July 2003 - openSUSE Security - openSUSE Mailing Lists

Linux Security Modules
by Thomas Jones 02 Jul '03

02 Jul '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, Has anyone implemented LSM into a SuSE box as of yet? I tried a quick text search through the last 6 months or so of the list archive, but found no instance of this topic. I am particularly interested in utilizing the SELinux module. Possibly LIDS as well. Thanks. - -- Thomas Jones Linux-Howtos Network Administrator OpenGPG Key: 0x6A3DF6E9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8DBQE+/wkhQT2komo99ukRAhPUAKDGaNz1YDeRPsFGjxjDaqSkWMhL5QCeIsu2 P0uUg9SAwFVf/tNwngn2e3k= =hUnf -----END PGP SIGNATURE-----

2 1

AW: [suse-security] Bastille for SuSE
by Junge, Stefan 02 Jul '03

02 Jul '03

-----Ursprüngliche Nachricht----- > Von: Nigel Gaylard [mailto:nigel.gaylard@microwavedesigns.com] > Gesendet: Dienstag, 1. Juli 2003 20:56 > An: Junge, Stefan > Betreff: RE: [suse-security] Bastille for SuSE > > > Hi Stefan > > I am sorry to bother you. Please could you tell me how you > got Bastille to > work. I tried using the copy on the 8.1 distro but even as SU > I can't find a > "bastille" command only "bastillebackend" and > "automatebastille" (Maybe I > missed it in your german conversation?) > > Regards > > Nigel Gaylard >> Hi Nigel, >> you do not bother me. I have had the same problem with my SuSE 8.1. >> My solution is to deinstall Bastille shipped with the distribution and get it from >> http://www.bastille-linux.org. >> Try the binaries. Unpack them and start ./bastille in the directory where you have unpacked them. >> ./InteractiveBastille seems to work, too. >> CU >> Stefan > -- > Check the headers for your unsubscription address > For additional commands, e-mail: suse-security-help(a)suse.com > Security-related bug reports go to security(a)suse.de, not here > > >

6 5

Yast problem after upgrade to suse 8.1
by Wouter 02 Jul '03

02 Jul '03

Hi, I`m not sure if i can ask it in this mailing list. But i think is a bit security related. If have upgrade form suse 8.0 to 8.1 only i have now a problem whit Yast. When i will do a online upgrade he try to download the packages but he cant. and say after trying donload failed. There is one package the he wil download yast2-packagemanager-1 (You) I have installed the follow packages: yast2-packager 2.6.63 yast2-packagesmanager 2.6.36 Someone know how to fix this ? But it dont workl her is something form my log. 2003-07-02 15:04:23 <3> phyton(30504) [YCP] clients/online_update_start.ycp:51 Get Servers: 2003-07-02 15:04:23 <3> phyton(30504) [Interpreter] clients/online_update_start.ycp:67 [WFM] Undeclared variable num 2003-07-02 15:04:23 <3> phyton(30504) [Interpreter] clients/online_update_start.ycp:67 Wrong args for nlocale 2003-07-02 15:04:45 <1> phyton(30504) [mediaaccess] MediaHandler.cc(MediaHandler):112 http://ftp.leo.org/download/pub/comp/os/unix/linux/suse/susenot attached; localRoot /var/lib/YaST2/you" 2003-07-02 15:04:48 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:04:50 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:04:55 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:04:55 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:04:59 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:05:05 <0> phyton(30504) [mediaaccess] MediaWget.cc(getFile):125 wget error: file not found 2003-07-02 15:05:06 <0> phyton(30504) [mediaaccess] MediaHandler.cc(release):180 ok 2003-07-02 15:05:06 <1> phyton(30504) [Interpreter] clients/online_update.ycp:500 Calling YCP function module clients/online_update_install.y$ 2003-07-02 15:05:08 <1> phyton(30504) [mediaaccess] MediaHandler.cc(MediaHandler):112 http://ftp.leo.org/download/pub/comp/os/unix/linux/suse$ 2003-07-02 15:05:09 <0> phyton(30504) [packagemanager] RpmDb.cc(checkPackage):1142 rpm command: rpm --checksig /var/lib/YaST2/you/i386/updat$ 2003-07-02 15:05:10 <3> phyton(30504) [YCP] clients/online_update_install.ycp:106 YouGetCurrentPatch Error: ERROR(You:error) 2003-07-02 15:05:32 <1> phyton(30504) [ui-ncurses] Y2NCursesUIComponent.cc(result):80 Shutdown Y2NCursesUI... 2003-07-02 15:05:32 <1> phyton(30504) [ui-ncurses] NCurses.cc(NCurses):145 Shutdown NCurses... 2003-07-02 15:05:32 <1> phyton(30504) [ui-ncurses] NCurses.cc(NCurses):154 NCurses down 2003-07-02 15:05:32 <1> phyton(30504) [ui-ncurses] Y2NCursesUIComponent.cc(result):82 Y2NCursesUI down 2003-07-02 15:05:32 <1> phyton(30504) [ui-ncurses] Y2NCursesUIComponent.cc(Y2NCursesUIComponent):42 Stop Y2NCursesUIComponent 2003-07-02 15:05:32 <1> phyton(30504) [liby2] genericfrontend.cc(main):355 Finished YaST2 component 'y2base'

