March 2003 - openSUSE Security - openSUSE Mailing Lists

how to keep nimda and code red from filling apache logs
by Mathias Homann 25 Sep '03

25 Sep '03

Hi all, here's a bit of a step-by-step description on how to keep nimda and codered from filling your apache logs. Parts used: - SuSE 7.2 Professional - SuSEfirewall2 - iptables 1.2.3 - linux kernel 2.4.13-pre5 steps: 1. install kernel sources for a kernel >> 2.4.9, running 2.4.13- pre5 here, works fine so far 2. get the sources for iptables 1.2.3 from http://netfilter.samba.org 3. unpack sources somewhere 4. export KERNEL_DIR=$(where you put the kernel tree) 5. cd into unpacked iptables sources, there's a subdirectory named patch-o-matic there 6. apply wanted patches by running ./runme $(name.of.patch)patch for this here You'll want the string patch You can also apply other patches, like the irc-conntrack patch 7. now there's a little bug in this patch... here's a diff: --- linux/net/ipv4/netfilter/ipt_string.c~ Sun Oct 21 00:16:29 2001 +++ linux/net/ipv4/netfilter/ipt_string.c Sun Oct 21 16:54:45 2001 @@ -62,7 +62,7 @@ sk = skip[haystack[right_end - i]]; sh = shift[i]; - right_end = max(int, right_end - i + sk, right_end + sh); + right_end = max(right_end - i + sk, right_end + sh); } return NULL; 8. now, make config/menuconfig/xconfig... as usual. You can import your running kernel's config first. 9. enable the experimental stuff 10. go to networking options->netfilter, there's an option there to enable string matching; set that to M 11. compile and install kernel as usual; remember to uncomment the export INSTALL_PATH=/boot in the main makefile. 12. now build a rpm file for the new iptables stuff by installing the source rpm which comes with suse, then edit the spec file, put the iptables source in /usr/src/packages/SOURCE and rebuild. 13. now there are some small changes to the firewall config files. a) uncomment the last line in /etc/rc.config.d/firewall2.rc.config: FW_CUSTOMRULES="/etc/rc.config.d/firewall2-custom.rc.config" b) edit that file, I got the following stuff in mine: for forbidden_string in root.exe cmd.exe .ida; do iptables -I input_ext -p tcp --dport http -m string \ --string $forbidden_string -m state \ --state ESTABLISHED -j REJECT --reject-with tcp-reset done put that in the last supfunction defined in the custom rc file. c) change the FW_LOG setting in firewall2.rc.config from reading -log-level warning to -log-level kernel.warning 14. last: some small changes to /sbin/SuSEfirewall2 search in the script for the parts where the modules are loaded and unloaded; be sure to add ipt_string (and the other new modules you created by patching the kernel and enabling them in make config) to the modules loading/unloading code there. 15. reboot 16. if you try now to access (from outside, of course) one of the nimda or codered URLS, all you get is a 'connection reset by peer', and the request doesn't show in apache log files. btw, no guarantees, and the usual YMMV :) bye [L]

7 7

Kernel Panic after Security Update
by Stefan Proels 14 Apr '03

14 Apr '03

Hello, after installing the latest kernel update for the ptrace security issue on a SuSE 8.0 system, the new kernels panics while booting with the message "VFS: unable to mount root fs". My possibilities to analyze this problem are very limited since the system in question is an important 24x7 production system to which I only have remote access and when the system fails to boot this can only be fixed with the help of a local engineer. This is why I'm asking this list if anyone has experienced this problem before and possibly even has a solution for it. As a note, the new kernel works fine on two SuSE 7.1 systems. Some information on the system: SuSE 8.0, SuSE SMP Kernel 2.4.18-64GB-SMP for 2 P-III CPUs, 1 GB RAM, 2 SCSI drives with Adaptec SCSI controller. Root-Filesystem is ext3 INITRD_MODULES="aic7xxx usbcore jbd ext3" Bootloader lilo mk_initrd und lilo after installation of the new kernel ran without any error messages. After re-installing the old SuSE 2.4.18 Kernel with the security leak the systems boots up fine again. Thanks in advance Stefan

10 11

Linux-Server is frozen after security update of kernel
by Habichtsberg, R. 07 Apr '03

