May 2001 - openSUSE Users - openSUSE Mailing Lists

Re: [SLE] root HELP
by A_Johnson-SuseML-e 31 May '01

31 May '01

Dave, Ahh this was tricky for me at first, but by the time I finished I have a somewhat greater understanding of the Linux world... Get this FAQ from here its easy to follow and implement... even if you are not running a web server this has some good ideas. 1.) get the secure web_server doc from www.suse.com/en/linux/webserver 2.) install SECMOD and INSMOD rpms they should be on your distro CDs or at ftp.suse.com/en/suse ... someDIR... I cant remember right now. 3.)run suse_harden with the options y y y y y n y n y y As for the suse_harden file go to http://www.suse.com/~marc and click on the SuSE lizard. After you download the tar.gz file unpak it onto a dir. But here was my hang-up, I could run the darn thing, I tried and tried so finally I went into xwindows KDE2 and use the file manager (Konqueror) and found the file, rename the file to ( harden_suse) then I double clicked it and I was prompted with "open with" and select the CHECK BOX "run terminal" and wala you are prompted to choose YES or NO for the following options..... I chose y y y y y n y n y y 4.) follow the web_server faq 5.) make sure you create a user with root privileges.... a.) add user either by command line or yast b.) open the /etc/passwd file c.) change the 500 (user id) to 0 and the 100 (groupid) to 0 also. Then save /etc/passwd ## use this user when you wish to do any ROOT activities, but I recommend that you create a general user account for general computer usage... AND NEVER BROWS internet as ROOT, its a bad idea!! 6.) I presume that you have SuSEfire wall up and running... If you get the error messages from the following... Starting Firewall Init........ No interfaces active! exiting ... SuSEfirewall: clearing rules now ... done failed Initializing random number generator done Setting up network device eth0 done Setting up network device eth1 done Setting up routing (using /etc/route.conf) done Starting Firewall Initialization: (phase 2 of 3) ............. ......... .... Starting inetd done Starting Firewall Initialization: (phase 3 of 3) Master Resource Control: runlevel 3 has been reached Failed services in runlevel 3: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final THIS IS OKAY, I know its weird but the fire wall starts after the NICs initialize... you can test the fire wall by typing "SuSEfireall help" (for a list of commands) Now that this is dome there are a million things to read about security... a fun one is this , reads like a spy novel http://grc.com/dos/grcdos.htm he he he... Please let me know if you need any help, I learn the quickest by helping others :) Best of LUCK :) Aaron L. Johnson ----- Original Message ----- From: "Dave Gregory" <dave_gregory(a)hardingmarketing.com> To: "'A_Johnson-SuseML-e'" <lj_suse_ml(a)hotmail.com> Sent: Thursday, May 31, 2001 11:45 AM Subject: RE: [SLE] root HELP > Senor Johnson, > Where did you get the information about hardening your SuSE box? I am a > newbie too... and I would love to know how to make mine more secure. > > thanks > dave > > -----Original Message----- > From: A_Johnson-SuseML-e [mailto:lj_suse_ml@hotmail.com] > Sent: Thursday, May 31, 2001 10:31 AM > To: suse-linux-e(a)suse.com > Cc: suse-linux-e(a)suse.com > Subject: [SLE] root HELP > > > Hello, > > It's the new guy again, first I have to admit I can use Linux like a man who > can drive a car but gets into a tank...so it's all in theory, I jus don't > know where all the switches and pedals are yet...no what that is out of the > way and I have notified everyone that I don't know jack I might get a reply > that I can comprehend :) > > Okay I've (well I think I have) secured my Linux box...with SuSE harden, a > few FAQs on disabling services, changing permissions and general > stuff....now I want to create a user that has ROOT ablites with out the ROOT > name. Sounds Easy, I thought it was but NOPE, none of them work entirely > right, kind of like a co-worker of mine ;p Anyway that's my issue. > > Thanks from A NEWBIE, > > Aaron, L. Johnson > > -- > To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com > For additional commands send e-mail to suse-linux-e-help(a)suse.com > > Also check the FAQ at http://www.suse.com/support/faq and the > archives at http://lists.suse.com >

