- openSUSE Security

PHP in SuSE Apache.rpm
by Stefan Salzer 05 Aug '99

05 Aug '99

Hiya, I'm having problems with the php built into the apache.rpm delivered with suse. It won't call sendmail in a php3-Program I have, and the FAQ of this program says, that the "safe_mode" has to be disabled in php3.ini. My questions now are: 1. Where is this php3.ini? I can't find any in my system :( 2. What exactly is the safe_mode? 3. The FAQ says, that I can also place sendmail in the safe_exec_dir - where is that? could anyone help me? cya, Stefan Salzer -- Qualität ist nicht was man verspricht, sondern was man hält! ======================================================================== = Wollen Sie unseren kostenlosen Newsletter "cinNews" beziehen? = = unter http://news.cin.de können Sie ihn abonnieren! = = -------------------------------------------------------------------- = = Stefan Salzer e-Mail: salt(a)cin.de = = Connect Internetworking Telefon: +49 6106 8498 0 = = Hauptstr. 139 Telefax: +49 6106 8498 299 = = 63110 Rodgau WWW: http://www.cin.de = = Germany = ========================================================================

2 1

sendmail
by Silvia Nieto 05 Aug '99

05 Aug '99

Hello, I'd like to know how can I desinstall sendmail 8.8.8 ? and how can I install sendmail 8.9.3 ? Thank you

1 0

RE: [suse-security] New users, how?
by Wayne, Steven L SSI-TSEA-353 04 Aug '99

04 Aug '99

>-----Original Message----- >From: cogNiTioN [mailto:cognition@bigfoot.com] >Sent: 03 August 1999 20:43 >To: Wayne, Steven L SSI-TSEA-353 >Cc: suse-security(a)suse.com >Subject: RE: [suse-security] New users, how? > > >On Tue, 3 Aug 1999, Wayne, Steven L SSI-TSEA-353 wrote: > >> "Running Linux" has most of the answers, with both you >should be pretty well >> covered. > >Is that any better than combining the Network and the System Admin's >Guides avaliable free online? > No idea, it's hard for me to read on-line on the train into London, so I take a book. Steven. -- If a man stands in the middle of the forest speaking and there is no woman around to hear him....Is he still wrong?

1 0

RE: Re[2]: [suse-security] New users, how?
by Paxton, Michael 04 Aug '99

04 Aug '99

Unix Power Tools can NOT be beaten as a solution-driven approach to getting to know any Unix flavour. It is especially good at pointing out differences between systems and shells and the meanings of some of those historical artifacts that date back to teletype days. All this whilst squeezing every ounce out of shell scripting. It will give you an appreciation of how refined modern Unix's like Linux are and the background to help you step out and conquer the world beyond BASH. And, of course, it is an O'reilly so it was always going to be a winner... _______________________________________________________________ Michael Paxton Email: <mailto:Michael.Paxton@aihw.gov.au> Michael.Paxton(a)aihw.gov.au Data Management Unit Phone: +61 2 6244 1085 Australian Institute of Health & Welfare -----Original Message----- From: Orlando Ortiz [mailto:OOrtiz@LCSI.com] Sent: Wednesday, August 04, 1999 3:00 PM To: suse-security(a)suse.com Subject: Re[2]: [suse-security] New users, how? I'll throw my one cent in this...I think 'Linux: The Complete Reference' sold at CDROM.com is also a great book. They have a 7th addition coming out soon (if it haven't come out already.) (Yeah, I know the saying is 'I'll throw my 2 cents in' but I don't want to up the value of my opinion.) On Tue, Aug 03, 1999 at 05:21:20PM -0700, Mr. M wrote: > > On Tue, 3 Aug 1999, Wayne, Steven L SSI-TSEA-353 wrote: > > > > > "Running Linux" has most of the answers, with both you should > > be pretty well > > > covered. > > > > Is that any better than combining the Network and the System Admin's > > Guides avaliable free online? > > All the books from O'Reilly are good. I wouldn't recommend purchasing > Running Linux unless the new edition (3rd) is finally out. The 2nd edition > is 4 years old! Yes they are. There are a number of other good ones out there too. Sams has some good stuff (SlackWare Unleashed is pretty good for getting into the meat of Linux, I don't know how recent it is anymore though). > > You may also want to pick up a copy of "Essential System Administration" by > AEleen Frisch. It's a bit dated on Linux, however, it does cover Unix > system administration of various Unices - System V and BSD. The book is > more than just a "how-to". The author shares her years of experience as a > Unix sysadmin and the many aspects related to the job. It's one of my > favorites. > I just really felt the need to say that "Essential System Administration" is an incredible book. It took me from being a decent user to knowing enough (and what else to find out about) to be a fully qualified System Admin. Definately high on my favorites list. The vast majority of what she talks about with Linux is still relevant. Also, most of the stuff on the other Unixen is very relevant. -- Jeff -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/M/>P d-(pu) s+:- a17>? C++(++++) L+++ UL++(+++)@>++++$ P+ E W++@ N+ o? K- w--- O? M V- PS+ PE(--)@ Y++@ PGP t+ 5 X++@ R++@ !tv@ b++ DI++++ D- G e- h! r++ y? ------END GEEK CODE BLOCK------ -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

