August 2005 - openSUSE Security - openSUSE Mailing Lists

Re: [OT] SUSE Linux will be Opened
by Charles philip Chan 03 Aug '05

03 Aug '05

On 3 Aug 2005, joe(a)tmsusa.com wrote: > Yes, the shrink wrapped boxed set will continue to be sold, for those who > like nice CD/DVD sets, thick manuals, and support - but they will also offer > the free (speech, beer) download for those who prefer to go that route. Yes, this is certainly the best of both worlds. Charles -- Linux: Because a PC is a terrible thing to waste. (By komarimf(a)craft.camp.clarkson.edu, Mark Komarinski)

1 0

Re: [OT] SUSE Linux will be Opened
by Charles philip Chan 03 Aug '05

03 Aug '05

On 3 Aug 2005, red.kryptonite(a)gmail.com wrote: On 8/2/05, Charles philip Chan <cpchan(a)sympatico.ca> wrote: > > Sounds great. Now I hope someone writes an applet which lets a user > switch networks on the fly from config files they've setup.. something > similar to what OS X lets the user do. Yes, this is a *must* for mobile users. Charles -- "Whip me. Beat me. Make me maintain AIX." (By Stephan Zielinski)

1 0

Xvnc configuration for SuSE 9.2
by R Hannes Beinert 02 Aug '05

02 Aug '05

Hello! I was having trouble getting a vnc connection to my SuSE v9.2 box, and ultimately resolved the problem by modifying the xinetd configuration file in /etc/xinetd.d/vnc to specify that the xvnc server execute as user=root instead of the original distro specification of user=nobody. It seems to me that regardless of which window manager is forked from xvnc, it would need root privilege -- I can't see how the originally shipped configuration file would work. Given that I would like to use VNC, is this a reasonable configuration from a security perspective? Is there a preferred configuration? Thanks! Hannes. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 2

RE: [suse-security] Martian problems
by THORNTON Simon 02 Aug '05

02 Aug '05

Hi, (minor update) See /usr/src/linux/Documentation/networking/ip-sysctl.txt for an explanation of parameters that can be set for networking, specifically "log_martians". The current settings can be found by typing (as root): sysctl -a | grep martian (if there multiple interfaces their will be an entry for each one net.ipv4.conf.XXXXX.log_martians plus the "default" and "all"). Two way to implement this: 1. From the command line (needs to be re-done each time you reboot): echo 0 >/proc/sys/net/ipv4/conf/all/log_martians echo 0 >/proc/sys/net/ipv4/conf/default/log_martians echo 0 >/proc/sys/net/ipv4/conf/eth1/log_martians 2. Automatically at startup, by editing /etc/sysctl.conf and adding: net.ipv4.conf.default.log_martians = 0 net.ipv4.conf.all.log_martians = 0 To activate the changes without rebooting type: /etc/rc.d/boot.sysctl start echo 0 >/proc/sys/net/ipv4/conf/eth1/log_martians The latter echo is necessary without a reboot as the default setting will only apply when an inteface is brought up. Rgds, Simon -----Original Message----- From: Tarjei Huse [mailto:tarjei+a_lists.suse@nu.no] Sent: Tuesday, August 02, 2005 12:57 To: suse-security(a)suse.com Subject: [suse-security] Martian problems Hi, I'm having problems with a SuSE 9.2 box. The box is set up with two interfaces on the same subnet. The interfaces has been set up as normal with static ip's 10.9.1.3, 10.9.1.2 , netmask 255.255.255.0 and broadcast 10.9.1.255. I'm getting errormessages saying Aug 2 12:33:41 mail2 kernel: martian source 10.9.1.255 from 10.9.1.3, on dev eth1 Aug 2 12:33:41 mail2 kernel: ll header: ff:ff:ff:ff:ff:ff:00:c0:9f:2c:2d:f7:08:00 Is this related to the usage of two nics on the same subnet? If so, is there a way to solve this? It seems the martians are stopping cups from doing broadcasts. Kind regards, Tarjei