1 0

Re: [SLE] [OT] Athlon Processor
by Álvaro A. Novo 31 May '01

31 May '01

On Wednesday 30 May 2001 18:42, you wrote: > > PS: I saw something about temperature monitoring under linux, is it > possible? I tried sensors but it says cannot open file /proc Take a look at: http://www.suse.com/en/produkte/susesoft/linux/Pakete_pers/sensors.html Hope it helps, Alvaro Novo SuSE 7.1 -=- Kernel 2.4.2-4GB -=- KDE 2.1.1 10:07pm up 13 min, 1 user, load average: 0.04, 0.07, 0.0

4 6

SuSE 7.2 & PostgreSQL 7.1
by Manuel Martínez Valls 31 May '01

31 May '01

Hi, Does anybody know if the PostgreSQL 7.1 package will be included? And Interbase? It would be great also if a kylix demo version were included. Thanks, Manuel Martínez Valls

1 0

The Strange Tale of the DoS Attacks Against GRC.COM!
by Fred A. Miller 31 May '01

31 May '01

"This has horribly changed for the worse with the release of Windows 2000 and the pending release of Windows XP. For no good reason whatsoever, Microsoft has equipped Windows 2000 and XP with the ability FOR ANY APPLICATION to generate incredibly malicious Internet traffic, including spoofed source IP's and SYN-flooding full scale Denial of Service (DoS) attacks!" -- -- ----/ / _ Fred A. Miller ---/ / (_)__ __ ____ __ Systems Administrator --/ /__/ / _ \/ // /\ \/ / Cornell Univ. Press Services -/____/_/_//_/\_,_/ /_/\_\ fm(a)cupserv.org

1 0

Anti-aliased text
by Corvin Russell 31 May '01

31 May '01

Thanks for all the tips that helped me squish that KDE problem. OK, now that my card's driver supports the render extension, I have KDE 2.1.1 with anti-aliasing up and running. It looks great, except for all the applications that don't use it (Opera, Netscape e.g.), which still look like crap. I see that GTK has been patched to enable anti-aliasing. Are there any apps besides KDE native apps that support anti-aliased text yet? Has anyone tried running dynamically linked Opera w/ Qt 2.3.0? C -- Corvin Russell <corvinr(a)sympatico.ca>

2 1

Hard disk performance / hdparm placement
by Mark W. Knecht 31 May '01

31 May '01

Hello, On other Linux distributions I've used hdparm successfully to increase hard disk speed: hdparm -u 1 -d 1 /dev/hda I've tested it out by hand on this box and it seems to be working fine. The standard set of instructions I've used has had me place this in the rc.sysinit file, which I'm not finding in the SuSE distribution. I did a search on the SuSE site for both hdparm and rc.sysinti and found very little... So: 1) What is the equivalent file under SuSE for rc.sysinit 2) Is there a 'good' way to do this configuration using YaST or something like that? 3) Are others here doing this to improve their system performance? Anything else? Thanks, Mark

2 1

Re: [SLE] Microsoft Software Cost Analysis (Was: Re: [SLE] suse 7 .2!!)
by Steven Hatfield 31 May '01

