April 2003 - openSUSE Security - openSUSE Mailing Lists

Problems with kernel update on 7.3
by Andreas Otto 14 Apr '03

14 Apr '03

Hi, about two weeks ago I updated the kernel on a server that runs on SuSE 7.3 to k_deflt-2.4.18-262.i386.rpm. Since that time some things don't seem to work like they should, e. g. wget can't create a connection to http://ftp.gwdg.de/pub... this means that fou4s is not working correctly. The nightly cron job for fou4s spits out: Warning: wget error 1 Warning: wget error 1 (patches.cont) And I don't seem to be able to sync the time of the server using ntpdate: 14 Apr 00:15:08 ntpdate[8872]: no server suitable for synchronization found And this did not happen because the time server was down ;-) Did anyone else encounter strange problems after the recent recommended kernel update? Cheers, Andreas -- Andreas Otto <andreas(a)php4win.de> Using PHP on Windows? www.php4win.de

5 4

connection between freeswan and ipsec-solaris
by Ralf Farke 14 Apr '03

14 Apr '03

Hi, I have a network with some Linux-Clients and a Linux-Server which provides nis and nfs. For security all network connections uses the freeswan ipsec implementation. The server is protected with iptables and drops all incomin traffic, only ipsecure is accept. But know i have Solaris 8 Client which needs connect to the Linux server and clients. Ipsec ist supportet since Solaris 8. Could somebody give me Information how to configure this solaris client? Thanks a lot, Ralf Farke

1 0

k_deflt-2.4.18-262 and Legato Networker -> system is dead
by Ralf Gross 14 Apr '03

14 Apr '03

Hi, last monday I updated the kernel of our Suse Linux 7.3 server (k_deflt-2.4.18-262.i386.rpm, compaq DL380). After that, the server died every night, just after Leagato Networker backup software contaced the server. I can't see anything useful in the logs. The last entry in /var/log/messages is at 22:59h, the backup beginns at 2300h. The first night the server died, Legato was able so backup some stuff, but died at 2320h. I could ping the machine and got a connect on port 22 (ssh), but no ssh-banner or anything else. I had to reset the machine. I used a tool called stress to test the server. I generated a load of 10 for about 1h - no problem. I also used this tool, and bonnie, to stress the hard disks - no problem. Then, I fall back to the original kernel that came with 7.3. Now everything works normal again. Any ideas what went wrong? Ralf

2 1

Kernel Panic after Security Update
by Stefan Proels 14 Apr '03

14 Apr '03

Hello, after installing the latest kernel update for the ptrace security issue on a SuSE 8.0 system, the new kernels panics while booting with the message "VFS: unable to mount root fs". My possibilities to analyze this problem are very limited since the system in question is an important 24x7 production system to which I only have remote access and when the system fails to boot this can only be fixed with the help of a local engineer. This is why I'm asking this list if anyone has experienced this problem before and possibly even has a solution for it. As a note, the new kernel works fine on two SuSE 7.1 systems. Some information on the system: SuSE 8.0, SuSE SMP Kernel 2.4.18-64GB-SMP for 2 P-III CPUs, 1 GB RAM, 2 SCSI drives with Adaptec SCSI controller. Root-Filesystem is ext3 INITRD_MODULES="aic7xxx usbcore jbd ext3" Bootloader lilo mk_initrd und lilo after installation of the new kernel ran without any error messages. After re-installing the old SuSE 2.4.18 Kernel with the security leak the systems boots up fine again. Thanks in advance Stefan

10 11

Weekly-check: Is this normal ?
by Gunther Stammwitz 14 Apr '03

14 Apr '03

Hello List, I've just received the weekly-check-report from one of my servers running suse 8.0 There's a very annying message because a file called "." has been changed. Do you think this is normal or did a hacker start installing rootkits ? Greetings, Gunther SuSE weekly security check v2.0 by Marc Heuse <marc(a)suse.de> This is an automated mail by the seccheck tool. If you want to disable this service, just type "mv /etc/cron.d/seccheck /etc/cron.d_seccheck.save". DISCLAIMER Please note that these security checks are neither complete nor reliable. Any attacker with proper experience and root access to your system can deceive *any* security check! [..] Please check and perhaps disable the following unused accounts: The following files are suid/sgid: - drwx------ 7 root root 4096 Tue Dec 31 15:28:17 2002 . + drwx------ 7 root root 4096 Sat Apr 12 15:30:15 2003 . The following program executables are group/world writeable: - drwx------ 7 root root 4096 Tue Dec 31 15:28:17 2002 . + drwx------ 7 root root 4096 Sat Apr 12 15:30:15 2003 . The following devices were added: - drwx------ root root 4096 Dec + drwx------ root root 4096 Apr