1 0

RE: [suse-security] Martian problems
by THORNTON Simon 02 Aug '05

02 Aug '05

Hi, See /usr/src/linux/Documentation/networking/ip-sysctl.txt for an explanation of parameters that can be set for networking, specifically "log_martians". The current settings can be found by typing (as root): sysctl -a | grep martian (if there multiple interfaces their will be an entry for each one net.ipv4.conf.XXXXX.log_martians plus the "default" and "all" Two way to implement this: 1. From the command line (needs to be re-done each time you reboot): echo 0 >/proc/sys/net/ipv4/conf/all/log_martians echo 0 >/proc/sys/net/ipv4/conf/default/log_martians 2. Automatically at startup, by editing /etc/sysctl.conf and adding: net.ipv4.conf.default.log_martians = 0 net.ipv4.conf.all.log_martians = 0 To activate the changes without rebooting type: /etc/rc.d/boot.sysctl start Rgds, Simon -----Original Message----- From: Tarjei Huse [mailto:tarjei+a_lists.suse@nu.no] Sent: Tuesday, August 02, 2005 12:57 To: suse-security(a)suse.com Subject: [suse-security] Martian problems Hi, I'm having problems with a SuSE 9.2 box. The box is set up with two interfaces on the same subnet. The interfaces has been set up as normal with static ip's 10.9.1.3, 10.9.1.2 , netmask 255.255.255.0 and broadcast 10.9.1.255. I'm getting errormessages saying Aug 2 12:33:41 mail2 kernel: martian source 10.9.1.255 from 10.9.1.3, on dev eth1 Aug 2 12:33:41 mail2 kernel: ll header: ff:ff:ff:ff:ff:ff:00:c0:9f:2c:2d:f7:08:00 Is this related to the usage of two nics on the same subnet? If so, is there a way to solve this? It seems the martians are stopping cups from doing broadcasts. Kind regards, Tarjei

1 0

Martian problems
by Tarjei Huse 02 Aug '05

02 Aug '05

Hi, I'm having problems with a SuSE 9.2 box. The box is set up with two interfaces on the same subnet. The interfaces has been set up as normal with static ip's 10.9.1.3, 10.9.1.2 , netmask 255.255.255.0 and broadcast 10.9.1.255. I'm getting errormessages saying Aug 2 12:33:41 mail2 kernel: martian source 10.9.1.255 from 10.9.1.3, on dev eth1 Aug 2 12:33:41 mail2 kernel: ll header: ff:ff:ff:ff:ff:ff:00:c0:9f:2c:2d:f7:08:00 Is this related to the usage of two nics on the same subnet? If so, is there a way to solve this? It seems the martians are stopping cups from doing broadcasts. Kind regards, Tarjei -- Tarjei Huse <tarjei(a)nu.no> --

2 2

Re: [OT] iPod compatibility
by Charles philip Chan 01 Aug '05

01 Aug '05

On 29 Jul 2005, pierre(a)cruzio.com wrote: > Yikes! My wife's birthday is next week and she finally has told me that > she wants an iPod. I know nothing about these things and the house > computers run SuSE. Do I have to build a Windows box to support this toy? Amarok supports the ipod. Charles -- "I'd crawl over an acre of 'Visual This++' and 'Integrated Development That' to get to gcc, Emacs, and gdb. Thank you." (By Vance Petree, Virginia Power)

1 0

Re: [suse-security] Multiple NIC scenario
by Torsten E. 01 Aug '05

01 Aug '05

Hi, Wolfgang Leithner scribbled on 01.08.2005 21:01: > Hello Thorsten, > On Monday 09 May 2005 12:53, Torsten E. wrote: [...] Thanks everybody! We decided to walk a different way: a collegue of mine 'found' an hw-router, offering 2 dsl connections and some other stuff. Now he's responsible for it (its not online yet), and I don't have to deal with that prob anymore ... ;) Have a nice day Torsten

1 0

Heimdal kerberos on suse 8.2
by Postmaster＠queenelizabeths.derbyshire.sch.uk 01 Aug '05

01 Aug '05

Firstly I apologise if this is the wrong list to ask this question, I have some linux knowledge but have run out of my depth on this, hopefully there is a simple answer that someone will share with me. We have just "upgraded" our main school domain controllers to windows 2003 sp1 (from NT4), I have then upgraded the suse 9.1 boxes to Samba 3.0.14a and Kerberos 0.6, this following the guidance in the samba how-to enables me to use the machines as member servers, allowing single sign on for mail etc. However, our intranet, which is based around apache 1.3 and Mod_auth runs on a suse 8.2 box, although samba 3.0.14a has been rpmed for this Kerberos 0.6 has not, 0.6 is the minimum version for joining a windows 2003 domain. The question is, what can I do now, even if I download the source and compile it, is it likely to work? Ideally I could do with a RPM but 0.4 is the latest available for suse 8.2 that I could find. Could anyone help me out. -- Rob Keeling Network Manager Queen Elizabeth's Grammar School Ashbourne

2 1