31 May '01

I don't know! Mine has been stuck for the last 6 months that I've been running Linux full time! Every time I read an article like the one at: http://grc.com/dos/grcdos.htm My smile just widens! I know I look like a complete idiot, smliing all the time, but I can't help it :-) I guess people are just used to seeing all those frowning and pouting Windows users, who wish they had some of their money back as they look at a BSoD or lose their work to a crashing office program. Have a great day! -Steven On Thursday 31 May 2001 01:21 pm, Dave Gregory wrote: > MY SMILE IS STUCK!!! What do I do Steve? > > -----Original Message----- > From: Curtis Rey [mailto:crrey@home.com] > Sent: Thursday, May 31, 2001 9:44 AM > To: Steven Hatfield; suse-linux-e(a)suse.com > Subject: Re: [SLE] Microsoft Software Cost Analysis (Was: Re: [SLE] suse > 7.2!!) > > > A(F#$%ing)MEN. That's the info I was looking for. May I have your > permission to use parts of this to mail to editors and mag writers in > response to their articles? If you'ld like I can make sure that the source > is either declarative or anonymous. > > Cheeeeeeeeeeeeers, Curtis Rey > > On Thursday 31 May 2001 09:16 am, Steven Hatfield wrote: > > On Thursday 31 May 2001 01:56 am, you wrote: > > > On Wednesday 30 May 2001 22:51, Ben wrote: > > > >I would rather pay $50 every 6 > > > > months then $300 (W2K Feb 2000) then have to spend another $150-200 > > for > > > > > XP 18 months later..and when Linux improves..it impoves..it's not > > > > just cosmetic most of the time. This is just my opinion. > > > > > > I would rather pay $300.00 for 3 Linux Distros than be given Microsoft > > > Windows for free. > > > > > > How the hell M$ sold so much software is a mystery to me. It's really > > > pathetic stuff. The detractors of Linux say it comes with no > > > applications. Are these people brain dead? All Linux distros come with > > > C, C++, Python and Perl. All you get with M$ is Visual Basic. I'd > > > rather use my K+E Log-Log Duplex Decitrig slide rule that that stuff. > > > > So let's do some addition. I'm going to give it to you right between the > > eyes, so that everyone here knows what a business *should be paying* for > > Microsoft's software. The "business" could also be a department in a > > larger > > > business, but I'm assuming that the "business" has 25 people or less, > > will have 1 central server that will be running SQL Server 2000 for their > > database, that there are 24 "sales/marketing people and/or project > > managers" and 1 "developer". In a real scenario, you'd have to accomodate > > a > > > "DBA", at least 1 "sysadmin", and at least 1 "computer operator" that > > would > > > run batch programs to process whatever data the business was in to. There > > would probably be more than 1 developer too, but if this "business" is > > just > > > starting off, they might be running with a lean crew, which would force > > the > > > developer to wear many hats. > > > > I am not going to take into account the price of any hardware, this is > > just > > > a study in the cost of doing business using Microsoft's software > > products. I'm also depicting a business starting from scratch -- no > > "upgrades". My goal is to show you how much money a business pays to > > Microsoft just for their software. > > > > Disclaimer: This is not a definitive guide, it's just me (a developer who > > has been working with Microsoft's software for 10 years) doing a bit of > > cost analysis. I was also a sysadmin for a company that switched to be > > all Microsoft and have seen this first hand. Prepare to be shocked. > > > > These listings are all from http://www.outpost.com, which is a 6 year old > > online retailer, and which I've found to have somewhat decent pricing. > > I'll > > > even provide the item numbers, and URLs, in case you want to verify > > everything for yourself. > > > > Item No: 99376 > > Product: Microsoft Windows 2000 Advanced Server with 25 Client Access > > Licenses Price: $3,549.00 > > URL: http://shop2.outpost.com/product/99376 > > NOTE: The Advanced Server edition is required to run SQL Server 2000. > > > > Item No: 99826 > > Product: Microsoft SQL Server 2000 Standard Edition (1 Processor License) > > Price: $4,800.00 > > URL: http://shop2.outpost.com/product/99826 > > NOTE: This might not be the right version, but who cares. > > > > Item No: 11690 > > Product: Microsoft Exchange 2000 Enterprise Server (25 Clients) > > Price: $6,529.95 > > URL: http://shop2.outpost.com/product/11690 > > > > Item No: 99373 > > Product: Microsoft Windows 2000 Professional > > Price: $279.95 > > URL: http://shop2.outpost.com/product/99373 > > NOTE: You need 25 of these. > > > > Item No: 54150 > > Product: Microsoft Office 2000 Professional > > Price: $549.95 > > URL: http://shop2.outpost.com/product/54150 > > NOTE: You need 25 of these. > > > > Item No: 67374 > > Product: Microsoft Visual Studio Professional 6.0 with Plus Pack > > Price: $1,029.00 > > URL: http://shop2.outpost.com/product/67374 > > > > Ok, So here we do the final addition: > > $3,549.00 > > $4,800.00 > > $6,529.95 > > $279.95x25=$6998.75 > > $549.95x25=$13748.75 > > $1029.00 > > ---------------------------------------- > > For a grand total of: $36,655.45 > > > > And that is just in software purchases alone... and I have left out a > > *ton* > > > of other software that people would need, like resource kits and regular > > 3rd party business type software (anti-virus, system management, backup, > > etc). > > > > I wouldn't be surprised if a business "start up" would pay more than > > $40,000 in just regular software licenses. Keep in mind, there are only > > 25 "allowed" client accesses to the server. So after spending $40K large, > > you are *still* limited in what you can do! > > > > So there you have it.. why open source software will kick the living sh*t > > out of closed source Microsoft software... as soon as businesses cannot > > easily and transparently pirate this software, they *will* come looking > > for > > > something else. And we'll be ready. > > > > Or you can get SuSE's 7.1/7.2 Professional distribution, which comes with > > $40,000 worth of software, for the low low price of just $70.00. > > > > I hope your face doesn't stay glued in that big silly grin you have now > > ;^) > > > -Steven