3 2

[suse-security] Making an iptables firewall?
by Trey 13 Apr '03

13 Apr '03

I have a pc I am setting up as a firewall for my LAN at work. I have installed two NIC's & suse8.1 on it I read in a HOWTO that for me to "netfilter" with iptables, making my firewall I hade to compile this file I downloaded "bridge-nf-0.0.7-against-2.4.19.diff." The howto was very generic, & not suse specific. Is this true? Or can I use Yast to get the same results? Thanks, -Trey

4 4

SVCDs kopieren - sorry for german ot - wrong To: :(
by Max Lindner 13 Apr '03

13 Apr '03

please forget this email, i sent this email accidently to the suse-security :( should be on another list, so there's no need to answer ;) just forget it, this never happens ;) Greetings, Max On Sun, 13 Apr 2003, Michael Meyer wrote: > Max Lindner wrote: > > Ich habe versucht, unter Linux eine svcd zu kopieren. Leider erfolglos. > > 1. suse-security ist eine englischsprachige liste > 2. das brennen von (s)vcd ist absolut offtopic > 3. suse-multimedia existiert. > > aber das nur am rande ... > > schaue dir 'http://www.linux-fuer-alle.de/doc_show.php?docid=95' an. > das sollte alle deine fragen zum kopieren beantworten. > > micha >

1 0

SVCDs kopieren
by Max Lindner 13 Apr '03

13 Apr '03

Hallo! Ich habe versucht, unter Linux eine svcd zu kopieren. Leider erfolglos. Ich scheitere schon beim auslesen. Es ist egal, auf welche Art und Weise ich es probiere, ich scheitere immer an einem Input/Output - Error :( Hier mal die Ausgabe von readcd: # readcd -f test dev=0,0 readcd: Input/output error. set cd speed: scsi sendcmd: no error CDB: BB 00 FF FF FF FF 00 00 00 00 00 00 status: 0x2 (CHECK CONDITION) Sense Bytes: 70 00 02 00 00 00 00 0A 00 00 00 00 04 01 00 00 Sense Key: 0x2 Not Ready, Segment 0 Sense Code: 0x04 Qual 0x01 (logical unit is in process of becoming ready) Fru 0x 0 Sense flags: Blk 0 (not valid) cmd finished after 0.000s timeout 40s Read speed: 0 kB/s (CD 0x, DVD 0x). Write speed: 0 kB/s (CD 0x, DVD 0x). Capacity: 352012 Blocks = 704024 kBytes = 687 MBytes = 720 prMB Sectorsize: 2048 Bytes Copy from SCSI (0,0,0) disk to file 'test' end: 352012 readcd: Input/output error. read_g1: scsi sendcmd: no error CDB: 28 00 00 00 01 00 00 00 80 00 status: 0x2 (CHECK CONDITION) Sense Bytes: 70 00 05 00 00 00 00 0A 00 00 00 00 64 00 00 00 Sense Key: 0x5 Illegal Request, Segment 0 Sense Code: 0x64 Qual 0x00 (illegal mode for this track) Fru 0x0 Sense flags: Blk 0 (not valid) cmd finished after 0.008s timeout 40s readcd: Input/output error. Cannot read source disk readcd: Retrying from sector 256. .~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~+~~~-~~~ readcd: Input/output error. Error on sector 256 not corrected. Total of 1 errors. Time total: 62.997sec Read 512.00 kB at 8.1 kB/sec. Selbiges auch, wenn ich versuche, die mpeg-Datei von der gemounteten CD runterzukopieren. Und was mich am meisten wurmt: Mit windows geht das alles hervorragend :/ Da einige von euch doch Filmfreaks sind, hoffe ich mal, dass ihr mir auf die Sprünge helfen könnt. Gruß, Max

1 0

RE: [suse-security] Windows versus linux
by Filip Pistovcak 13 Apr '03

13 Apr '03

> > Security and linux is a very new theme for me. Last time a read a german > > written article of Microsoft about linux versus windows systems > (security, > > costs, firewalls, ..). Now I want some feedbacks/arguments of interested > > professional linux users and their experience maybe in companies versus > the > > Microsoft opinion in this *.pdf (1,4MB) file. > > > > Link: > > http://plexus.shacknet.nu/downz/linux_partner_brosch.pdf > > > > It would be nice to get some answers. Hi, You can look at http://www.aaxnet.com/editor/edit029.html Little bit long, but good. Regards, Filip Pistovcak

1 0

Services (not) needed/secure?/ How to disable?
by Markus 13 Apr '03

13 Apr '03

Hi, the following services are running on my machine: 111/tcp => portmap (user: bin) 111/udp => portmap (user: bin) 113/tcp => in.identd (user: nobody) 515/tcp => lpd (user: root+) 6000/tcp => X (user: root) Now my questions: Is any of them insecure? Are they required for the system or can I disable them? If X is not required, where have I to change sth that it will no longer listen on port 6000? Whats the general task of portmap and identd? thx Markus

4 3