2 1

Running tasks
by Markus Schwaiger 02 Jul '03

02 Jul '03

In the last days our server sometimes runs with full load for 15-30' and I have absolutely no idea why. At Windows I would start the task manager and order by CPU load or memory consumption to find the reason - but how can I do something similar e.g. using the ps-command? Thank you for your help! Markus

3 2

Group IDs
by João Reis 01 Jul '03

01 Jul '03

Hi to all! I added a user called xpto. I changed the user id to 521 and its group id to 106. When i log on and create a directory or a file the group ownership stays with the id of the group 'users' instead of having the groupid '106'. What is wrong ? I checked the passwd and the user xpto has an id 521 and group id 106. I also checked the group file and everything looks fine. Any help ? Thanks in advance. João Reis -------------------------------------------------------

2 1

AW: [suse-security] Running tasks
by Michael Rauter 01 Jul '03

01 Jul '03

> > In the last days our server sometimes runs with full load for > 15-30' and I > have absolutely no idea why. At Windows I would start the > task manager and > order by CPU load or memory consumption to find the reason - > but how can I > do something similar e.g. using the ps-command? use the top-command Michael

1 0

AW: AW: AW: [suse-security] Bastille for SuSE
by Junge, Stefan 01 Jul '03

01 Jul '03

Hello list, thank you for HELP - bastille works - problem solved. CU Stefan

1 0

AW: AW: [suse-security] Bastille for SuSE
by Junge, Stefan 01 Jul '03

01 Jul '03

> -----Ursprüngliche Nachricht----- > Von: Martin Peikert [mailto:lists@nolog.org] > Gesendet: Dienstag, 1. Juli 2003 15:19 > An: Junge, Stefan > Betreff: Re: AW: [suse-security] Bastille for SuSE > > > Hello, > > Junge, Stefan wrote: > > Hi Lars, > > erstens: Warum antwortest Du auf eine Mail an Dich an die > Liste ohne den > Grund dafür anzugeben? War ein versehen, sorry ... > > > Ok, compiling is not the problem ... > > but I prefer rpm packages. > > Zweitens: Wenn Du RPMs bevorzugst (die es scheinbar für Deine > Lieblingsdistribution nicht gibt), dann lerne, Deine eigenen > RPM Pakete > zu bauen. > Danke... kann schon selber welche bauen :-) > > Is bastille only for X (Gui) ? > > Wenn Du das nicht weisst, warum willst Du dann bastille überhaupt > installieren? Hast Du die FAQ gelesen? > > >> [ Text Oben - Full quote Unten -- das nennt man TOFU ] > > Und bitte: http://learn.to/quote > > GTi > > War etwas unter Zeitdruck, deshalb habe ich die FAQ nur überflogen. Will mich bessern .... stefan

1 0

AW: [suse-security] Bastille for SuSE
by Junge, Stefan 01 Jul '03

01 Jul '03

Hi Lars, Ok, compiling is not the problem ... but I prefer rpm packages. Is bastille only for X (Gui) ? My servers have not X-Servers.. Mit freundlichen Grüßen Stefan > -----Ursprüngliche Nachricht----- > Von: lars [mailto:lars@brainlift.de] > Gesendet: Dienstag, 1. Juli 2003 14:42 > An: Junge, Stefan > Betreff: Re: [suse-security] Bastille for SuSE > > > Hi, > > > What about SuSE ? > > Can I use the rpm packages for Red-Hat, too ? > > > yes, you should be able to. > > but why not install / compile it by yourself? > > c u > > lars > > -- > > http://www.ruebenschweine.de > Try also: http://www.warzenpower.de +++ > http://www.lars-und-sandra.de +++ > http://www.r100rt.de > > Diese email wurde automatisch generiert, Sie können deshalb > nicht darauf > antworten; > > webmaster(a)warzenpower.de >

1 0

Bastille for SuSE
by Junge, Stefan 01 Jul '03

01 Jul '03

Hello, I have used harden_suse in the past. Since SuSE 8.2 harden_suse is missing. No I would like to try Bastille from http://www.bastille-linux.org. But I only found Downloads for Mandrake, HP-UX, Mac OS X. What about SuSE ? Can I use the rpm packages for Red-Hat, too ? Stefan

1 0