1 0

KDE gives me the BSOD!
by Daniel Woodard 31 May '01

31 May '01

I have a fairly regular X/KDE crash that is now officially on my nerves. System: Homebuilt dual PIII500 on SuperMicro board a leftover Creative 3d Blaster Savage4 I installed SuSE 7.1, saw that it was good, and then upgraded via SuSE rpm: Xfree 3xx to Xfree 403 upgraded KDE2 to KDE 2.1.1 (It uses Xfree3xx on the default install) I run Sax2 to configure the new Xfree4 and it sees the video card and all that. I set it fairly mellow, 1600x1200 at 16bpp on my Sony 420GS 19 inch. ---- Everything works, I get on and mess around, but then, a little less than half the time, when I logout of X, it kicks out, the screen flashes, it's about to return to the terminal, then, poof, a black screen of death. A lot of the time, it makes it back to the terminal. I quit using the KDM, and I've been anal about quitting all the apps, and everything real nice, you know, try to sneak out real calm like. No effect. Feels very random. I have done several clean installs (for practice mostly), and this happened each time. Now I have the computer set-up nice, but for the BSOD. I have to basically *unplug* the computer, I can't seem to get control any other way. Then it runs fsck on my 30GB and then my 60GB drive (yawn city) and eventually, it's rebooted. This is no way to live. Any tips on how to begin trouble shooting this?

3 2

Multi network configs for a laptop.
by Jason Corcoran 31 May '01

31 May '01

List, I have checked google etc and came across a util netenv, for allowing multiple network configurations on my laptop. Has anyone used it, how do I get it to start before my system configures it networking options? Thanks Jason. -- _____________________ Thanks. Jason Corcoran. email : jason(a)corcoran.tc sms : jay(a)corcoran.tc

2 1

Setting up a CD-RW after the fact
by wilson＠claborn.net 31 May '01

31 May '01

Howdy, Just a quick question: I've got a IDE CD-RW I'd like to install onto my (already installed) SuSE 7.1 system, and when I started poking around for documentation, it looks like maybe the only way to burn a CD is to set up ide-scsi emulation. This rather surprises me: cant' the apps, or the kernel for that matter, just recognize an IDE burner? Bummer if not. This is the sort of thing that keeps newbies away from Linux :-\ Anyway, just wanted to make sure I wasn't heading off on the wrong track before I dig into setting up SCSI emulation. This reminds me: one thing YaST2 really lacks is tools for installing hardware after the install. NICs, printers video and sound cards are about the only thing you can set up with YaST2 post-install. I wish SuSE would put a good bit of work into that. Especially for things like Removable media - LS120s, Zips, CD burners. P.S. What apps do y'all like best? KOnCd and kreatecd look like the best ones. ---------------------------------------------------- Jonathan Wilson System Administrator Cedar Creek Software http://www.cedarcreeksoftware.com Central Texas IT http://www.centraltexasit.com

4 3