07 Apr '03

Hi, I'm not sure if it is the reason but the probability is high: After the security update of the linux kernel, in my case from k_deflt-2.4.18-57 to k_deflt-2.4.18-261, I have two frozen systems. In the first case we are running a program that starts some stored procedures in a Informix Database (IDS 9.30.UC1). After a few minutes there are no more actions possible on that server. You can't find any message in /var/log/messages or online.log. Even recursively started commands like ps or onstat -g ses sid -r 1>protfile does not generate any output. In the second case the similar happened during daily cronjob which builds and loads a database of ca. 8 GB size. My question: Has anybody else problems with these kernel updates related to Informix Dynamic Server. Reinhard.

12 18

Kernel update problem yet again
by Mathias Homann 03 Apr '03

03 Apr '03

the latest kernel updates are bad, not only my SuSE 8.1 with the latest update crashes when starting X11 with nvidia drivers, but my 8.0 firewall can't do frees/wan anymore because /lib/modules/`uname -r`/kernel/net/ipv4/ipsec.o is missing, and the sources from km_freeswan don't compile... bye, [MH] -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin vom 2.8.1998 Az: 16 O 201/98). Jede kommerzielle Nutzung der übermittelten persönlichen Daten sowie deren Weitergabe an Dritte ist ausdrücklich untersagt! gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

2 2

ip6tables
by Jon Hoffman 03 Apr '03

03 Apr '03

Hello, I have just finished setting up a 6to4 tunnel to start using IPv6. But I am trying to find a decent ip6tables tutorial/howto/sample firewalls...... But I am not having very much luck. Does anyone know of any good web sites for ip6tables? Thanks in advance. Jon Hoffman

2 1

problem with SQUID
by payam payami 02 Apr '03

02 Apr '03

Hi, I use suse 7.3 Internal network connect to internet by setting port 3128 in IE but when i set in squid.conf for authenticate_program that get windows login for users, IE don't get any windows and Internal network (clients) connect to internet normally without login I set these options in squid.conf: authenticate_program /usr/sbin/pam_auth acl password proxy_auth payam acl users src 192.168.1.0/255.255.252.0 http_access allow users http_access allow password Is here any problem with this configuration that IE can't get windows login when want to browsing? Thanks for your help, Payam __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

7 6

iptables on SuSE 7.3, webserver and our intranet
by Manfred Rebentisch 02 Apr '03

02 Apr '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, a customer of mine is using suse 7.3 and iptables v1.2.2. The iptables command are called direct, not with SuSEfirewall. Normally I use shorewall, I am not a specialist for iptables commands, I did not write the commands, but have to support them now. The server is an internet-webserver. Because of some attacs the firewall is important. There are a postfix E-Mail-Server and there are Websites on the Server. Accessing in no problem from the internet. BUT: from the intranet we cannot call the websites and load the E-Mails from the server. I think, it is not a DNS problem, but a firewall problem. With "iptables -t nat -L" I get (names changed for public) for PREROUTING - Chain: DNAT tcp -- anywhere linus.localnet.de tcp dpt:http to:172.21.85.11 DNAT tcp -- anywhere linus.localnet.de tcp dpt:domain to:172.21.85.11 DNAT udp -- anywhere linus.localnet.de udp dpt:domain to:172.21.85.11 DNAT tcp -- anywhere linus.localnet.de tcp dpt:smtp to:172.21.85.11 DNAT tcp -- anywhere linus.localnet.de tcp dpt:pop3 to:172.21.85.11 DNAT tcp -- 172.21.85.0/24 linus.localnet.de tcp dpt:http to:172.21.85.11:80 DNAT udp -- 172.21.85.0/24 linus.localnet.de udp dpt:http to:172.21.85.11:80 DNAT tcp -- anywhere linus.localnet.de tcp dpt:smakynet to:172.21.85.11:22 ((I did not now, what "smakynet" is)). The INPUT-Chain shows (here a part of all): ACCEPT tcp -- 172.21.85.0/24 linuso.localnet.de tcp dpt:http ACCEPT tcp -- 172.21.85.0/24 linus.localnet.de tcp dpt:http ACCEPT tcp -- 172.21.85.0/24 anywhere tcp dpt:http THe OUTPUT-Chain shows (a part too): ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:http Under the POSTROUTING I get: MASQUERADE all -- 172.21.85.0/24 anywhere Which iptables command is nessacary for getting access from the intranet (172.21.85.0) to the webserver (172.21.85.11)? Many thanks in advance. Manfred Rebentisch - -- COMPARAT Software-Entwicklungs-GmbH Mobile Voice Solutions Prießstr. 16, 23558 Lübeck Tel: 0451/479 56 60 http://www.comparat.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+iJ6c385pq8Zuir4RAqcMAKCLh4sTz72LgFxT6NxQY+PbfvCNhACfWkZY V7TJBaV80T5hFIlGRQvpfTw= =hdyt -----END PGP SIGNATURE-----

