping and set FW_ALLOW_PING_INTERNET="yes" but still can not ping. Can you give me the clue. M. Edwin -----Original Message----- From: Armin Schoech [mailto:schoech@iap-kborn.de] Sent: Monday, March 31, 2003 2:17 PM To: suse-security(a)suse.com Subject: RE: [suse-security] /etc/sysconfig Hi ! > I downloaded a tar.gz file and then install it through the ./INSTALL > script. By the way I'm using 7.3 could you show me the right RPM where > i can dowload it. > --> What about: ftp.suse.com /pub/suse/i386/7.3/suse/sec1/SuSEfirewall2.rpm It might not be the most up-to-date version though. HTH, Armin -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

3 2

Please trim replies
by Martin Peikert 31 Mar '03

31 Mar '03

Hi, From focus-sun@securityfocus. -------- Original Message -------- Subject: Administrivia: Please trim replies Hi folks, Just a reminder to please trim replies. When responding, please include only the text to which you are responding, and preferrably put your responses below it, or inline. Not doing so is wasteful, inconsiderate to those on metered lines, and additionally it makes the list digest literally impossible to read. ----snip--- TIA GTi

1 0

RE: [suse-security] SuSE Security Announcement: kernel (SuSE-SA:2 003:021)
by Vaclav Brunnhofer 31 Mar '03

31 Mar '03

> > on a SuSE 8.0 installation with an ext3 root filesystem, the new kernel > > panics on boot, saying that can't access device 03:05 (the root filesystem > > is on /dev/hda5). The previous kernel did not exhibit this problem. The I have experienced the same problem with SuSE 7.3 - just in my case it was the disk 80:03 (sda3) . The computer boots only after I have changed the fstab entry to mount the root system as ext2 - now I have a warning that I am mounting an ext3 system as ext2, but at least the kernel is not in panic. I have exactly followed the update procedure, namely I have run mk_initrd and lilo (and both initrd files are now rebuilt). I had no problem when mounting the filesystem in Tiny floppy linux Tomsrtbt. I know that oficially ext3 was supported only in SuSE 8.0, but with the previous kernel (2.4.16) I had absolutely no problem. sincerely Vaclav Brunnhofer ___________________________________ NOCC, http://nocc.sourceforge.net

5 5

sendmail again..
by Sven 'Darkman' Michels 31 Mar '03

31 Mar '03

Happy Sunday... ;) just for those who doesn't know already: http://www.cert.org/advisories/CA-2003-12.html (yes, it's sendmail _again_)... regards, Sven

5 6

APCACCESS FATAL ERROR in apcaccess.c at line xxx with apcupsd-3.8.6-17
by Radu Voicu 31 Mar '03

31 Mar '03

Hi there! Could you please try the command "apcaccess status" on a SuSE 8.1 running apcupsd-3.8.6-17? Any hints about the error from the subject? P.S. I have two machines which generate this kind of error, and one where everything runs smoothly... Regards, Radu

1 0

RE: [suse-security] /etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

I downloaded a tar.gz file and then install it through the ./INSTALL script. By the way I'm using 7.3 could you show me the right RPM where i can dowload it. M. Edwin -----Original Message----- From: Armin Schoech [mailto:schoech@iap-kborn.de] Sent: Monday, March 31, 2003 1:07 PM To: suse-security(a)suse.com Subject: Re: [suse-security] /etc/sysconfig Hi ! > I read through the document from Togan Muftuoglu and found that the > configuration file for SuSEfirewall2 is on /etc/sysconfig, but after I > install the SuSEfirewall2 and reboot the machine there is no file on > there. Am I should create the file manually? > --> No, it should be there. How did you install SuSEfirewall2 ? If you used "rpm -U SuSEfirewall2.rpm", maybe you need to run "SuSEconfig" afterwards ? HTH, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

/etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

Hi all, I read through the document from Togan Muftuoglu and found that the configuration file for SuSEfirewall2 is on /etc/sysconfig, but after I install the SuSEfirewall2 and reboot the machine there is no file on there. Am I should create the file manually? a friend of me using iptables and he create iptables on sysconfig using "iptables-save > /etc/sysconfig/iptables", or actually we don't need the file only setting up the parameter on /etc/rc.config.d/firewall2.rc.config? Can anybody give the answer. TIA M. Edwin

2 1

Fou4s 0.9.0 released
by Markus Gaugusch 30 Mar '03

30 Mar '03

A new version of fou4s, my alternative implementation of YaST Online Update is out! Fou4s users should get it automatically tonight, everyone else may want to try it and download from http://fou4s.gaugusch.at/ . >From the Changelog: * ~ 50% speed improvement * Progress bar during checking * More graceful handling of dependency problems (only affected packages are not updated) * Interactive mode allows to show description of an update [d] * A logfile entry is written to /var/log/fou4s.log for each installed package. * SLES8 and SLOX4 support (testing needed, but should work) See the full changelog at http://fou4s.gaugusch.at/changelog.shtml for detailed information. Special Notes for this Release: * The UseFullPath option in fou4s.conf is now deprecated and will cause a warning. Just remove the line if you have set it manually. * On SuSE 8.1 two new packages will be found: ProOfficeInstallation and InstDB. These are scripts, which probably everyone will want to skip. (use "s" in interactive mode). The script support is a new feature of fou4s. kind regards, Markus Gaugusch PS: Users of business products are always welcome to tell me whether fou4s works for them. I have no business product available for personal testing. Especially the SLOX4 is interesting for me at the moment. PPS: This is not tested with SuSE 8.2, but I'll do as soon as possible! PPPS: If CheckFou4s is not set in fou4s.conf, fou4s cannot find updates of itself! -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(a)gaugusch.at X Against HTML Mail / \

1 0

frees/WAN between a 8.0 and a 7.3 HOW??
by Mathias Homann 28 Mar '03

28 Mar '03

How do I setup a frees/wan tunnel between said suse versions? right now, I'm starting at the 8.0 machine, which utterly fails to compile the klips modules?!?! /usr/src/linux/include/linux/highmem.h: In function `bh_kmap': /usr/src/linux/include/linux/highmem.h:22: warning: pointer of type `void *' used in arithmetic ipsec_tunnel.c: In function `ipsec_tunnel_start_xmit': ipsec_tunnel.c:1730: too many arguments to function `ip_select_ident' make[2]: *** [ipsec_tunnel.o] Error 1 make[2]: Leaving directory `/usr/src/linux-2.4.18.SuSE/net/ipsec' that is the output of 'make -f Makefile.module' on my 8.0 box (with the latest kernel update from suse installed). bye, [MH] -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin vom 2.8.1998 Az: 16 O 201/98). Jede kommerzielle Nutzung der übermittelten persönlichen Daten sowie deren Weitergabe an Dritte ist ausdrücklich untersagt! gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

1 0