Re[2]: [suse-security] New users, how?
by Orlando Ortiz 04 Aug '99

04 Aug '99

I'll throw my one cent in this...I think 'Linux: The Complete Reference' sold at CDROM.com is also a great book. They have a 7th addition coming out soon (if it haven't come out already.) (Yeah, I know the saying is 'I'll throw my 2 cents in' but I don't want to up the value of my opinion.) On Tue, Aug 03, 1999 at 05:21:20PM -0700, Mr. M wrote: > > On Tue, 3 Aug 1999, Wayne, Steven L SSI-TSEA-353 wrote: > > > > > "Running Linux" has most of the answers, with both you should > > be pretty well > > > covered. > > > > Is that any better than combining the Network and the System Admin's > > Guides avaliable free online? > > All the books from O'Reilly are good. I wouldn't recommend purchasing > Running Linux unless the new edition (3rd) is finally out. The 2nd edition > is 4 years old! Yes they are. There are a number of other good ones out there too. Sams has some good stuff (SlackWare Unleashed is pretty good for getting into the meat of Linux, I don't know how recent it is anymore though). > > You may also want to pick up a copy of "Essential System Administration" by > AEleen Frisch. It's a bit dated on Linux, however, it does cover Unix > system administration of various Unices - System V and BSD. The book is > more than just a "how-to". The author shares her years of experience as a > Unix sysadmin and the many aspects related to the job. It's one of my > favorites. > I just really felt the need to say that "Essential System Administration" is an incredible book. It took me from being a decent user to knowing enough (and what else to find out about) to be a fully qualified System Admin. Definately high on my favorites list. The vast majority of what she talks about with Linux is still relevant. Also, most of the stuff on the other Unixen is very relevant. -- Jeff -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS/M/>P d-(pu) s+:- a17>? C++(++++) L+++ UL++(+++)@>++++$ P+ E W++@ N+ o? K- w--- O? M V- PS+ PE(--)@ Y++@ PGP t+ 5 X++@ R++@ !tv@ b++ DI++++ D- G e- h! r++ y? ------END GEEK CODE BLOCK------ -- To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com For additional commands, e-mail: suse-security-help(a)suse.com

1 0

News Forwarder
by Michael Hamm 03 Aug '99

03 Aug '99

hi, I like to run a News-Forwarder on my Applikation-Gateway (without any kind of IP-Forwarding). Did anybody have an Idea where to find something like this???? Thanks for every hint Michael --------------------------------------------------------------------------------------------------- Michael Hamm Tel. +352 749292-43 EUROBASE AG Fax +352 740044 2, rue Haute eMail Michael.Hamm(a)Eurobase.lu L-6680 Mertert Web www.eurobase.lu Luxembourg ---------------------------------------------------------------------------------------------------

2 1

RE: [suse-security] Re: [SuSE Security] Re: nessus output
by Wayne, Steven L SSI-TSEA-353 03 Aug '99

03 Aug '99

>-----Original Message----- >From: cogNiTioN [mailto:cognition@bigfoot.com] >Sent: 02 August 1999 20:53 >Cc: suse-security(a)suse.com >Subject: [suse-security] Re: [SuSE Security] Re: nessus output > > >On Fri, 30 Jul 1999, Hubert Mantel wrote: >> >> PS: SuSE: Could someone please configure this mailing >>list, so that I will not get a dozen errors, if someone >>is on vacation or if his or her e-mail address doesnt exist. >>It's pissing me of. :-( > >I agree. It really is a waste of bandwidth, yours for sending > them, but mainly ours for having to download them. > >> IMHO there is nothing we can do about it. The failure >>messages are sent directly to you, our server is not involved. > >As I see it, the error messages are bounced back to >suse-security(a)suse.com which then redistributes it to the list. >Isn't there a way the server can be set up to detect bounced >messages, and not redistribute them. > >I maybe wrong, feel free to flame me if I am. Ok, I will :-) I don't get 'on holiday' or 'out of office' messages, why do you? >cog >-- ,------------------------------, > ================| S H U N A N T I O N L I N E |================ > ================'------------------------------'================ > == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == > ================================================================ > == My New Domain <cognite.net> should be up and running soon. == > ================================================================ > == I use Linux every day to up my productivity - so up yours! == > ================================================================ And your .sig is too long. Steven. -- If a man stands in the middle of the forest speaking and there is no woman around to hear him....Is he still wrong?