2 1

vsftpd (too secure for me)
by Mario Neubert 01 Apr '03

01 Apr '03

Hello list, does anyone know, how can I show dotted(hidden) files in a ftpclient. Users on my server with vsftpd should can access files like .htaccess. Thanks in advance Mario

3 5

OT? Some moderation, behaviour on this list...
by grobe＠gmx.net 31 Mar '03

31 Mar '03

Hi! I just want to ask if there is anybody out there feeling responsible for some kind of moderation here. The point is that I have asked one of the subscribers who is sending all messages to the list with high-priority-flag to change this setting, but instead of a reply, I still get these annoying "alerts". I do not know if there is something like a moderation here, and maybe I am the only person who doesn't like to get all these mails marked as "urgent" here. For me, on a security list, only urgent mails (e.g. newly found exploits etc) are to be marked like this. And I would really like to know how you see this and how to keep this list a useful ressource of information and discussion. I really don't want to set subscribers on my filters just because of technical issues. CU, Lars. -- +++ GMX - Mail, Messaging & more http://www.gmx.net +++ Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!

4 3

Re: [suse-security] SuSE Security Announcement: kernel (SuSE-SA:2003:021)
by Robert Schiele 31 Mar '03

31 Mar '03

On Mon, Mar 31, 2003 at 05:43:02PM +0200, tobiwan wrote: > -----BEGIN PGP SIGNED MESSAGE----- > > Hi Robert and List, > > one question again. In the case not having done a backup and want to ga back > to the unpatched kernel, is it sufficient to uninstall the patch via RPM and > do the mk_initrd && lilo? Just to be sure... No, you must reinstall the old one, i.e. fetch the RPM of the old one from the distribution CDs or whereever your old kernel was from and do # rpm -Uvh --oldpackage oldkernel.rpm Robert -- Robert Schiele Tel.: +49-621-181-2517 Dipl.-Wirtsch.informatiker mailto:rschiele@uni-mannheim.de

1 0

RE: [suse-security] SuSE Security Announcement: kernel (SuSE-SA:2003:021)
by Sebastian Stadtlich 31 Mar '03

31 Mar '03

> Do you have local access to the system or a serial console? > If yes, then just try it. If the kernel failed you can > immediatelly go back to the old kernel. So you at least > don't have a regression. Hi there could you explain the 'immediatelly go back' a little? My Server is a Suse 7.2 to which I don't have local access, but i can boot my server remote with a rescue-debian installation, that can access the Harddisc. Do you think that would be usefull when reboot fails? if so : which files do i need to backup, so that i can restore the old kernel without a running suse on the box? Any help appreciated, since i'm not used to update kernels on remote servers and i'm a little bit in fear that the reboot will fail. thanks Sebastian

5 4

RE: [suse-security] /etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

Thanks Armin, I reinstall the package, according to Togan there is no /etc/sysconfig on 7.3 and I have to use /etc/rc.config.d/firewall2.rc.config. After I did several setting to match our network. I still cannot ftp to the world from internal. How should i set this thing, on FW_MASQ_NETS? I want to let internal network to do icmp/ping and set FW_ALLOW_PING_INTERNET="yes" but still can not ping. Can you give me the clue. M. Edwin -----Original Message----- From: Armin Schoech [mailto:schoech@iap-kborn.de] Sent: Monday, March 31, 2003 2:17 PM To: suse-security(a)suse.com Subject: RE: [suse-security] /etc/sysconfig Hi ! > I downloaded a tar.gz file and then install it through the ./INSTALL > script. By the way I'm using 7.3 could you show me the right RPM where > i can dowload it. > --> What about: ftp.suse.com /pub/suse/i386/7.3/suse/sec1/SuSEfirewall2.rpm It might not be the most up-to-date version though. HTH, Armin -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

