September 2003 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] Bind update denied
by Peer Stefan 08 Sep '03

08 Sep '03

Hi > From: João Reis [mailto:joao.reis@2000comp.pt] > Hi to all. > > In my log it apears several lines which indicate that for a specific > host (192.168.1.12) the named daemon had denied an update. > > This is the message which appears in the messages file: > > /usr/sbin/named[438]: client 192.168.1.12#3357 : update denied > > I have several clients getting dns info to the DNS server and > only this > client shows this problem. > > Any suggestions how to fix this? > Does anyone knows what is the problem or how to read more about it ? Is there an "allow update" section which includes 192.168.1.12? Or do you use authentication? If so, is the secret set correctly? > Thanks in advance. cheers, Stefan > Joao Reis

1 0

Bind update denied
by João Reis 08 Sep '03

08 Sep '03

Hi to all. In my log it apears several lines which indicate that for a specific host (192.168.1.12) the named daemon had denied an update. This is the message which appears in the messages file: /usr/sbin/named[438]: client 192.168.1.12#3357 : update denied I have several clients getting dns info to the DNS server and only this client shows this problem. Any suggestions how to fix this? Does anyone knows what is the problem or how to read more about it ? Thanks in advance. Joao Reis ==========================================================

2 1

SE Linux packages for SuSE 8.2
by Paul Dwerryhouse 08 Sep '03

08 Sep '03

Hi all, In case anyone is here interested, I've build a bunch of RPMs of the new 2.4-based (ie, 2.6 backport) SE Linux, for SuSE 8.2: http://leapster.org/linux/selinux/suse/ In some cases (checkpolicy, libselinux, policy, policycoreutils and selinux-doc), the packages are straight RPM builds of the supplied files on the SE Linux download page. In others, I've backported the supplied patches so that they cleanly compile against the SRPM packages made by SuSE, and in a couple of cases have used patches that were used to make SE Linux packages work under Debian. SRPM files are provided also. There's no kernel there yet, so you'll still need to download the patches for this from http://www.nsa.gov/selinux/ and compile it yourself. I hope to have a fairly generic SELinux-enabled i386 kernel available sometime this week. My testing hasn't been particularly thorough yet: it all works fine for me, but beware ;) If anyone has any comments or suggestions, feel free to let me know. Cheers, Paul. -- Paul Dwerryhouse | PGP Key ID: Amsterdam, The Netherlands (X) <-> Melbourne, Australia ( ) | 0x6B91B584

1 0

bootp and fw2 Problem
by MichaelHoeller＠t-online.de 07 Sep '03

07 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, first I have to commit that I am very new in security issues, thought I read quit a bit I am more confused than before... I hope that you can point me to the right direction and provide some hints :-)) Here is what I have: A local server and 10 X Terminals they get the kernel via bootp and tftp and mount some directories via nfs. The little net has only one link to the bad world: via dialup (isdn) mail is brought in as pop3 and the www is used. Also a dialin / callback connection is possible, there I need ssh and ftp. Unfortunately I was not able to set up the fw2 so that all works, right now I have dropped all - so there is no fw. (This is a test system with no productive data but this should change soon). So can someone help me to setup the fw and provide some tips so that I can help myself in the future ??? Thanks a lot Michael - -- Encrypted eMail welcome! Get my OpenPGP-Key ID: 0xE9B00731 from: wwwkeys.de.pgp.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8DBQE/W5saTWKNEOmwBzERAuzHAJ9Pp05Jd3/+zrn8ie5n9sf/oDlInQCg1DN7 xKH9HqksVWdFscy8/ha7SNc= =XPt0 -----END PGP SIGNATURE-----

1 0

Re: [suse-security] KDE hard drive icon setup for new accounts (susewatcher)
by m3047＠inwa.net 07 Sep '03

07 Sep '03

I wrote: >I can't seem to make KDE not set up drive icons for new accounts in SuSE >8.2. All /dev/hd get icons, even ones which are noauto (and without user or >users). > >[...] > >Can somebody tell me where those drive icons are coming from? It appears to be a side effect of susewatcher... -- Fred Morris m3047(a)inwa.net

1 0

KDE hard drive icon setup for new accounts (hwSuSEkicker?)
by m3047＠inwa.net 07 Sep '03

07 Sep '03

I can't seem to make KDE not set up drive icons for new accounts in SuSE 8.2. All /dev/hd get icons, even ones which are noauto (and without user or users). Tried the scorched earth approach of removing the MOUNTPOINT loops in /opt/kde3/bin/startkde.theme in create_default_desktop but no joy. The cryptic reference therein to hwSuSEkicker has led nowhere, can't find hwsusekickerrc anywhere even doing a find / -name 'hwsusekickerrc' as root. Can somebody tell me where those drive icons are coming from? -- Fred Morris m3047(a)inwa.net