1 0

Re: [suse-security] New users, how?
by earendil7＠juno.com 03 Aug '99

03 Aug '99

On Mon, 2 Aug 1999 22:42:47 +0200 Jan Theofel <jtheofel(a)rst-consulting.de> writes: >If you have many users, you might think of writing a script. But always >remember: passwords MAY NOT handled as parameters for programs!!! Why not? since /etc/passwd fields are delimited by colons, a suid script could copy the salt and then put it somewhere else. Hell, you could even go as far as to right your own little program that takes in a password and gives the salt right back to you, since most of the dirty work is already in the c headers. >But don't ask me if Yast will like that. Only for the possibility that you'll >use one day Yast again to add users. But I think it should be able to >manage that. Uhm, Yast runs off of the same files as anything else, so it shouldn't barf over an altered /etc/passwd and /etc/shadow. Totally unrelated question for the sizable german contingent on the list: what does GmbH stand for (both literally in german and english, as well as any nice condescending meanings for this guy with five meager and irregular years of school german)? dan ___________________________________________________________________ Get the Internet just the way you want it. Free software, free e-mail, and free Internet access for a month! Try Juno Web: http://dl.www.juno.com/dynoget/tagj.

4 3

New users, how?
by cogNiTioN 03 Aug '99

03 Aug '99

I want to add a new user to my system (SuSE 5.2), but I don't want to use YAST to do it. How do I add a user manually? All the books seem to say that the adduser cmd is easy to use. I can't find the program. I can manually add a user to the bottom of the /etc/passwd file, but then I have a problem with the passwords, and the shadow file doesn't have an entry for them. Am I being thick, or is SuSE just different to other flavours of Linux? P.S. This is a security issue, because suse-security is the only suse group I'm subscribed to, and also because at the moment I can add a user, but not a password for a user. (I think everyone can see the security problems with that) Thanks cog -- ,------------------------------, ================| S H U N A N T I O N L I N E |================ ================'------------------------------'================ == David M. Webster ++ aka cogNiTioN ++ cognition(a)bigfoot.com == ================================================================ == My New Domain <cognite.net> should be up and running soon. == ================================================================ == I use Linux every day to up my productivity - so up yours! == ================================================================

5 5

RE: [SuSE Security] Qmail (please!)
by Matthias Pigulla 03 Aug '99

03 Aug '99

Hi Chris, like you, I prefer qmail for our mail purposes; we're running some high-load mailing lists, and qmail gives us a much better performance than any other MTA. Besides, I like it's modularity, which makes qmail very extendable. There has been a really _huge_ discussion on the qmail mailing list about the release of qmail as a RPM package with Red Hat, maybe half a year or even a bit longer ago. The thread was that huge that I have to admit I got bored of it and stopped following the postings. So, best best would be to dig the archives to get hold of the copies. (without warranty for 100% correctness) There have been several issues; one of tham was that qmail (as it comes "out of the package") requires you to set up several users before compile time; the UIDs are compiled into the binaries. This makes it difficult to generate RPM binaries that are cross-system protable. Besides, qmail "prefers" to be installed under /var/qmail, what might lead to other difficulties. There are patches to help out, but I cannot remember wheter there has been some licence or whatever trouble distributing patched binaries. As I said, the best thing to do would be to dig out the old postings. Maybe you could give us a brief summary of what was debated *wink*. Best regards, Matthias w e b f a c t o r y matthias pigulla <mp(a)webfactory.de> lessingstrasse 60 - 53113 bonn - http://www.webfactory.de/ fon: 0228-9114455 - fax: 0228-9114499 - icq: 6394233 > -----Original Message----- > From: owner-suse-security(a)suse.com > [mailto:owner-suse-security@suse.com]On Behalf Of Chris L. Mason > Sent: Gn > To: suse-security(a)suse.com > Subject: [SuSE Security] Qmail (please!) > > I just wanted to ask if there any plans to add qmail to a > future version of > SuSE? I much prefer qmail to sendmail as it is small, quick [...] > So, is there any hope for qmail in future versions of SuSE?

2 1