3 2

Please trim replies
by Martin Peikert 31 Mar '03

31 Mar '03

Hi, From focus-sun@securityfocus. -------- Original Message -------- Subject: Administrivia: Please trim replies Hi folks, Just a reminder to please trim replies. When responding, please include only the text to which you are responding, and preferrably put your responses below it, or inline. Not doing so is wasteful, inconsiderate to those on metered lines, and additionally it makes the list digest literally impossible to read. ----snip--- TIA GTi

1 0

RE: [suse-security] SuSE Security Announcement: kernel (SuSE-SA:2 003:021)
by Vaclav Brunnhofer 31 Mar '03

31 Mar '03

> > on a SuSE 8.0 installation with an ext3 root filesystem, the new kernel > > panics on boot, saying that can't access device 03:05 (the root filesystem > > is on /dev/hda5). The previous kernel did not exhibit this problem. The I have experienced the same problem with SuSE 7.3 - just in my case it was the disk 80:03 (sda3) . The computer boots only after I have changed the fstab entry to mount the root system as ext2 - now I have a warning that I am mounting an ext3 system as ext2, but at least the kernel is not in panic. I have exactly followed the update procedure, namely I have run mk_initrd and lilo (and both initrd files are now rebuilt). I had no problem when mounting the filesystem in Tiny floppy linux Tomsrtbt. I know that oficially ext3 was supported only in SuSE 8.0, but with the previous kernel (2.4.16) I had absolutely no problem. sincerely Vaclav Brunnhofer ___________________________________ NOCC, http://nocc.sourceforge.net

5 5

sendmail again..
by Sven 'Darkman' Michels 31 Mar '03

31 Mar '03

Happy Sunday... ;) just for those who doesn't know already: http://www.cert.org/advisories/CA-2003-12.html (yes, it's sendmail _again_)... regards, Sven

5 6

APCACCESS FATAL ERROR in apcaccess.c at line xxx with apcupsd-3.8.6-17
by Radu Voicu 31 Mar '03

31 Mar '03

Hi there! Could you please try the command "apcaccess status" on a SuSE 8.1 running apcupsd-3.8.6-17? Any hints about the error from the subject? P.S. I have two machines which generate this kind of error, and one where everything runs smoothly... Regards, Radu

1 0

RE: [suse-security] /etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

I downloaded a tar.gz file and then install it through the ./INSTALL script. By the way I'm using 7.3 could you show me the right RPM where i can dowload it. M. Edwin -----Original Message----- From: Armin Schoech [mailto:schoech@iap-kborn.de] Sent: Monday, March 31, 2003 1:07 PM To: suse-security(a)suse.com Subject: Re: [suse-security] /etc/sysconfig Hi ! > I read through the document from Togan Muftuoglu and found that the > configuration file for SuSEfirewall2 is on /etc/sysconfig, but after I > install the SuSEfirewall2 and reboot the machine there is no file on > there. Am I should create the file manually? > --> No, it should be there. How did you install SuSEfirewall2 ? If you used "rpm -U SuSEfirewall2.rpm", maybe you need to run "SuSEconfig" afterwards ? HTH, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech(a)iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50 -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

2 1

/etc/sysconfig
by M. Edwin 31 Mar '03

31 Mar '03

Hi all, I read through the document from Togan Muftuoglu and found that the configuration file for SuSEfirewall2 is on /etc/sysconfig, but after I install the SuSEfirewall2 and reboot the machine there is no file on there. Am I should create the file manually? a friend of me using iptables and he create iptables on sysconfig using "iptables-save > /etc/sysconfig/iptables", or actually we don't need the file only setting up the parameter on /etc/rc.config.d/firewall2.rc.config? Can anybody give the answer. TIA M. Edwin