1 0

TARPIT & SuSE
by Gustavo Muslera 06 Sep '03

06 Sep '03

I saw that from some time iptables have a TARPIT rule, useful for slowing down port/vulnerabilities scans, virus tries and things like that, but, how safe or stable is it to activate it by default for anything not enabled earlier? Including it in SuSEFirewall or other firewalls don't look hard, for SuSE firewall look like just putting it in the SuSEFirewall2-custom (probably in the fw_custom_before_denyall) will do the work, but, the support of that rule is not in the bundled iptables (at least, not in the 8.2 one), what is the best way to upgrade it? (of course, if its safe to enable it)

1 0

RE: Installing iptables 1.2.8 in a SUSE 8.1
by Fried Melgar, Gustavo 05 Sep '03

05 Sep '03

Hi all, I want to upgrade my SUSE 8.1 (with 2.4.19 kernel) from iptables 1.2.7 to iptableas 1.2.8. But also I want to install some patches to the kernel (kernel-source-2.4.19.SuSE-340.i586.patch.rpm ) I don't know in which order I have to do that. Do I have to install the SUSE's patch first, then iptables 1.2.8 and at last patch-o-matic? Is this the right order to install this patches? Do I need to install patch-o-matic-20030107 (I don't need extra options) Do I have to recompile the kernel each time I modify the kernel source or can I recompile it at the end? Do you have any other suggestions for this task? Best regards and thank you in advance, Gustavo

1 0

confirm subscribe to suse-security-announce@suse.com
by Fried Melgar, Gustavo 05 Sep '03

05 Sep '03

Hi! This is the ezmlm program. I'm managing the suse-security-announce(a)suse.com mailing list. I'm working for my owner, who can be reached at suse-security-announce-owner(a)suse.com. To confirm that you would like gfried(a)ute.com.uy added to the suse-security-announce mailing list, please send an empty reply to this address: suse-security-announce-sc.1062783158.iojdggpfjelhjkmldalp-gfried=ute.com.uy(a)suse.com Usually, this happens when you just hit the "reply" button. If this does not work, simply copy the address and paste it into the "To:" field of a new message. This confirmation serves two purposes. First, it verifies that I am able to get mail through to you. Second, it protects you in case someone forges a subscription request in your name. --- Administrative commands for the suse-security-announce list --- I can handle administrative requests automatically. Please do not send them to the list address! Instead, send your message to the correct command address: For help and a description of available commands, send a message to: <suse-security-announce-help(a)suse.com> To subscribe to the list, send a message to: <suse-security-announce-subscribe(a)suse.com> To remove your address from the list, just send a message to the address in the ``List-Unsubscribe'' header of any list message. If you haven't changed addresses since subscribing, you can also send a message to: <suse-security-announce-unsubscribe(a)suse.com> For addition or removal of addresses, I'll send a confirmation message to that address. When you receive it, simply reply to it to complete the transaction. If you need to get in touch with the human owner of this list, please send a message to: <suse-security-announce-owner(a)suse.com> Please include a FORWARDED list message with ALL HEADERS intact to make it easier to help you. --- Enclosed is a copy of the request I received. Return-Path: <gfried(a)ute.com.uy> Received: (qmail 15627 invoked from network); 5 Sep 2003 17:32:37 -0000 Received: from ns.suse.de (HELO Cantor.suse.de) (195.135.220.2) by 0 with SMTP; 5 Sep 2003 17:32:37 -0000 Received: from Hermes.suse.de (Hermes.suse.de [195.135.221.8]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by Cantor.suse.de (Postfix) with ESMTP id 243C115B1B45 for <suse-security-announce-subscribe(a)lists.suse.com>; Fri, 5 Sep 2003 19:32:37 +0200 (CEST) Received: from Cantor.suse.de (ns.suse.de [195.135.220.2]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by Hermes.suse.de (Postfix) with ESMTP id ADF0D8137 for <suse-security-announce-subscribe(a)suse.com>; Fri, 5 Sep 2003 19:32:36 +0200 (CEST) Received: from turing.suse.de (Turing.suse.de [195.135.220.3]) by Cantor.suse.de (Postfix) with ESMTP id ED3D815B201F for <suse-security-announce-subscribe(a)suse.com>; Fri, 5 Sep 2003 19:30:22 +0200 (CEST) Date: Fri, 5 Sep 2003 19:30:22 +0200 From: gfried(a)ute.com.uy Message-Id: <200309051730.h85HUMu09816(a)turing.suse.de> To: undisclosed-recipients: ;

2 1

Linux (&Windows) Virus information
by Keith Roberts 04 Sep '03

04 Sep '03

HI all on list! found this interesting link, with lots of virus info on it! http://www.sophos.com/virusinfo/ You can click on the search box, in the top LH corner, to take you to a search form. Enter linux for your search, and virus information links pertaining to linux viruses will come up. There are some interesting descriptions of how the various viruses work, and the steps to take to eradicate them. Maybe of interest to someone on this list! Kind regards - Keith Roberts

1 0