2 1

Fou4s 0.9.0 released
by Markus Gaugusch 30 Mar '03

30 Mar '03

A new version of fou4s, my alternative implementation of YaST Online Update is out! Fou4s users should get it automatically tonight, everyone else may want to try it and download from http://fou4s.gaugusch.at/ . >From the Changelog: * ~ 50% speed improvement * Progress bar during checking * More graceful handling of dependency problems (only affected packages are not updated) * Interactive mode allows to show description of an update [d] * A logfile entry is written to /var/log/fou4s.log for each installed package. * SLES8 and SLOX4 support (testing needed, but should work) See the full changelog at http://fou4s.gaugusch.at/changelog.shtml for detailed information. Special Notes for this Release: * The UseFullPath option in fou4s.conf is now deprecated and will cause a warning. Just remove the line if you have set it manually. * On SuSE 8.1 two new packages will be found: ProOfficeInstallation and InstDB. These are scripts, which probably everyone will want to skip. (use "s" in interactive mode). The script support is a new feature of fou4s. kind regards, Markus Gaugusch PS: Users of business products are always welcome to tell me whether fou4s works for them. I have no business product available for personal testing. Especially the SLOX4 is interesting for me at the moment. PPS: This is not tested with SuSE 8.2, but I'll do as soon as possible! PPPS: If CheckFou4s is not set in fou4s.conf, fou4s cannot find updates of itself! -- __________________ /"\ Markus Gaugusch \ / ASCII Ribbon Campaign markus(a)gaugusch.at X Against HTML Mail / \

1 0

frees/WAN between a 8.0 and a 7.3 HOW??
by Mathias Homann 28 Mar '03

28 Mar '03

How do I setup a frees/wan tunnel between said suse versions? right now, I'm starting at the 8.0 machine, which utterly fails to compile the klips modules?!?! /usr/src/linux/include/linux/highmem.h: In function `bh_kmap': /usr/src/linux/include/linux/highmem.h:22: warning: pointer of type `void *' used in arithmetic ipsec_tunnel.c: In function `ipsec_tunnel_start_xmit': ipsec_tunnel.c:1730: too many arguments to function `ip_select_ident' make[2]: *** [ipsec_tunnel.o] Error 1 make[2]: Leaving directory `/usr/src/linux-2.4.18.SuSE/net/ipsec' that is the output of 'make -f Makefile.module' on my 8.0 box (with the latest kernel update from suse installed). bye, [MH] -- Die unaufgeforderte Zusendung einer Werbemail an Privatleute verstößt gegen §1 UWG und 823 I BGB (Beschluß des LG Berlin vom 2.8.1998 Az: 16 O 201/98). Jede kommerzielle Nutzung der übermittelten persönlichen Daten sowie deren Weitergabe an Dritte ist ausdrücklich untersagt! gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

1 0

How to handle usernames?
by lars 28 Mar '03

28 Mar '03

Hi there, I´ve got a strange behaviour which I want to get rid off ... though it may not be the right group here: on a suse linux 8.1 box, doing useradd -s /bin/false -d /... and-so-on ... b.richards to add a mailuseraccount, I always got the reply: invalid username The same with useradd -s /bin/false -d /... and-so-on b\.richards OK, then I´m typing ³useradd brichards², editing the /etc/passwd as well as /etc/shadow (e.g. setting in the dot manually), then typing in the password, but then ... the client sometimes gets an errormessage from postfix - sometimes it works fine. I found out that in case of unvalid usernames always almost a ³!² is shown in the second field in /etc/shadow-uservalue-lines (where there have to be the shadowed password). everything works fine with usernames without a dot. I tried hard to find some informations about this, but the only restriction valid for all shels seemed to be avoiding ³:² and ³/² in usernames. Anyone a suggestion? would be helpfull... thanx a lot! greetings Btw: how can I change the length of a password to a value higher than 8? Possible at all on a bash or tcsh?

6 5

AW: [suse-security] How to handle usernames?
by Manfred Pausch 28 Mar '03

28 Mar '03

hi radu, hi others, please don't send mails with "High-Important-Flag". some mails are not important... for me... thanx manfred -----Ursprüngliche Nachricht----- Von: Radu Voicu [mailto:suse@ploiesti.rdsnet.ro] Gesendet: Freitag, 28. März 2003 14:53 An: lars; suse-security(a)suse.com Betreff: Re: [suse-security] How to handle usernames? Wichtigkeit: Hoch Hi! I don't know about the osers, but about password length: Yast - security and users - custom - on the second screen you have the password length screen Regards, Radu ----- Original Message ----- From: "lars" <lars(a)brainlift.de> To: <suse-security(a)suse.com> Sent: Friday, March 28, 2003 3:33 PM Subject: [suse-security] How to handle usernames? Hi there, I´ve got a strange behaviour which I want to get rid off ... though it may not be the right group here: on a suse linux 8.1 box, doing useradd -s /bin/false -d /... and-so-on ... b.richards to add a mailuseraccount, I always got the reply: invalid username The same with useradd -s /bin/false -d /... and-so-on b\.richards OK, then I´m typing ³useradd brichards², editing the /etc/passwd as well as /etc/shadow (e.g. setting in the dot manually), then typing in the password, but then ... the client sometimes gets an errormessage from postfix - sometimes it works fine. I found out that in case of unvalid usernames always almost a ³!² is shown in the second field in /etc/shadow-uservalue-lines (where there have to be the shadowed password). everything works fine with usernames without a dot. I tried hard to find some informations about this, but the only restriction valid for all shels seemed to be avoiding ³:² and ³/² in usernames. Anyone a suggestion? would be helpfull... thanx a lot! greetings Btw: how can I change the length of a password to a value higher than 8? Possible at all on a bash or tcsh? -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here

1 0

RE: [suse-security] How to handle usernames?
by Ronny Martin 28 Mar '03

28 Mar '03

Can't help you on the usernames, but for the password length: enable md5 passes > -----Original Message----- > From: lars [mailto:lars@brainlift.de] > Sent: Friday, March 28, 2003 2:33 PM > To: suse-security(a)suse.com > Subject: [suse-security] How to handle usernames? > > > Hi there, > > I´ve got a strange behaviour which I want to get rid off ... > though it may > not be the right group here: > > on a suse linux 8.1 box, doing > > useradd -s /bin/false -d /... and-so-on ... b.richards > > to add a mailuseraccount, I always got the reply: > > invalid username > > The same with > > useradd -s /bin/false -d /... and-so-on b\.richards > > OK, then I´m typing ³useradd brichards², editing the > /etc/passwd as well as > /etc/shadow (e.g. setting in the dot manually), then typing > in the password, > but then ... the client sometimes gets an errormessage from postfix - > sometimes it works fine. > I found out that in case of unvalid usernames always almost a > ³!² is shown > in the second field in /etc/shadow-uservalue-lines (where > there have to be > the shadowed password). > > everything works fine with usernames without a dot. > > I tried hard to find some informations about this, but the > only restriction > valid for all shels seemed to be avoiding ³:² and ³/² in usernames. > > Anyone a suggestion? would be helpfull... thanx a lot! > > greetings > > Btw: how can I change the length of a password to a value > higher than 8? > Possible at all on a bash or tcsh? > >

2 1

New kernel and netstat 'problem'
by Sven 'Darkman' Michels 27 Mar '03

27 Mar '03

lo, anyone can confirm that netstat -p isn't working correctly on the new kernel? at least on 7.3. with 2.4.18 it doesn't work correctly: before: tcp 0 0 217.69.160.53:25 0.0.0.0:* LISTEN 27721/master after: tcp 0 0 217.69.160.53:25 0.0.0.0:* LISTEN 5877/ as you can see, the name of the process isn't displayed (but the pid, which is correct...) Regards, Sven

5 6

ptrace + kernel 2.2.19
by Volker Kuhlmann 27 Mar '03

27 Mar '03

The exploit sinuspl.net/ptrace/isec-ptrace-kmod-exploit.c works on the last version of 2.2.19 released by SuSE. The reason I am still running this kernel on one machine (with SuSE 8.0) is that it contains a biggy SiS chipset for which 2.4.19 has a workaround, but that workaround was removed again from all 2.4 kernels up to at least 2.4.16. For the record, the kernel update installed without a hitch on 3 different 8.1 machines by a simple rpm -Uvh. Even mk_initrd was completely automagic. People who use binary-only kernel drivers must expect these to break with each kernel change. The SuSE-supplied vmware modules crash vmware 2.0.4 (sorry but vmware went beyond anything acceptable for upgrade prices), but the latest patches to the module source and a recompile of that fixed that. Now vmware panics again on power-up, guess I just have to recompile the modules again (come to think of it, the kernel update will have overwitten the ones I compiled). Volker -- Volker Kuhlmann is possibly list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me.

2 1